Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: yK8O0cbrJ9LWOmDmn4PHEYUAbmw4U/QpuAmGFhr23bk=
Subject key identifier: F9:C8:82:A0:AA:31:0B:82:6B:E1:7F:2A:99:34:90:BE:61:0D:F5:82
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 0197B88F46F1A5B050AD94E8725F74DEDC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 22:01:26 +0000
Manifest this update: Sat 28 Jun 2025 22:01:26 +0000
Manifest next update: Sun 29 Jun 2025 22:01:26 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: b7oi7fIvCPv3RwoAdmU3Ye9FZ63ErIufxrp8LR0FbaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:46:f1:a5:b0:50:ad:94:e8:72:5f:74:de:dc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Jun 28 22:01:26 2025 GMT
Not After : Jun 29 22:01:26 2025 GMT
Subject: CN=f9c882a0aa310b826be17f2a993490be610df582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:af:4a:cf:f7:4f:09:89:6a:66:89:9e:3b:
35:e9:5b:3a:68:6b:3f:d8:6a:69:73:59:17:52:b0:
c0:f0:1d:66:73:6c:d1:d1:5f:b5:91:9a:ce:bc:70:
57:21:4f:21:38:a2:88:0c:7f:d1:5a:e3:90:58:ad:
46:ea:be:2c:1e:ea:9e:66:80:60:5d:39:4c:60:ac:
d6:1f:75:38:f3:6f:d5:a9:dc:30:ca:06:ba:bd:dd:
e2:e5:7d:6c:a2:d3:e5:4a:75:38:22:93:f7:2a:72:
fd:fd:7f:a9:04:89:1a:b7:17:53:12:75:d1:2f:24:
e2:e2:ad:c0:95:3f:9a:5d:6d:cf:3a:d1:91:f3:30:
2d:fe:5a:bc:3c:36:ca:29:8c:0b:98:bc:91:3e:5c:
a1:51:dc:91:fa:4b:8e:a8:46:19:07:12:8a:3a:40:
ed:72:7e:80:03:b2:77:0a:94:2c:fa:af:bb:7b:2a:
2a:cc:e1:ac:da:16:ce:61:aa:ef:7a:d2:1b:37:54:
b6:bb:66:78:b0:50:a9:c1:fc:b7:13:d1:0d:68:a5:
86:09:ba:5e:a4:56:40:23:19:9a:ee:94:ec:f7:7d:
75:d4:eb:fa:9e:97:0c:d1:5b:70:c6:6d:4b:05:7c:
b7:b9:5b:5b:22:f2:d7:75:30:1f:ef:f3:32:e6:bb:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C8:82:A0:AA:31:0B:82:6B:E1:7F:2A:99:34:90:BE:61:0D:F5:82
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:77:d5:a8:fe:33:30:d0:65:b3:dd:65:c2:fa:ed:d6:98:0b:
dd:8f:e0:ef:49:24:93:d9:44:db:ba:fb:6f:03:e6:b8:bb:4e:
a5:02:20:66:0f:93:f9:fc:46:89:6a:5e:6d:db:bf:c6:ed:1b:
da:70:ef:d8:6b:b4:04:d6:77:ee:28:a5:47:69:6f:e9:12:a8:
a3:b2:a0:57:f4:5f:a2:81:f7:67:4d:c3:52:54:3b:3c:42:1b:
a5:af:f4:1a:2b:b9:e8:58:70:c8:28:2d:3a:ff:a8:e0:23:00:
1c:9f:55:fe:74:5b:8c:0a:e9:4c:c1:b2:21:c3:c5:bb:ce:51:
13:8f:73:e5:b3:9e:d0:2d:de:28:d9:de:a1:8b:68:0f:01:f9:
8c:cd:9b:94:6f:1c:13:9d:2e:d7:74:9e:b7:60:e8:2a:4b:de:
94:f5:68:18:38:06:26:ed:57:f3:4f:3b:fa:ad:1a:0c:6b:39:
5c:76:0c:6b:43:cf:ca:e3:ef:3f:2b:00:07:28:d0:9c:56:70:
df:4d:22:35:b6:5f:21:62:43:78:e2:6c:21:15:f8:8f:76:a7:
bd:92:f6:00:a2:61:78:ac:99:ec:3f:4c:f1:5e:ea:ea:6e:bf:
84:41:87:1e:8a:02:4b:7e:f3:58:4c:b6:64:90:92:9e:e0:01:
d7:c6:80:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j0bxpbBQrZTocl903txmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmY0MTU5MTIwYWE1MWJiMWNkZjExNmQwNmE0ZmMwMjky
ZmY5NmMwHhcNMjUwNjI4MjIwMTI2WhcNMjUwNjI5MjIwMTI2WjAzMTEwLwYDVQQD
EyhmOWM4ODJhMGFhMzEwYjgyNmJlMTdmMmE5OTM0OTBiZTYxMGRmNTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwGvSs/3TwmJamaJnjs16Vs6aGs/
2Gppc1kXUrDA8B1mc2zR0V+1kZrOvHBXIU8hOKKIDH/RWuOQWK1G6r4sHuqeZoBg
XTlMYKzWH3U482/Vqdwwyga6vd3i5X1sotPlSnU4IpP3KnL9/X+pBIkatxdTEnXR
LyTi4q3AlT+aXW3POtGR8zAt/lq8PDbKKYwLmLyRPlyhUdyR+kuOqEYZBxKKOkDt
cn6AA7J3CpQs+q+7eyoqzOGs2hbOYarvetIbN1S2u2Z4sFCpwfy3E9ENaKWGCbpe
pFZAIxma7pTs93111Ov6npcM0Vtwxm1LBXy3uVtbIvLXdTAf7/My5rsIfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnIgqCqMQuCa+F/Kpk0kL5hDfWCMB8GA1UdIwQY
MBaAFNEvQVkSCqUbsc3xFtBqT8ApL/lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYt
ZmM0YTZhYjc4OGFkLzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYtZmM0YTZhYjc4OGFk
LzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHfVqP4z
MNBls91lwvrt1pgL3Y/g70kkk9lE27r7bwPmuLtOpQIgZg+T+fxGiWpebdu/xu0b
2nDv2Gu0BNZ37iilR2lv6RKoo7KgV/RfooH3Z03DUlQ7PEIbpa/0Giu56FhwyCgt
Ov+o4CMAHJ9V/nRbjArpTMGyIcPFu85RE49z5bOe0C3eKNneoYtoDwH5jM2blG8c
E50u13Set2DoKkvelPVoGDgGJu1X8087+q0aDGs5XHYMa0PPyuPvPysAByjQnFZw
300iNbZfIWJDeOJsIRX4j3anvZL2AKJheKyZ7D9M8V7q6m6/hEGHHooCS37zWEy2
ZJCSnuAB18aAvQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:39 2025 by rpki-client