Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: YM5oVZJ3C1oPS95FdTNnw2iBEamgRY/QfxS7LtfzihA=
Subject key identifier: 96:B0:14:5D:8B:A8:09:70:12:CA:E7:D2:0B:16:C1:70:2C:F3:30:16
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 0197B7454A571B3A656E3B7E47340D9A19DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 0A86
Signing time: Sat 28 Jun 2025 16:01:00 +0000
Manifest this update: Sat 28 Jun 2025 16:01:00 +0000
Manifest next update: Sun 29 Jun 2025 16:01:00 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: UeL26xc/fbFHOvqEmzwrTnfTpKAVlZCnLfzJvXKgvsg=)
2: TvqtU6kGEWNG1Cpdb9p7065y7Us.roa (hash: feIhe0HlEu5dhdmycewb1eBF/nryf3+/l635UbwMTEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4a:57:1b:3a:65:6e:3b:7e:47:34:0d:9a:19:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Jun 28 16:01:00 2025 GMT
Not After : Jun 29 16:01:00 2025 GMT
Subject: CN=96b0145d8ba8097012cae7d20b16c1702cf33016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:9f:d3:97:cc:16:bd:33:85:8c:e5:59:13:
41:f4:60:f2:1f:02:20:4e:73:2c:17:ef:0f:31:31:
e6:b5:f4:b0:bc:f9:e9:48:85:b6:82:80:ff:3a:0e:
a2:0f:ef:3d:58:65:5d:42:9b:de:de:cf:e7:50:9d:
bf:be:4a:e5:a9:53:09:54:29:6c:30:ff:d7:73:fc:
1c:19:b8:74:3b:34:15:fc:e5:bf:35:e2:dd:a3:7b:
75:6a:f8:ac:9d:4d:0b:3f:7d:e7:16:57:ee:15:d4:
e4:b2:20:30:67:e4:63:f8:cf:32:dc:7a:55:14:52:
b6:94:0c:b1:6c:e4:a0:dc:d4:65:06:75:16:1c:0a:
d8:c8:66:1f:28:0a:a1:ce:c1:ff:bd:99:4d:ed:2a:
45:cc:f9:52:db:d5:70:cf:c3:ac:30:b8:72:14:0b:
db:8b:d8:6d:e6:d6:e2:d9:ca:4e:53:c2:df:98:19:
69:ed:05:35:83:ce:3c:9d:ff:a0:45:17:a6:6b:76:
c2:21:91:b7:f8:65:bf:3c:35:24:fc:22:34:f0:96:
e5:22:1f:7c:db:fb:4c:92:0a:90:1e:7f:c6:65:60:
72:e1:a1:77:71:ab:00:2f:53:31:a5:1c:3b:e2:c9:
cd:73:54:32:9d:04:c8:19:f9:ad:e3:ef:2b:8a:91:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B0:14:5D:8B:A8:09:70:12:CA:E7:D2:0B:16:C1:70:2C:F3:30:16
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:78:f6:74:82:a3:fb:8e:d9:3c:1b:a4:61:76:b5:1d:9f:4e:
45:6d:8a:da:e2:a3:d5:0c:1f:5b:0e:b8:92:5b:d3:38:d0:72:
fa:2a:03:d8:cd:94:18:6a:cb:af:69:98:4f:c8:f1:22:eb:e0:
3e:16:3f:d4:01:8a:4f:11:de:7f:35:39:aa:f2:d4:19:30:8f:
b5:f6:b0:86:a5:75:74:de:75:bb:97:e1:5f:68:c5:10:39:ec:
b2:6d:65:fd:8e:f2:b3:15:97:9d:6f:e2:0f:96:55:a6:d3:8f:
1a:25:9a:1c:c2:33:3f:43:14:03:e7:f7:93:1d:5d:f4:76:2a:
c1:ab:5a:63:c1:5d:8f:9b:a4:21:fe:cc:24:f8:9f:97:16:aa:
66:e1:3a:a4:b8:b6:77:08:fa:2b:18:1a:35:4f:9c:12:75:98:
77:c4:e3:4b:dd:9b:a4:f5:82:07:3d:03:c0:b6:94:cc:55:28:
57:e3:02:5c:0e:5f:ce:f8:9d:c4:9c:66:31:a4:11:9a:06:33:
29:58:d2:01:8d:d2:1d:ef:f7:dc:bc:ab:c9:9f:0d:be:6d:66:
5b:50:1f:a8:18:84:9d:4d:52:66:32:bb:44:63:5a:12:b9:dd:
83:72:06:d8:c4:27:aa:a8:dc:4a:46:2e:4d:6b:a4:5f:62:ad:
c6:93:8d:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RUpXGzplbjt+RzQNmhnaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YTI5MTIyNGY4MmJjNmQyNmI1MTllZDdhZmJlMjVjYjMy
YzExNWMwHhcNMjUwNjI4MTYwMTAwWhcNMjUwNjI5MTYwMTAwWjAzMTEwLwYDVQQD
Eyg5NmIwMTQ1ZDhiYTgwOTcwMTJjYWU3ZDIwYjE2YzE3MDJjZjMzMDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9ef05fMFr0zhYzlWRNB9GDyHwIg
TnMsF+8PMTHmtfSwvPnpSIW2goD/Og6iD+89WGVdQpve3s/nUJ2/vkrlqVMJVCls
MP/Xc/wcGbh0OzQV/OW/NeLdo3t1avisnU0LP33nFlfuFdTksiAwZ+Rj+M8y3HpV
FFK2lAyxbOSg3NRlBnUWHArYyGYfKAqhzsH/vZlN7SpFzPlS29Vwz8OsMLhyFAvb
i9ht5tbi2cpOU8LfmBlp7QU1g848nf+gRRema3bCIZG3+GW/PDUk/CI08JblIh98
2/tMkgqQHn/GZWBy4aF3casAL1MxpRw74snNc1QynQTIGfmt4+8ripFi8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJawFF2LqAlwEsrn0gsWwXAs8zAWMB8GA1UdIwQY
MBaAFPWikSJPgrxtJrUZ7Xr74lyzLBFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzct
YmM3OTc3Mzk2ZDliLzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzctYmM3OTc3Mzk2ZDli
LzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXj2dIKj
+47ZPBukYXa1HZ9ORW2K2uKj1QwfWw64klvTONBy+ioD2M2UGGrLr2mYT8jxIuvg
PhY/1AGKTxHefzU5qvLUGTCPtfawhqV1dN51u5fhX2jFEDnssm1l/Y7ysxWXnW/i
D5ZVptOPGiWaHMIzP0MUA+f3kx1d9HYqwataY8Fdj5ukIf7MJPiflxaqZuE6pLi2
dwj6KxgaNU+cEnWYd8TjS92bpPWCBz0DwLaUzFUoV+MCXA5fzvidxJxmMaQRmgYz
KVjSAY3SHe/33LyryZ8Nvm1mW1AfqBiEnU1SZjK7RGNaErndg3IG2MQnqqjcSkYu
TWukX2KtxpONVA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:04 2025 by rpki-client