Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier: HjcL6Q1Dw1G84E7OOQY7W14bCFc11iZu3okeegBDMGI=
Subject key identifier: C3:F4:4B:33:AA:0D:FE:89:5D:6A:32:4A:62:62:C8:65:66:AE:24:9C
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial: 0197B632B261E80ACA20B31DAC40D8777FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:05 +0000
Manifest this update: Sat 28 Jun 2025 11:01:05 +0000
Manifest next update: Sun 29 Jun 2025 11:01:05 +0000
Files and hashes: 1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: 7o36JxkKmbbbTqloO4B8A5CbmaRG8T//Nn6PLgeXZW4=)
2: Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (hash: 5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b2:61:e8:0a:ca:20:b3:1d:ac:40:d8:77:7f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Validity
Not Before: Jun 28 11:01:05 2025 GMT
Not After : Jun 29 11:01:05 2025 GMT
Subject: CN=c3f44b33aa0dfe895d6a324a6262c86566ae249c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:2c:71:1f:76:0c:b6:25:df:30:94:e9:32:
f8:1b:66:ff:4b:e3:2d:e4:0d:b4:47:db:cf:10:dd:
ca:99:02:ad:81:6c:9f:8e:36:73:e3:25:66:7e:e9:
96:48:45:14:ed:93:26:c1:c2:d3:c7:f3:94:56:3c:
4b:ae:17:8e:96:75:be:40:45:b8:6a:66:ce:9c:ec:
6f:30:5e:3a:11:8d:7f:c5:29:5b:03:5d:a0:a4:80:
62:32:d1:b2:22:80:4e:d7:5f:8a:cc:b3:fe:2c:d5:
db:55:f4:51:29:10:56:4c:e5:ab:04:69:fc:5c:73:
d4:44:6a:ec:49:b9:0d:b9:db:36:4e:45:76:5f:95:
e2:f9:bc:32:7c:37:d2:1d:ab:32:73:09:b4:18:8f:
b8:7f:1b:14:4b:3f:75:d6:fc:67:4c:5d:22:a8:7e:
63:a7:f0:a9:90:90:91:20:90:49:58:df:b1:2a:4c:
ca:95:29:96:86:53:7a:43:32:b4:14:45:68:53:b1:
99:5e:22:5f:bf:29:64:05:f0:70:b8:ab:6e:8e:e7:
5d:4e:56:a5:bd:95:b1:47:b0:54:e2:21:07:ab:cc:
a6:e2:49:0d:09:49:31:3d:02:9a:0e:5e:bf:9b:63:
b3:95:c5:c3:96:c2:b3:06:5e:60:bc:b8:88:03:91:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F4:4B:33:AA:0D:FE:89:5D:6A:32:4A:62:62:C8:65:66:AE:24:9C
X509v3 Authority Key Identifier:
keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5c:44:0d:99:27:a1:7b:ed:fc:14:31:78:f9:d2:29:bd:e7:
8e:00:2f:d5:ee:91:c1:15:33:30:21:45:79:e8:e3:7c:6d:2c:
fd:06:02:1d:65:64:b4:e4:f3:1c:83:54:98:cc:51:59:84:d5:
ec:0f:09:41:79:56:ca:51:c0:e0:a5:57:fd:42:9e:5f:be:66:
8e:94:45:54:61:2b:33:d0:9d:ce:f8:64:31:cf:46:e1:f7:43:
81:3c:2b:aa:d8:e9:60:dd:10:05:6c:17:bc:e4:f0:a0:ef:92:
77:21:19:f5:99:2c:d6:d4:de:bf:24:5c:89:59:54:42:a0:16:
7b:00:2d:88:7d:e6:e8:52:88:f4:89:3d:ae:c0:34:15:a9:51:
30:03:0c:67:31:04:9f:c3:d4:66:1a:9d:5e:0e:cc:ee:5e:70:
b3:7c:88:5f:16:23:f2:49:67:ed:c3:29:de:9e:2c:65:5c:3c:
52:9d:d5:82:dc:52:19:7a:9f:c9:0f:66:a4:8f:a7:09:47:2e:
76:0d:6e:d4:f3:81:d0:ce:b8:75:92:02:04:e0:65:38:e3:1a:
f0:3c:ff:4b:f4:6d:5e:bb:b8:08:2b:81:30:11:49:fe:90:38:
bd:ed:90:69:f5:ae:cb:3e:61:8c:cf:8a:e1:82:ee:20:ba:36:
8a:8d:2c:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MrJh6ArKILMdrEDYd3/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2RjNTk5NmM4MTc4YzBkZTJlYTIwNDk5ZWViZGVhZGU0
MDIzZWIwHhcNMjUwNjI4MTEwMTA1WhcNMjUwNjI5MTEwMTA1WjAzMTEwLwYDVQQD
EyhjM2Y0NGIzM2FhMGRmZTg5NWQ2YTMyNGE2MjYyYzg2NTY2YWUyNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8MscR92DLYl3zCU6TL4G2b/S+Mt
5A20R9vPEN3KmQKtgWyfjjZz4yVmfumWSEUU7ZMmwcLTx/OUVjxLrheOlnW+QEW4
ambOnOxvMF46EY1/xSlbA12gpIBiMtGyIoBO11+KzLP+LNXbVfRRKRBWTOWrBGn8
XHPURGrsSbkNuds2TkV2X5Xi+bwyfDfSHasycwm0GI+4fxsUSz911vxnTF0iqH5j
p/CpkJCRIJBJWN+xKkzKlSmWhlN6QzK0FEVoU7GZXiJfvylkBfBwuKtujuddTlal
vZWxR7BU4iEHq8ym4kkNCUkxPQKaDl6/m2OzlcXDlsKzBl5gvLiIA5EE0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMP0SzOqDf6JXWoySmJiyGVmriScMB8GA1UdIwQY
MBaAFPV9xZlsgXjA3i6iBJnuvereQCPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82N2UzYWMtYzMzMi00ZDEzLTgzZWYt
YzdiMTBkNTA1Y2ZlLzEvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82N2UzYWMtYzMzMi00ZDEzLTgzZWYtYzdiMTBkNTA1Y2Zl
LzEvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFxEDZkn
oXvt/BQxePnSKb3njgAv1e6RwRUzMCFFeejjfG0s/QYCHWVktOTzHINUmMxRWYTV
7A8JQXlWylHA4KVX/UKeX75mjpRFVGErM9CdzvhkMc9G4fdDgTwrqtjpYN0QBWwX
vOTwoO+SdyEZ9Zks1tTevyRciVlUQqAWewAtiH3m6FKI9Ik9rsA0FalRMAMMZzEE
n8PUZhqdXg7M7l5ws3yIXxYj8kln7cMp3p4sZVw8Up3VgtxSGXqfyQ9mpI+nCUcu
dg1u1POB0M64dZICBOBlOOMa8Dz/S/RtXru4CCuBMBFJ/pA4ve2QafWuyz5hjM+K
4YLuILo2io0s7A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:04 2025 by rpki-client