Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: qSm0aHpMA7Iyp9EnP2W0J3TUZmDgX6W0b9d/i5TRvH8=
Subject key identifier: B6:DA:99:B0:DE:63:82:97:96:2F:9F:1C:98:A6:A5:D9:FD:8A:4D:2D
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 0198D70575A22A15C0ADF2003C3B34C7E35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0959
Signing time: Sat 23 Aug 2025 13:01:55 +0000
Manifest this update: Sat 23 Aug 2025 13:01:55 +0000
Manifest next update: Sun 24 Aug 2025 13:01:55 +0000
Files and hashes: 1: jODSDZiB_9CDcQXiT4tsxNlR8Ac.roa (hash: JEMeTXjwzca2z04dyMlf/bVf4aF3EAXQNY7E1cjOdx4=)
2: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: VLUYBF3yQo2o8JvjQY6puOvlVogP1Fo81OhFLCj0ras=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:75:a2:2a:15:c0:ad:f2:00:3c:3b:34:c7:e3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Aug 23 13:01:55 2025 GMT
Not After : Aug 24 13:01:55 2025 GMT
Subject: CN=b6da99b0de638297962f9f1c98a6a5d9fd8a4d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:28:8b:0b:ff:7d:66:2f:63:79:00:f4:13:
73:62:28:e2:5e:9d:aa:55:cd:90:bc:1e:98:bc:9a:
87:6c:10:a9:20:b1:2d:48:a9:5e:1d:f7:4c:71:70:
82:d6:7d:ed:63:6d:75:dc:af:69:79:c6:95:0c:69:
1d:d9:56:85:0f:57:dd:4c:a3:bc:89:c4:61:8d:fa:
6f:cd:cc:41:21:f1:d3:d6:4e:a1:c5:53:70:f6:75:
67:a1:5f:e0:7e:da:3b:36:de:0b:f7:94:b9:87:6f:
74:79:5f:cf:67:83:a9:03:47:f3:4c:db:5f:91:11:
5b:ae:94:e4:4f:26:6e:cc:79:10:7b:03:23:59:4d:
6a:ac:04:bf:50:5e:d7:95:7a:0e:bf:d3:24:b0:bc:
2d:ca:2c:c0:b6:f2:51:27:5f:b1:03:6f:c3:df:02:
33:d5:c4:ba:c0:a6:5c:0c:d1:d8:cd:e2:47:73:99:
ab:96:02:a8:bd:f8:30:58:31:17:32:1e:e5:17:4c:
18:7d:65:31:eb:6c:25:0b:0e:b2:1a:17:45:e4:fa:
60:16:11:cd:f9:d8:37:75:bb:65:89:09:2f:97:e3:
28:fe:57:63:14:a6:81:dc:77:00:1e:09:65:c6:91:
f5:a8:aa:f4:b0:13:a8:3f:a2:d7:26:42:1b:d0:77:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DA:99:B0:DE:63:82:97:96:2F:9F:1C:98:A6:A5:D9:FD:8A:4D:2D
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4b:c7:0c:a1:69:52:84:cd:1a:81:de:5f:0a:e1:97:be:33:
dc:ef:cc:be:59:12:5a:45:64:84:e6:e2:98:59:c3:e3:fa:57:
07:91:62:7e:7b:54:c5:cd:f4:ef:22:f1:65:2b:1b:5a:8e:57:
51:06:85:b5:93:cd:13:ca:bb:4d:54:60:72:3f:26:58:c8:20:
7f:37:55:5d:54:9c:b9:00:9e:9e:f5:b8:c1:40:54:e1:02:06:
78:c1:df:3d:f8:fd:77:97:14:8e:fe:ea:32:48:0e:95:c0:85:
f4:e9:24:ab:93:00:b0:2b:d7:cf:ad:39:7b:6c:6f:97:c5:42:
04:3f:2a:8f:7d:83:c2:2c:f8:03:7e:e2:52:0c:82:98:ec:a0:
40:87:ff:e1:3b:38:31:49:03:48:49:61:7d:8b:72:ea:fd:0e:
c4:ed:67:12:19:5a:96:a5:0e:d1:ad:d1:eb:51:0f:7b:a3:72:
c8:3a:46:2b:c9:59:05:53:3e:50:e3:07:ce:49:02:5b:30:1c:
82:7a:6e:60:4a:62:9a:32:bc:ee:33:7a:b1:91:86:bb:82:4b:
8a:c4:37:8e:eb:33:0a:37:5b:60:92:a5:45:29:e9:e1:b3:8d:
db:a5:c4:c2:c6:1e:59:b6:15:40:53:a3:08:f3:e4:6e:b3:40:
de:9a:b1:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBXWiKhXArfIAPDs0x+NaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZDIzYWUyOGNkODYwYzhlZGZkNjE4MzU2ZjhiMzFmNWU0
ZGM5MjgwHhcNMjUwODIzMTMwMTU1WhcNMjUwODI0MTMwMTU1WjAzMTEwLwYDVQQD
EyhiNmRhOTliMGRlNjM4Mjk3OTYyZjlmMWM5OGE2YTVkOWZkOGE0ZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnooiwv/fWYvY3kA9BNzYijiXp2q
Vc2QvB6YvJqHbBCpILEtSKleHfdMcXCC1n3tY2113K9pecaVDGkd2VaFD1fdTKO8
icRhjfpvzcxBIfHT1k6hxVNw9nVnoV/gfto7Nt4L95S5h290eV/PZ4OpA0fzTNtf
kRFbrpTkTyZuzHkQewMjWU1qrAS/UF7XlXoOv9MksLwtyizAtvJRJ1+xA2/D3wIz
1cS6wKZcDNHYzeJHc5mrlgKovfgwWDEXMh7lF0wYfWUx62wlCw6yGhdF5PpgFhHN
+dg3dbtliQkvl+Mo/ldjFKaB3HcAHgllxpH1qKr0sBOoP6LXJkIb0HcBXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbambDeY4KXli+fHJimpdn9ik0tMB8GA1UdIwQY
MBaAFJfSOuKM2GDI7f1hg1b4sx9eTckoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWIt
Y2ZhNmE5MTQ4MWUyLzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWItY2ZhNmE5MTQ4MWUy
LzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0vHDKFp
UoTNGoHeXwrhl74z3O/MvlkSWkVkhObimFnD4/pXB5FifntUxc307yLxZSsbWo5X
UQaFtZPNE8q7TVRgcj8mWMggfzdVXVScuQCenvW4wUBU4QIGeMHfPfj9d5cUjv7q
MkgOlcCF9Okkq5MAsCvXz605e2xvl8VCBD8qj32Dwiz4A37iUgyCmOygQIf/4Ts4
MUkDSElhfYty6v0OxO1nEhlalqUO0a3R61EPe6NyyDpGK8lZBVM+UOMHzkkCWzAc
gnpuYEpimjK87jN6sZGGu4JLisQ3juszCjdbYJKlRSnp4bON26XEwsYeWbYVQFOj
CPPkbrNA3pqx5Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:06:44 2025 by rpki-client