Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
File: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft (raw, json)
Hash identifier: NRafE9vMaI+eOw3NMdIW48pkK1kPrtDNFZ0sP1tnsOM=
Subject key identifier: D9:C1:7E:89:3D:2A:C5:0F:14:16:DD:AF:BC:35:88:F3:B7:67:48:30
Authority key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Certificate issuer: /CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Certificate serial: 0197B7B35BD45279D65DC5A48301305EDEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
Manifest number: 03A9
Signing time: Sat 28 Jun 2025 18:01:14 +0000
Manifest this update: Sat 28 Jun 2025 18:01:14 +0000
Manifest next update: Sun 29 Jun 2025 18:01:14 +0000
Files and hashes: 1: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl (hash: Ll0nfT9cnjDM0RWoqdTmWbObaJrCLHsHvIifkZs4gYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:5b:d4:52:79:d6:5d:c5:a4:83:01:30:5e:de:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Validity
Not Before: Jun 28 18:01:14 2025 GMT
Not After : Jun 29 18:01:14 2025 GMT
Subject: CN=d9c17e893d2ac50f1416ddafbc3588f3b7674830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:ed:c2:e4:0f:15:56:99:85:0e:26:8e:34:
69:a4:98:77:8d:37:c8:71:0e:b7:e9:f0:a1:45:a2:
4f:87:32:10:7a:66:eb:83:d3:0e:1f:d2:87:91:30:
d9:59:18:1d:67:33:8c:a2:c9:d1:5b:3d:3f:ce:4c:
5f:8c:c6:bf:11:b6:17:b6:0e:73:1d:71:ad:92:99:
96:4f:bb:c3:1a:3f:49:0f:ca:65:8b:95:e7:37:c4:
ef:a0:c9:39:d2:00:c6:37:3c:b3:63:fe:67:b8:2d:
90:5a:c8:50:65:86:01:eb:cf:f2:cb:f3:09:93:04:
d7:2d:47:6f:8b:73:a5:8c:9d:cf:c9:87:1a:de:34:
22:47:5b:89:be:3c:8a:25:ad:c2:9f:5f:31:8a:b1:
80:ed:60:f7:f3:11:0a:e3:dc:55:33:74:a2:21:5f:
71:8f:77:2c:18:20:c0:17:09:bf:0f:2d:39:5f:a0:
cc:3d:0c:44:92:f6:73:8e:1a:19:19:50:ae:62:43:
2c:2d:d4:77:57:f4:94:23:b6:36:9b:59:bd:b2:45:
2b:ca:24:f8:5c:8b:5a:e6:a8:b7:72:f3:90:49:d3:
5a:c2:64:c5:1d:3e:dc:08:40:18:7a:24:95:07:d6:
a3:fc:c6:89:5d:92:b7:6e:52:d0:05:8c:60:32:a5:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C1:7E:89:3D:2A:C5:0F:14:16:DD:AF:BC:35:88:F3:B7:67:48:30
X509v3 Authority Key Identifier:
keyid:F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f1:5b:00:bc:88:a8:71:03:31:fd:01:79:7a:54:78:0d:89:
18:ec:d7:df:1d:8d:65:0b:3a:2d:16:a1:6f:6d:d8:25:58:a2:
c4:20:50:b4:8d:ec:22:b5:6d:6f:c3:3f:17:b2:f4:85:4b:b5:
a0:91:46:e3:6f:49:f6:86:a7:50:ce:59:43:47:68:b9:d2:35:
fc:1b:bd:c7:7c:b5:d8:d1:b5:ab:10:b4:00:65:f7:cd:af:6c:
19:fc:2a:d3:a7:28:90:fe:ad:a1:80:10:d8:cc:fb:b7:23:d6:
ca:ef:18:78:4c:62:5f:97:ef:6f:3a:db:38:8b:ea:f1:9d:4c:
1e:9c:1b:45:e3:4f:ab:ff:76:00:50:68:15:43:ee:b8:25:b5:
2e:f0:cb:c2:92:30:22:b6:d3:ad:71:04:1a:86:a3:25:66:4c:
d7:2c:c3:02:b0:da:00:0a:9b:a2:ab:37:c5:44:72:45:e6:eb:
e2:8e:8a:3a:86:e4:3c:f5:f4:8d:73:6a:01:85:0b:8e:81:88:
5e:d8:60:8e:4a:1e:57:60:ff:e4:07:f8:c4:d3:8e:18:f2:63:
73:b7:cd:e1:85:5d:f2:a9:08:1c:ad:7e:8a:d1:cf:2a:07:df:
d0:eb:f7:93:4e:b9:62:30:49:2a:9e:65:ae:e8:b7:4f:77:50:
89:f7:9b:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s1vUUnnWXcWkgwEwXt63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDZmNWM4MGMzY2E4MmNmNDhkZGFiYjYzYzYwNDZhNjgx
MmI3NDMwHhcNMjUwNjI4MTgwMTE0WhcNMjUwNjI5MTgwMTE0WjAzMTEwLwYDVQQD
EyhkOWMxN2U4OTNkMmFjNTBmMTQxNmRkYWZiYzM1ODhmM2I3Njc0ODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsvtwuQPFVaZhQ4mjjRppJh3jTfI
cQ636fChRaJPhzIQembrg9MOH9KHkTDZWRgdZzOMosnRWz0/zkxfjMa/EbYXtg5z
HXGtkpmWT7vDGj9JD8pli5XnN8TvoMk50gDGNzyzY/5nuC2QWshQZYYB68/yy/MJ
kwTXLUdvi3OljJ3PyYca3jQiR1uJvjyKJa3Cn18xirGA7WD38xEK49xVM3SiIV9x
j3csGCDAFwm/Dy05X6DMPQxEkvZzjhoZGVCuYkMsLdR3V/SUI7Y2m1m9skUryiT4
XIta5qi3cvOQSdNawmTFHT7cCEAYeiSVB9aj/MaJXZK3blLQBYxgMqVlsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnBfok9KsUPFBbdr7w1iPO3Z0gwMB8GA1UdIwQY
MBaAFPVG9cgMPKgs9I3au2PGBGpoErdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVViMXlBdzhxQ3owamRxN1k4WUVhbWdTdDBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mMTExZmYtYWNlYS00YmU5LWIzNTYt
NTQ2MjliOTJiNjgzLzEvOVViMXlBdzhxQ3owamRxN1k4WUVhbWdTdDBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mMTExZmYtYWNlYS00YmU5LWIzNTYtNTQ2MjliOTJiNjgz
LzEvOVViMXlBdzhxQ3owamRxN1k4WUVhbWdTdDBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/FbALyI
qHEDMf0BeXpUeA2JGOzX3x2NZQs6LRahb23YJViixCBQtI3sIrVtb8M/F7L0hUu1
oJFG429J9oanUM5ZQ0doudI1/Bu9x3y12NG1qxC0AGX3za9sGfwq06cokP6toYAQ
2Mz7tyPWyu8YeExiX5fvbzrbOIvq8Z1MHpwbReNPq/92AFBoFUPuuCW1LvDLwpIw
IrbTrXEEGoajJWZM1yzDArDaAAqboqs3xURyRebr4o6KOobkPPX0jXNqAYULjoGI
XthgjkoeV2D/5Af4xNOOGPJjc7fN4YVd8qkIHK1+itHPKgff0Ov3k065YjBJKp5l
rui3T3dQifeb+w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:47 2025 by rpki-client