Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier: cRraQ/L0OoPcbuYCG+lAutAcT5aSYiwyt5nKfY9PHaI=
Subject key identifier: 44:27:09:2F:E9:D1:B0:BA:DD:AF:02:9B:8B:21:1C:68:B6:4E:2C:FD
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 0197B96AE134286A936A371252AB2DAA6700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 02:01:18 +0000
Manifest this update: Sun 29 Jun 2025 02:01:18 +0000
Manifest next update: Mon 30 Jun 2025 02:01:18 +0000
Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: HbUngWMob3+u5Gig5YTyqkiHyZPhANJGH5eCuVoP1ug=)
2: scYwC-e6lFDetGsqMlwn-CerbGM.roa (hash: zF9JwzHkhXPpsqlzXkaGHeYsm+/OmjpyP3gHhfOOwfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:e1:34:28:6a:93:6a:37:12:52:ab:2d:aa:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Jun 29 02:01:18 2025 GMT
Not After : Jun 30 02:01:18 2025 GMT
Subject: CN=4427092fe9d1b0baddaf029b8b211c68b64e2cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:bd:0f:df:7b:46:38:b8:c0:c8:67:04:02:
32:7b:5d:97:90:35:b6:14:6f:c4:b0:62:c2:34:5d:
94:ae:1f:72:9c:49:15:d3:5f:58:de:2f:68:bf:ed:
76:f9:de:15:ef:8d:65:f7:4b:43:62:b2:b9:d9:6a:
7f:7a:d4:ed:8e:fa:a7:3a:87:90:a4:39:17:79:d9:
fc:c3:8c:6e:45:a2:26:2c:7e:64:35:32:74:d9:37:
59:85:cd:eb:ca:a1:ee:9c:f0:c2:9c:01:5e:35:d3:
4f:77:f3:e7:3d:ff:61:44:db:13:03:67:02:a1:72:
cb:38:71:a7:73:c3:ca:0a:80:ac:51:ac:59:24:41:
22:0b:05:3c:39:68:78:0a:a5:be:a6:6b:cf:fc:f8:
14:42:79:9e:1d:42:3f:e9:fa:2b:22:b6:3a:ea:37:
b0:f8:8a:77:42:a5:d1:e3:9c:30:59:db:3a:25:b3:
c2:a1:2e:b6:11:72:bd:4d:62:e1:16:3b:4d:7d:fd:
e6:e5:7c:b9:d4:22:20:b2:d7:a5:f3:de:87:9d:d5:
0c:a6:6d:02:f5:4d:05:f3:34:7c:16:bc:96:98:98:
7a:22:ee:36:ab:0b:53:8c:87:52:1f:c2:26:cb:12:
7f:c8:8d:cf:f2:fb:50:9c:c5:fa:8e:f7:42:25:81:
c3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:27:09:2F:E9:D1:B0:BA:DD:AF:02:9B:8B:21:1C:68:B6:4E:2C:FD
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ed:8a:2c:90:e6:0b:b8:9e:c5:bc:cc:85:a7:ff:ac:33:8b:
40:80:ab:4a:16:d4:b1:9e:cd:68:3b:88:42:c9:cb:3a:91:6b:
b4:87:5a:f2:e2:09:bd:c4:fc:ac:50:21:b7:d7:7d:89:a8:90:
ef:64:b9:8f:b3:88:d0:01:98:24:2f:d6:9f:b8:7b:07:89:d5:
c0:a5:8a:d4:60:90:0d:7f:95:41:9a:91:18:f3:14:76:69:d6:
fc:d1:91:30:80:05:26:d2:72:7c:1d:62:d1:70:41:ca:45:38:
e8:38:5c:4d:44:0f:51:22:ae:39:9a:0d:1a:44:9a:e2:61:e9:
ee:db:61:76:74:11:e4:c7:bc:81:c0:1a:07:10:bf:e3:01:97:
49:cc:03:76:cf:92:9d:b8:78:c4:1f:de:b6:99:41:84:dd:f8:
af:7f:6f:ed:b2:7d:30:ca:7f:72:8d:19:1e:1d:7e:27:b0:f3:
1d:d5:66:50:e9:5d:1e:88:5f:bb:b3:6d:8e:a1:b4:98:91:40:
5a:0e:3a:50:e7:cb:38:23:89:56:e3:bb:1e:58:1c:2e:e3:81:
78:5c:4a:e0:8c:f9:5d:7f:9b:01:fe:c7:0c:ed:24:e9:b9:1b:
c8:42:85:8c:8f:88:01:ad:d6:1b:0f:fa:77:26:1f:38:df:2c:
99:82:50:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5auE0KGqTajcSUqstqmcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTQwZjAzOTc5YTNmNGU0YWQzOWRhOTgzYjY3YmE3ZTYy
MTVjMGQwHhcNMjUwNjI5MDIwMTE4WhcNMjUwNjMwMDIwMTE4WjAzMTEwLwYDVQQD
Eyg0NDI3MDkyZmU5ZDFiMGJhZGRhZjAyOWI4YjIxMWM2OGI2NGUyY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8+9D997Rji4wMhnBAIye12XkDW2
FG/EsGLCNF2Urh9ynEkV019Y3i9ov+12+d4V741l90tDYrK52Wp/etTtjvqnOoeQ
pDkXedn8w4xuRaImLH5kNTJ02TdZhc3ryqHunPDCnAFeNdNPd/PnPf9hRNsTA2cC
oXLLOHGnc8PKCoCsUaxZJEEiCwU8OWh4CqW+pmvP/PgUQnmeHUI/6forIrY66jew
+Ip3QqXR45wwWds6JbPCoS62EXK9TWLhFjtNff3m5Xy51CIgstel896HndUMpm0C
9U0F8zR8FryWmJh6Iu42qwtTjIdSH8ImyxJ/yI3P8vtQnMX6jvdCJYHD4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQnCS/p0bC63a8Cm4shHGi2Tiz9MB8GA1UdIwQY
MBaAFPTkDwOXmj9OStOdqYO2e6fmIVwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kNGZmYzAtYTUyZC00NjFiLTk3MTkt
YTkxNGUzY2UzOTQxLzEvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kNGZmYzAtYTUyZC00NjFiLTk3MTktYTkxNGUzY2UzOTQx
LzEvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+2KLJDm
C7iexbzMhaf/rDOLQICrShbUsZ7NaDuIQsnLOpFrtIda8uIJvcT8rFAht9d9iaiQ
72S5j7OI0AGYJC/Wn7h7B4nVwKWK1GCQDX+VQZqRGPMUdmnW/NGRMIAFJtJyfB1i
0XBBykU46DhcTUQPUSKuOZoNGkSa4mHp7tthdnQR5Me8gcAaBxC/4wGXScwDds+S
nbh4xB/etplBhN34r39v7bJ9MMp/co0ZHh1+J7DzHdVmUOldHohfu7NtjqG0mJFA
Wg46UOfLOCOJVuO7HlgcLuOBeFxK4Iz5XX+bAf7HDO0k6bkbyEKFjI+IAa3WGw/6
dyYfON8smYJQ9A==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:19:01 2025 by rpki-client