Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: LpDOofQjeIZ17EgZjxvoRLzM2+LX8LiGn/7fNF+hSqY=
Subject key identifier: 43:EF:74:42:53:47:A2:18:6F:46:FD:49:EA:11:0C:80:1C:4B:E1:C2
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 0197B6A1E6E0254D155C0B9F28E5F16E2847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0B7D
Signing time: Sat 28 Jun 2025 13:02:33 +0000
Manifest this update: Sat 28 Jun 2025 13:02:33 +0000
Manifest next update: Sun 29 Jun 2025 13:02:33 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: rlY4EhiVG7pgdY8qXgkq76spPLhJNW2U8m6JrkJzmc4=)
2: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (hash: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e6:e0:25:4d:15:5c:0b:9f:28:e5:f1:6e:28:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Jun 28 13:02:33 2025 GMT
Not After : Jun 29 13:02:33 2025 GMT
Subject: CN=43ef74425347a2186f46fd49ea110c801c4be1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:2e:1d:ff:db:dc:7b:45:60:d4:fd:ce:9d:
d4:66:77:57:0d:24:0e:c7:ba:98:07:58:1e:ab:60:
5b:6c:9b:c3:79:76:6c:85:50:bf:db:df:da:83:66:
df:35:8c:f4:f7:7e:5b:99:19:3c:f9:22:95:20:fb:
0c:99:85:09:b8:c2:13:ba:3f:7e:d6:86:12:0b:53:
34:58:e0:39:ba:74:22:bb:34:ba:af:43:1c:a3:56:
1d:7a:4c:7f:21:73:21:a0:a1:ec:03:e5:76:6e:c5:
67:bf:6a:52:03:5c:3e:d3:30:76:2c:91:96:6c:f5:
e8:ab:d2:47:cc:53:02:d2:7d:ba:cd:ea:c0:86:59:
d5:d9:fa:f1:21:ec:89:06:da:6b:ed:b5:a8:72:70:
12:1b:66:40:b1:a5:0e:92:fd:0f:c0:76:ba:52:8b:
1b:1e:34:8d:60:ee:14:d0:b4:28:4d:37:77:4c:a3:
7c:4b:a9:08:bd:d1:f5:33:12:33:02:60:e7:9b:62:
b9:a8:63:70:cc:02:8e:9b:af:e7:f9:e1:4e:32:33:
b8:6b:f6:7a:3c:1d:75:0e:27:30:e6:e7:70:df:a3:
fb:0b:04:42:3c:01:2f:b9:7f:20:50:0f:8f:bc:48:
d0:14:7d:6e:58:68:76:3a:0c:1e:04:cf:7d:ac:6f:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EF:74:42:53:47:A2:18:6F:46:FD:49:EA:11:0C:80:1C:4B:E1:C2
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:18:9b:11:26:d3:a3:ca:b4:4f:76:54:97:a8:ce:92:43:e5:
56:94:1e:6b:76:f0:f7:00:e4:e9:b5:9d:a0:2e:6d:d5:6c:da:
cc:94:ac:2c:86:4d:3c:5e:bf:4b:d7:94:bc:a7:98:3a:70:17:
81:bd:37:6c:66:79:7c:fb:21:5c:97:ad:08:bf:61:89:93:1b:
ad:db:85:2a:7d:88:b2:32:b7:fb:66:15:4f:99:04:23:e0:18:
e4:72:3b:cd:f1:c8:4e:ef:0d:55:fc:a0:cb:d1:ec:24:b8:95:
21:4a:63:58:f8:a6:73:6b:62:c7:28:bc:37:a7:31:61:29:bf:
21:03:02:e1:6a:21:ab:f3:b2:9e:25:5b:1b:a7:8a:92:d0:5f:
26:66:de:71:1c:d2:9c:e9:02:3e:86:8e:71:a0:f6:7c:07:06:
22:dc:53:3a:2f:10:23:f1:62:1f:9c:4e:cc:c6:93:6a:35:93:
bb:a7:32:fa:19:23:f9:a0:18:94:30:f2:ac:7f:e4:49:c7:10:
cc:37:ad:3b:29:e3:29:99:c2:a1:76:57:a2:85:89:77:bd:e5:
12:ac:68:15:a1:f3:b4:fa:ea:09:41:4b:b7:cd:6d:28:30:3f:
6f:71:70:b7:ed:a8:43:01:70:22:1f:41:35:14:29:02:64:4e:
e1:be:e2:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oebgJU0VXAufKOXxbihHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTUyN2EwNmEwMzVjYmNhZWNmMDBkYWNhMmZkODgzOTlj
ZjlkMTIwHhcNMjUwNjI4MTMwMjMzWhcNMjUwNjI5MTMwMjMzWjAzMTEwLwYDVQQD
Eyg0M2VmNzQ0MjUzNDdhMjE4NmY0NmZkNDllYTExMGM4MDFjNGJlMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniwuHf/b3HtFYNT9zp3UZndXDSQO
x7qYB1geq2BbbJvDeXZshVC/29/ag2bfNYz0935bmRk8+SKVIPsMmYUJuMITuj9+
1oYSC1M0WOA5unQiuzS6r0Mco1Ydekx/IXMhoKHsA+V2bsVnv2pSA1w+0zB2LJGW
bPXoq9JHzFMC0n26zerAhlnV2frxIeyJBtpr7bWocnASG2ZAsaUOkv0PwHa6Uosb
HjSNYO4U0LQoTTd3TKN8S6kIvdH1MxIzAmDnm2K5qGNwzAKOm6/n+eFOMjO4a/Z6
PB11Dicw5udw36P7CwRCPAEvuX8gUA+PvEjQFH1uWGh2OgweBM99rG/95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPvdEJTR6IYb0b9SeoRDIAcS+HCMB8GA1UdIwQY
MBaAFPaVJ6BqA1y8rs8A2sov2IOZz50SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYt
ODVjODU1MjI3YjIzLzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYtODVjODU1MjI3YjIz
LzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBibESbT
o8q0T3ZUl6jOkkPlVpQea3bw9wDk6bWdoC5t1WzazJSsLIZNPF6/S9eUvKeYOnAX
gb03bGZ5fPshXJetCL9hiZMbrduFKn2IsjK3+2YVT5kEI+AY5HI7zfHITu8NVfyg
y9HsJLiVIUpjWPimc2tixyi8N6cxYSm/IQMC4Wohq/OyniVbG6eKktBfJmbecRzS
nOkCPoaOcaD2fAcGItxTOi8QI/FiH5xOzMaTajWTu6cy+hkj+aAYlDDyrH/kSccQ
zDetOynjKZnCoXZXooWJd73lEqxoFaHztPrqCUFLt81tKDA/b3Fwt+2oQwFwIh9B
NRQpAmRO4b7izA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:23 2025 by rpki-client