Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
File: V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json)
Hash identifier: IujzYYoumIeMFs1ZRU/3V2wWufOp2PDyawSSUdj7SVM=
Subject key identifier: CE:44:07:88:05:FA:92:54:57:D7:88:A1:36:DF:3C:D3:62:71:5B:39
Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
Certificate issuer: /CN=57db143c17fb051944426a79f24334c25cdbc234
Certificate serial: 0197B70EEB51C71BEF4D722AC76DC95A1790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
Manifest number: 8A
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: LGPCXsstqIHfBFoiMfK-mbsBUjw.roa (hash: 7stOVhfnEQBs17GDG+FcbDZCYanm4iM/V5R3N/Vll+k=)
2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: iYVU/i+XzNtJP0eW+XeIvIQWFKlFUEwRP6vUQ2rl7z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:eb:51:c7:1b:ef:4d:72:2a:c7:6d:c9:5a:17:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=ce44078805fa925457d788a136df3cd362715b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:47:35:ae:bf:cf:be:ba:d1:91:9b:e6:8e:
15:42:d3:c8:9d:1c:35:6e:0d:30:62:ae:ca:68:9c:
2f:76:f3:cf:e1:21:58:d5:31:59:c0:e2:37:d3:4f:
20:37:07:db:6f:d8:59:fc:85:23:76:22:ad:e1:9e:
19:92:ca:cc:25:bf:aa:d3:6b:40:9a:48:fe:5f:de:
8f:4f:5a:cc:09:80:7f:8b:eb:7a:22:65:81:2f:c4:
95:dd:bb:2b:5b:fc:4b:f6:dc:d5:98:40:28:ec:bd:
c3:df:69:ec:e7:4d:28:00:73:19:a8:2f:37:b6:43:
fa:63:2a:1b:71:33:70:2b:b3:74:20:ac:d7:fc:96:
63:4d:d0:61:f7:31:15:4e:45:3b:e7:be:31:31:1c:
31:76:0d:1e:42:86:a9:78:ad:0a:e0:99:3d:91:d8:
23:1c:21:6b:95:88:d0:02:3a:37:bf:e9:bb:9b:70:
13:22:c2:36:e1:73:4d:40:68:a7:99:6b:1a:fc:4d:
dd:1e:64:ee:33:d5:f8:24:f2:6b:8d:bc:12:60:1b:
d3:8e:46:5d:28:5e:d9:ca:6e:a8:cd:9b:f9:4d:24:
14:33:b1:06:2a:b9:1a:35:d9:b1:36:df:35:5b:42:
a6:86:f1:75:02:26:48:e6:26:c7:43:40:36:10:aa:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:44:07:88:05:FA:92:54:57:D7:88:A1:36:DF:3C:D3:62:71:5B:39
X509v3 Authority Key Identifier:
keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c0:06:c0:38:e5:a3:64:e8:3e:db:c2:cf:4c:b5:1f:25:d4:
0e:da:47:5d:b9:52:a7:dc:f3:4f:d1:65:f2:15:8d:6a:76:e1:
fd:c1:5c:40:4f:f3:b5:32:c4:09:e8:8a:fb:1f:72:62:d7:37:
6e:51:94:7b:b0:c3:28:16:4f:c0:ff:33:2f:ae:74:77:70:c0:
15:b2:f6:06:0b:e3:35:08:a0:25:48:8c:d0:81:8d:c6:70:ee:
c0:3e:8c:6e:37:d8:c8:73:35:3c:99:b6:f3:c7:8f:43:0d:cf:
05:9f:c4:e2:69:ac:d1:32:d1:35:00:11:1a:20:b9:57:74:9e:
ec:b4:85:79:2b:b0:5a:b5:9e:10:a5:36:9a:d9:6f:ea:01:11:
81:91:10:8d:56:03:9e:0f:ac:8e:4e:0e:75:6b:b9:10:b2:9d:
a0:ec:9b:c7:24:d9:b7:e1:91:a7:be:74:35:a7:d8:11:d5:d9:
08:ce:af:88:6f:d8:09:42:29:a4:8c:1a:77:e0:b5:6e:e5:e9:
8d:4b:41:9d:ec:f4:1f:80:98:8b:b6:04:7c:50:a3:d2:7d:f1:
bc:2c:1e:07:7f:e5:ca:3a:36:b3:9d:01:65:ee:c7:c5:0d:9d:
a8:8d:83:7c:62:35:be:55:91:07:8c:5e:b9:97:bd:20:15:d4:
7f:14:c9:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DutRxxvvTXIqx23JWheQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZGIxNDNjMTdmYjA1MTk0NDQyNmE3OWYyNDMzNGMyNWNk
YmMyMzQwHhcNMjUwNjI4MTUwMTM3WhcNMjUwNjI5MTUwMTM3WjAzMTEwLwYDVQQD
EyhjZTQ0MDc4ODA1ZmE5MjU0NTdkNzg4YTEzNmRmM2NkMzYyNzE1YjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLRHNa6/z7660ZGb5o4VQtPInRw1
bg0wYq7KaJwvdvPP4SFY1TFZwOI3008gNwfbb9hZ/IUjdiKt4Z4ZksrMJb+q02tA
mkj+X96PT1rMCYB/i+t6ImWBL8SV3bsrW/xL9tzVmEAo7L3D32ns500oAHMZqC83
tkP6YyobcTNwK7N0IKzX/JZjTdBh9zEVTkU7574xMRwxdg0eQoapeK0K4Jk9kdgj
HCFrlYjQAjo3v+m7m3ATIsI24XNNQGinmWsa/E3dHmTuM9X4JPJrjbwSYBvTjkZd
KF7Zym6ozZv5TSQUM7EGKrkaNdmxNt81W0KmhvF1AiZI5ibHQ0A2EKp5fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5EB4gF+pJUV9eIoTbfPNNicVs5MB8GA1UdIwQY
MBaAFFfbFDwX+wUZREJqefJDNMJc28I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDEzODAtZjgyMS00NDNhLTliZjIt
YmRhNGY4ZWIxYWQ5LzEvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85MDEzODAtZjgyMS00NDNhLTliZjItYmRhNGY4ZWIxYWQ5
LzEvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMAGwDjl
o2ToPtvCz0y1HyXUDtpHXblSp9zzT9Fl8hWNanbh/cFcQE/ztTLECeiK+x9yYtc3
blGUe7DDKBZPwP8zL650d3DAFbL2BgvjNQigJUiM0IGNxnDuwD6MbjfYyHM1PJm2
88ePQw3PBZ/E4mms0TLRNQARGiC5V3Se7LSFeSuwWrWeEKU2mtlv6gERgZEQjVYD
ng+sjk4OdWu5ELKdoOybxyTZt+GRp750NafYEdXZCM6viG/YCUIppIwad+C1buXp
jUtBnez0H4CYi7YEfFCj0n3xvCweB3/lyjo2s50BZe7HxQ2dqI2DfGI1vlWRB4xe
uZe9IBXUfxTJZw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:51 2025 by rpki-client