Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier: K/Rf8peTYIhlNMEOU+/ZwenRDwYfTpbwjNze2ws81Ho=
Subject key identifier: 01:E6:21:CA:B3:7B:86:26:F9:C5:80:4C:60:F9:9A:59:BB:F8:C0:A6
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 0197B6A0C0FC34C645286E3B6C7900C037B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number: 0F2D
Signing time: Sat 28 Jun 2025 13:01:17 +0000
Manifest this update: Sat 28 Jun 2025 13:01:17 +0000
Manifest next update: Sun 29 Jun 2025 13:01:17 +0000
Files and hashes: 1: 2JNf8PoETHUWKrlbGvJA_rrI9NI.roa (hash: 1FKPW+J1lE2HkIdpCVRmwjCFGmaaz0tFXqdGn/MO/uM=)
2: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: RGkAh4zerKs+JgXZQn6b6YGy+CuiwmyHQ6Le4dK5GO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c0:fc:34:c6:45:28:6e:3b:6c:79:00:c0:37:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Jun 28 13:01:17 2025 GMT
Not After : Jun 29 13:01:17 2025 GMT
Subject: CN=01e621cab37b8626f9c5804c60f99a59bbf8c0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:04:21:b6:40:02:ca:5a:ff:63:0f:b1:0b:
87:1e:26:b0:74:5e:9f:5d:9b:f2:65:5b:76:37:68:
93:b0:f3:5f:5b:39:58:e2:dc:7a:85:c6:ae:da:8f:
81:a3:7d:9b:ee:c1:90:80:f2:6e:da:a3:d6:e6:f3:
52:39:95:9d:6b:14:a1:cc:d8:e7:a8:1a:06:a3:c3:
b4:72:58:4d:c1:b1:b2:11:04:4f:21:1c:cf:df:0d:
70:d3:ab:2d:f9:12:a9:34:4b:59:85:c7:bc:e9:65:
d2:89:f0:de:5e:ef:d2:06:3b:48:33:d9:79:8b:58:
f7:ef:af:4d:ae:6e:03:44:99:58:ce:d6:c3:3d:11:
17:69:01:7a:56:e2:af:29:cc:fa:50:60:86:e9:71:
38:94:66:42:6d:7d:91:0b:99:71:55:c6:18:e8:ab:
fd:03:2a:5c:bf:57:24:d8:57:de:de:d5:43:a4:7c:
b7:d3:7f:8d:57:1e:66:da:bb:d3:90:ad:1a:48:f0:
d0:72:be:12:12:1d:ca:5d:43:08:b3:b2:c4:4e:72:
ab:0e:b8:ac:5e:bc:bd:c7:02:8c:bb:ed:13:b2:40:
62:63:90:70:ae:17:ea:6a:10:ca:ac:b0:bb:5c:a2:
c8:43:11:ef:61:d0:4d:bf:e9:c1:58:12:91:23:7e:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:21:CA:B3:7B:86:26:F9:C5:80:4C:60:F9:9A:59:BB:F8:C0:A6
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:84:03:dc:c9:03:5e:18:e6:69:40:b1:ed:29:ee:b1:e0:a7:
42:8e:44:0d:6b:c6:fc:82:53:20:81:ab:af:49:34:7c:67:a8:
00:43:46:2f:ab:3a:61:fb:05:b1:14:15:80:78:67:76:be:51:
15:3c:9a:c6:09:3c:ed:b6:f6:c5:38:aa:08:5f:13:f1:aa:b2:
4e:f7:bf:87:8d:7a:f4:e9:39:bc:33:fd:8f:9d:ef:92:db:dc:
52:71:5e:7e:a2:b3:e6:f9:1d:61:a1:fe:0c:d5:e0:d5:8c:bf:
c5:74:a7:0f:13:9b:37:18:8b:6f:63:3f:ee:37:77:85:94:4a:
95:bf:c2:4d:ab:86:04:7e:55:c5:d0:a0:fc:35:bd:a0:aa:1f:
c8:de:e4:ee:19:10:9b:d2:a7:73:75:3f:69:71:86:63:9c:b2:
3c:b4:52:b8:ab:b8:b6:b7:d2:df:79:0e:1c:ef:0d:22:4f:1a:
35:29:b7:d1:67:98:a5:01:05:93:a1:2b:b2:c3:23:5b:19:b9:
1a:1c:62:94:31:cd:9d:0f:8f:e8:79:ec:c3:04:b9:9c:a7:9e:
50:ef:4e:7d:30:f3:ce:46:b5:49:04:bc:7d:85:c1:e3:57:d8:
18:a4:dc:ac:35:36:15:a9:da:04:f1:38:f3:25:92:5d:f4:76:
77:6e:20:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oMD8NMZFKG47bHkAwDe2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTQ2NjhiYTc2Y2Y1NTBjNDEzOWMxNzMwMDE2MDA3N2Rj
ZWEwNTkwHhcNMjUwNjI4MTMwMTE3WhcNMjUwNjI5MTMwMTE3WjAzMTEwLwYDVQQD
EygwMWU2MjFjYWIzN2I4NjI2ZjljNTgwNGM2MGY5OWE1OWJiZjhjMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNkEIbZAAspa/2MPsQuHHiawdF6f
XZvyZVt2N2iTsPNfWzlY4tx6hcau2o+Bo32b7sGQgPJu2qPW5vNSOZWdaxShzNjn
qBoGo8O0clhNwbGyEQRPIRzP3w1w06st+RKpNEtZhce86WXSifDeXu/SBjtIM9l5
i1j3769Nrm4DRJlYztbDPREXaQF6VuKvKcz6UGCG6XE4lGZCbX2RC5lxVcYY6Kv9
Aypcv1ck2Ffe3tVDpHy303+NVx5m2rvTkK0aSPDQcr4SEh3KXUMIs7LETnKrDris
Xry9xwKMu+0TskBiY5BwrhfqahDKrLC7XKLIQxHvYdBNv+nBWBKRI34W7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHmIcqze4Ym+cWATGD5mlm7+MCmMB8GA1UdIwQY
MBaAFPaUZounbPVQxBOcFzABYAd9zqBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEt
N2U1MDkxM2FjMDFkLzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEtN2U1MDkxM2FjMDFk
LzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYQD3MkD
XhjmaUCx7SnuseCnQo5EDWvG/IJTIIGrr0k0fGeoAENGL6s6YfsFsRQVgHhndr5R
FTyaxgk87bb2xTiqCF8T8aqyTve/h4169Ok5vDP9j53vktvcUnFefqKz5vkdYaH+
DNXg1Yy/xXSnDxObNxiLb2M/7jd3hZRKlb/CTauGBH5VxdCg/DW9oKofyN7k7hkQ
m9Knc3U/aXGGY5yyPLRSuKu4trfS33kOHO8NIk8aNSm30WeYpQEFk6ErssMjWxm5
GhxilDHNnQ+P6HnswwS5nKeeUO9OfTDzzka1SQS8fYXB41fYGKTcrDU2FanaBPE4
8yWSXfR2d24gSw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:27 2025 by rpki-client