Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier: E8zap1nUH1DUD8oi8TBh/HBlL0ZedRNcs6S0lDa0xqg=
Subject key identifier: 49:12:84:79:C2:E9:93:DA:98:BD:DE:42:61:ED:03:D3:2F:40:D0:FF
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer: /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial: 0197B7B318455B8A31C18161972E9E5D3588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number: 13AA
Signing time: Sat 28 Jun 2025 18:00:57 +0000
Manifest this update: Sat 28 Jun 2025 18:00:57 +0000
Manifest next update: Sun 29 Jun 2025 18:00:57 +0000
Files and hashes: 1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: 3NDmytnjCg966FTSEUF8PnZ+c9Gtvurkw2vN/wQHVZ4=)
2: rtyY9Cz1KYossj4NRjvNjMhwRZI.roa (hash: KYSFbkeXEHZUiKzf8OS4b0YogJmArNqO7BI7cVGBHSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:18:45:5b:8a:31:c1:81:61:97:2e:9e:5d:35:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Validity
Not Before: Jun 28 18:00:57 2025 GMT
Not After : Jun 29 18:00:57 2025 GMT
Subject: CN=49128479c2e993da98bdde4261ed03d32f40d0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:5f:2a:a8:0f:92:14:c6:d0:4d:79:bb:67:
9d:bb:09:1f:d8:4c:eb:d6:68:ec:51:e9:2a:c3:77:
39:42:e7:03:b9:02:20:39:47:c8:34:08:a7:b8:8a:
23:85:0c:d9:ab:86:3f:98:15:4f:76:0c:d5:e8:a0:
6c:a0:8e:be:28:4c:c1:9e:e9:43:33:2e:7a:6d:3a:
90:48:48:b0:2b:5e:71:10:fa:f1:d8:90:8c:db:5b:
8b:ee:70:56:1c:37:6a:35:84:db:8e:2b:ff:d0:24:
7e:74:65:e4:ba:1d:6f:70:8d:e5:b9:8b:b9:3f:83:
6f:a9:15:b6:da:cf:4e:46:de:b0:5e:14:35:76:7b:
44:41:9b:3d:60:c4:b0:7a:09:e0:6f:9c:15:26:b2:
89:47:2f:91:1d:3f:ce:32:9b:d5:57:21:c2:a9:e4:
b8:b7:93:88:45:ee:86:e6:25:79:4c:ff:98:ba:21:
6f:fc:37:ce:d3:17:96:87:26:73:71:c6:5c:f7:9e:
5e:e7:5a:45:39:a5:88:84:e3:89:90:8e:ef:f8:07:
51:99:4d:f9:e6:03:4c:bc:3a:00:16:3d:f8:1d:be:
72:38:15:1d:a0:3e:ec:4d:ae:1b:94:75:cf:3d:02:
7e:95:11:be:57:5c:3e:c0:63:e3:c0:79:d8:30:1f:
41:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:12:84:79:C2:E9:93:DA:98:BD:DE:42:61:ED:03:D3:2F:40:D0:FF
X509v3 Authority Key Identifier:
keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d2:39:fd:a0:7d:b9:b2:25:a0:64:22:27:59:9b:97:2a:7a:
a5:af:2b:f8:a2:3a:ef:c1:44:9d:46:2e:5e:25:2b:67:8d:40:
5c:4f:1c:0a:5e:f3:8d:a1:fe:d6:fc:4c:ff:b3:84:4b:f6:65:
de:0c:e8:d7:08:26:55:02:6e:13:a2:09:94:1a:ee:b7:a5:5b:
dd:6f:0f:f7:72:f6:56:75:bd:25:1e:1f:14:1f:e3:57:3f:03:
9a:e7:11:84:91:96:75:59:c5:4c:4a:34:41:73:d7:76:d3:62:
21:0c:66:f2:82:8a:c4:a2:b4:fd:d3:73:cd:5e:75:f1:fa:74:
8a:ba:40:0c:63:35:99:f0:dd:ee:19:f1:45:2b:83:cb:d4:5a:
9e:48:92:c9:66:b1:b3:c9:55:e7:56:78:35:b5:a4:3b:5e:34:
85:51:ef:51:5b:ca:46:c3:90:5c:c5:6a:7a:29:86:64:b7:7b:
73:c9:4d:2e:80:b5:eb:07:f6:62:48:4f:98:62:7c:69:93:5d:
5d:38:ef:63:b4:94:51:5c:61:26:91:0e:4c:a8:c5:9f:4e:90:
d4:af:c0:08:9f:d7:08:15:01:1b:2f:61:24:30:b2:f0:6f:1b:
d9:2a:e2:ad:f5:5c:5c:f0:a2:ae:ce:e6:3f:56:63:b1:56:c4:
e8:a2:77:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sxhFW4oxwYFhly6eXTWIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OWNiOTIzZTQwNjliZmUzNjJlMmQ5NmZmYWIyZmYzMTA3
ODMxN2EwHhcNMjUwNjI4MTgwMDU3WhcNMjUwNjI5MTgwMDU3WjAzMTEwLwYDVQQD
Eyg0OTEyODQ3OWMyZTk5M2RhOThiZGRlNDI2MWVkMDNkMzJmNDBkMGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkxfKqgPkhTG0E15u2eduwkf2Ezr
1mjsUekqw3c5QucDuQIgOUfINAinuIojhQzZq4Y/mBVPdgzV6KBsoI6+KEzBnulD
My56bTqQSEiwK15xEPrx2JCM21uL7nBWHDdqNYTbjiv/0CR+dGXkuh1vcI3luYu5
P4NvqRW22s9ORt6wXhQ1dntEQZs9YMSwegngb5wVJrKJRy+RHT/OMpvVVyHCqeS4
t5OIRe6G5iV5TP+YuiFv/DfO0xeWhyZzccZc955e51pFOaWIhOOJkI7v+AdRmU35
5gNMvDoAFj34Hb5yOBUdoD7sTa4blHXPPQJ+lRG+V1w+wGPjwHnYMB9BHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkShHnC6ZPamL3eQmHtA9MvQND/MB8GA1UdIwQY
MBaAFPWcuSPkBpv+Ni4tlv+rL/MQeDF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVp5NUktUUdtXzQyTGkyV182c3Y4eEI0TVhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MjYyOTgtMDI3OS00YjkzLWE5ODUt
YTA0YWQyMmUzM2YzLzEvOVp5NUktUUdtXzQyTGkyV182c3Y4eEI0TVhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MjYyOTgtMDI3OS00YjkzLWE5ODUtYTA0YWQyMmUzM2Yz
LzEvOVp5NUktUUdtXzQyTGkyV182c3Y4eEI0TVhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9I5/aB9
ubIloGQiJ1mblyp6pa8r+KI678FEnUYuXiUrZ41AXE8cCl7zjaH+1vxM/7OES/Zl
3gzo1wgmVQJuE6IJlBrut6Vb3W8P93L2VnW9JR4fFB/jVz8DmucRhJGWdVnFTEo0
QXPXdtNiIQxm8oKKxKK0/dNzzV518fp0irpADGM1mfDd7hnxRSuDy9RankiSyWax
s8lV51Z4NbWkO140hVHvUVvKRsOQXMVqeimGZLd7c8lNLoC16wf2YkhPmGJ8aZNd
XTjvY7SUUVxhJpEOTKjFn06Q1K/ACJ/XCBUBGy9hJDCy8G8b2SrirfVcXPCirs7m
P1ZjsVbE6KJ35A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:37 2025 by rpki-client