Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
File: 9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json)
Hash identifier: vtM8Br5aQk1+cxjGy5FNaYLI/2QokU0mrs1xjYYud+c=
Subject key identifier: BB:09:EB:3B:32:5B:AA:DB:F9:CE:37:4E:6F:94:5A:E0:35:5B:C1:9C
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial: 0197B77CED5F13FB543AC04D64EBD72C7E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
Manifest number: 03D4
Signing time: Sat 28 Jun 2025 17:01:47 +0000
Manifest this update: Sat 28 Jun 2025 17:01:47 +0000
Manifest next update: Sun 29 Jun 2025 17:01:47 +0000
Files and hashes: 1: 6vjl9U2iQ2PU377HYgeQNGNavVA.roa (hash: 9lo8xMTqnMTjqGzAvxVHUfsjdWxdily2JUl3SHSBWVE=)
2: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: /U11M+6ImFL9neZqGF2vtdvDIzn2qS9slctcP2D7oiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ed:5f:13:fb:54:3a:c0:4d:64:eb:d7:2c:7e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Validity
Not Before: Jun 28 17:01:47 2025 GMT
Not After : Jun 29 17:01:47 2025 GMT
Subject: CN=bb09eb3b325baadbf9ce374e6f945ae0355bc19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:2a:2e:fe:4b:e7:61:d0:22:cc:a6:6d:2b:
33:f7:2c:f8:ba:66:38:8b:32:33:77:50:0b:03:32:
9f:08:b7:ab:19:46:d8:c8:fe:c9:be:33:7b:b2:54:
a1:23:c4:0c:11:aa:64:52:af:53:84:08:21:97:9a:
87:74:02:d6:df:f0:fe:84:7a:99:6b:12:f7:75:e9:
74:a3:c0:92:c5:44:9c:af:ec:7d:19:19:28:e8:57:
ea:3b:cb:5d:a1:13:9c:93:28:54:2a:63:ad:06:a2:
50:a4:c5:de:2e:e3:24:f4:37:0c:03:3c:b0:d1:ac:
90:3e:e7:43:30:23:c1:dd:c1:64:52:34:29:9f:35:
61:73:c6:33:74:61:ff:c1:02:8c:e4:e8:57:80:e2:
ea:21:35:2a:96:d3:c8:c5:cf:fb:2f:af:7d:49:89:
ca:be:5a:05:57:e4:df:70:ef:8a:30:1e:77:10:09:
be:d5:b8:40:56:ee:66:22:ba:17:94:19:52:8a:31:
c6:fc:3e:d6:20:23:74:bc:71:c6:c1:5b:f4:1b:bb:
27:cb:9a:b0:e2:d0:cc:8d:2b:b0:53:84:b1:e2:9b:
e0:ad:40:da:b9:c0:43:a7:f3:3c:8a:41:3e:9f:01:
cb:69:9c:e7:e2:38:a7:2a:33:ce:37:b7:aa:2f:59:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:EB:3B:32:5B:AA:DB:F9:CE:37:4E:6F:94:5A:E0:35:5B:C1:9C
X509v3 Authority Key Identifier:
keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e2:38:62:0a:2d:93:c4:83:26:43:f1:c9:74:ed:c0:4c:67:
30:dd:ca:19:92:2e:03:25:9b:e8:43:85:69:d9:68:1b:9a:f6:
72:f2:c0:0b:f3:c0:39:91:80:93:08:2e:f0:54:2b:d9:2c:e7:
c4:bf:a4:29:dd:81:5f:4d:7a:9c:af:1e:e8:b6:95:39:a4:6d:
bf:d9:58:5f:4f:50:21:b9:6b:13:bc:b6:05:54:15:32:76:a8:
cb:ca:49:05:fd:a5:fa:46:37:7d:25:5a:82:1a:c2:2f:2e:94:
c7:d6:05:1b:65:1a:f8:5d:80:32:d2:eb:5b:4a:06:97:a2:04:
8e:24:1e:c3:53:fc:d8:1f:30:c4:a7:74:86:bd:cc:d1:84:ac:
af:28:3d:59:ed:98:4b:97:25:3c:f5:80:3f:c7:d1:a7:4a:5f:
97:fe:18:2a:06:83:72:a2:30:67:4b:23:01:7c:e6:74:a1:00:
27:4c:9a:d0:af:a1:47:d1:0e:16:96:f3:98:1e:d0:70:84:d5:
4c:bb:d2:d3:24:4e:5c:cc:e3:9a:6a:41:2d:7c:de:e1:10:86:
c3:37:11:90:cc:2f:0f:52:83:10:f6:a9:2a:d3:d3:60:ea:85:
bc:ef:cd:9e:6f:80:64:eb:e3:0e:72:8f:20:10:74:e8:50:b1:
09:59:bd:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fO1fE/tUOsBNZOvXLH4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YWJjYzc5YTM2N2Q5YzAxMmMxNjg0YTg0MjI5OTZjZGM0
M2RlNzYwHhcNMjUwNjI4MTcwMTQ3WhcNMjUwNjI5MTcwMTQ3WjAzMTEwLwYDVQQD
EyhiYjA5ZWIzYjMyNWJhYWRiZjljZTM3NGU2Zjk0NWFlMDM1NWJjMTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk4qLv5L52HQIsymbSsz9yz4umY4
izIzd1ALAzKfCLerGUbYyP7JvjN7slShI8QMEapkUq9ThAghl5qHdALW3/D+hHqZ
axL3del0o8CSxUScr+x9GRko6FfqO8tdoROckyhUKmOtBqJQpMXeLuMk9DcMAzyw
0ayQPudDMCPB3cFkUjQpnzVhc8YzdGH/wQKM5OhXgOLqITUqltPIxc/7L699SYnK
vloFV+TfcO+KMB53EAm+1bhAVu5mIroXlBlSijHG/D7WICN0vHHGwVv0G7sny5qw
4tDMjSuwU4Sx4pvgrUDaucBDp/M8ikE+nwHLaZzn4jinKjPON7eqL1mHrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsJ6zsyW6rb+c43Tm+UWuA1W8GcMB8GA1UdIwQY
MBaAFPSrzHmjZ9nAEsFoSoQimWzcQ952MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84OGJmMWUtZDljNS00ZDI0LTk0Yjgt
ZGU0NGVlODE0NzBiLzEvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84OGJmMWUtZDljNS00ZDI0LTk0YjgtZGU0NGVlODE0NzBi
LzEvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+I4Ygot
k8SDJkPxyXTtwExnMN3KGZIuAyWb6EOFadloG5r2cvLAC/PAOZGAkwgu8FQr2Szn
xL+kKd2BX016nK8e6LaVOaRtv9lYX09QIblrE7y2BVQVMnaoy8pJBf2l+kY3fSVa
ghrCLy6Ux9YFG2Ua+F2AMtLrW0oGl6IEjiQew1P82B8wxKd0hr3M0YSsryg9We2Y
S5clPPWAP8fRp0pfl/4YKgaDcqIwZ0sjAXzmdKEAJ0ya0K+hR9EOFpbzmB7QcITV
TLvS0yROXMzjmmpBLXze4RCGwzcRkMwvD1KDEPapKtPTYOqFvO/Nnm+AZOvjDnKP
IBB06FCxCVm9FQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:50 2025 by rpki-client