Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
File: _9YayMVuOP32EjgDbHNUcnADRjE.mft (raw, json)
Hash identifier: EZOq0qW3hw7eRfUBK+s57wFOjCQBPugtafaeLuXygQo=
Subject key identifier: 30:1E:CA:2E:7E:AC:24:22:69:DB:B2:EB:F1:D4:9A:2C:36:21:BE:BD
Authority key identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
Certificate issuer: /CN=ffd61ac8c56e38fdf61238036c73547270034631
Certificate serial: 0197B5C4E6C8E292AC0EC4A42EB42DAB288F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 09:01:09 +0000
Manifest this update: Sat 28 Jun 2025 09:01:09 +0000
Manifest next update: Sun 29 Jun 2025 09:01:09 +0000
Files and hashes: 1: _9YayMVuOP32EjgDbHNUcnADRjE.crl (hash: fCQK4gvuL5D16AUi1WbvAWDDW+5tGIrogV8jbaraQTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:e6:c8:e2:92:ac:0e:c4:a4:2e:b4:2d:ab:28:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd61ac8c56e38fdf61238036c73547270034631
Validity
Not Before: Jun 28 09:01:09 2025 GMT
Not After : Jun 29 09:01:09 2025 GMT
Subject: CN=301eca2e7eac242269dbb2ebf1d49a2c3621bebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:78:f4:45:ec:78:51:8b:9a:42:0c:9f:e4:
fa:d4:93:e3:11:b6:62:bf:2b:94:11:b3:2b:4b:fe:
59:17:16:38:c0:d3:5d:4d:a1:7e:bb:0a:20:36:c5:
ea:e3:a6:f2:b6:35:58:50:d7:6c:79:9c:91:d6:77:
43:91:54:0c:06:08:07:4d:e6:43:3b:fb:38:1e:d1:
3f:ed:a3:47:6a:f9:04:1e:97:1d:a6:42:0e:2a:f6:
12:ef:84:cf:a7:d7:ec:05:91:10:32:71:7b:28:2a:
07:60:9b:e3:bb:a4:3c:71:35:09:b0:c7:8b:3e:e7:
6e:da:c3:d9:cd:1c:03:0b:d7:a5:b6:83:6f:76:80:
84:03:d8:9c:22:88:8a:2b:38:ce:4e:51:01:49:32:
ce:0e:e8:b9:3e:01:e7:c0:cd:a5:4d:07:ce:63:69:
ad:cb:12:87:0c:64:51:9c:2a:79:f4:8b:b4:a4:ae:
76:b5:9b:de:57:42:17:40:d9:24:1d:fe:8a:f9:30:
82:2e:b4:e9:38:05:e5:ac:d6:33:54:94:db:23:4e:
fe:d0:f3:17:ee:92:53:f3:16:89:9b:f4:f5:a9:d9:
ba:fa:a0:90:32:1b:f4:68:c5:15:ac:0b:93:18:06:
26:2e:6b:66:ab:dd:54:61:7d:11:2b:b8:68:1b:67:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1E:CA:2E:7E:AC:24:22:69:DB:B2:EB:F1:D4:9A:2C:36:21:BE:BD
X509v3 Authority Key Identifier:
keyid:FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cb:5f:76:54:26:ed:59:5e:9a:a1:7b:59:e8:2a:34:fd:f5:
46:10:39:84:60:3b:44:14:1a:14:a8:e6:20:d2:4e:3d:33:fb:
0a:e0:b9:33:14:39:1c:9e:f0:38:bd:6d:6c:47:2e:d0:e8:68:
dd:00:26:3a:35:99:f5:88:51:a8:7b:ab:e5:1f:26:d2:1e:e1:
65:bc:8c:80:4d:4a:ac:25:9a:27:b4:94:5f:08:e8:a4:0d:d9:
a0:25:4c:eb:37:98:fe:5c:d0:30:a5:24:cc:75:20:89:34:7b:
c2:31:1f:3e:1c:64:2b:f7:08:2c:6d:23:05:a7:a7:00:cd:60:
95:e1:a9:4f:80:92:90:ec:64:b4:9f:7a:fd:70:8a:18:3e:da:
31:9e:39:52:48:f9:f4:46:ae:23:3a:ec:ec:2a:7d:38:4a:f1:
a3:5d:50:e1:75:6a:29:7e:85:fd:42:d4:3e:39:ec:9f:db:01:
34:cd:8d:b2:1f:96:71:0a:f8:3d:49:18:20:2f:84:43:62:3e:
db:ea:ef:2e:76:a7:e6:f1:b9:cc:91:57:4b:58:a6:09:a3:74:
11:fb:cc:ca:2b:d3:d8:32:25:db:0c:31:96:b5:f9:ee:6a:1d:
b2:72:7c:8a:64:e8:aa:92:e1:b8:fb:1b:37:77:e1:11:e2:35:
c6:af:44:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xObI4pKsDsSkLrQtqyiPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZDYxYWM4YzU2ZTM4ZmRmNjEyMzgwMzZjNzM1NDcyNzAw
MzQ2MzEwHhcNMjUwNjI4MDkwMTA5WhcNMjUwNjI5MDkwMTA5WjAzMTEwLwYDVQQD
EygzMDFlY2EyZTdlYWMyNDIyNjlkYmIyZWJmMWQ0OWEyYzM2MjFiZWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXd49EXseFGLmkIMn+T61JPjEbZi
vyuUEbMrS/5ZFxY4wNNdTaF+uwogNsXq46bytjVYUNdseZyR1ndDkVQMBggHTeZD
O/s4HtE/7aNHavkEHpcdpkIOKvYS74TPp9fsBZEQMnF7KCoHYJvju6Q8cTUJsMeL
Pudu2sPZzRwDC9eltoNvdoCEA9icIoiKKzjOTlEBSTLODui5PgHnwM2lTQfOY2mt
yxKHDGRRnCp59Iu0pK52tZveV0IXQNkkHf6K+TCCLrTpOAXlrNYzVJTbI07+0PMX
7pJT8xaJm/T1qdm6+qCQMhv0aMUVrAuTGAYmLmtmq91UYX0RK7hoG2f7uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAeyi5+rCQiaduy6/HUmiw2Ib69MB8GA1UdIwQY
MBaAFP/WGsjFbjj99hI4A2xzVHJwA0YxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8xNGQ3YjgtYWZjZS00NWExLWIyNzIt
MDRkOTZmYTgzZDA3LzEvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8xNGQ3YjgtYWZjZS00NWExLWIyNzItMDRkOTZmYTgzZDA3
LzEvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoctfdlQm
7VlemqF7WegqNP31RhA5hGA7RBQaFKjmINJOPTP7CuC5MxQ5HJ7wOL1tbEcu0Oho
3QAmOjWZ9YhRqHur5R8m0h7hZbyMgE1KrCWaJ7SUXwjopA3ZoCVM6zeY/lzQMKUk
zHUgiTR7wjEfPhxkK/cILG0jBaenAM1gleGpT4CSkOxktJ96/XCKGD7aMZ45Ukj5
9EauIzrs7Cp9OErxo11Q4XVqKX6F/ULUPjnsn9sBNM2Nsh+WcQr4PUkYIC+EQ2I+
2+rvLnan5vG5zJFXS1imCaN0EfvMyivT2DIl2wwxlrX57modsnJ8imToqpLhuPsb
N3fhEeI1xq9EJA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:41 2025 by rpki-client