Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier: p3mK7pajq64oxxYTmjWjMlwIwX2gfQS1ego0cpRmmuY=
Subject key identifier: 00:5E:D8:FB:DF:A6:AE:76:3B:46:A8:D1:50:42:9D:A4:1C:2D:3E:38
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 0198D66073D5A75F6BFDF2BF5DCC9E559653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number: 0FC2
Signing time: Sat 23 Aug 2025 10:01:41 +0000
Manifest this update: Sat 23 Aug 2025 10:01:41 +0000
Manifest next update: Sun 24 Aug 2025 10:01:41 +0000
Files and hashes: 1: 2JNf8PoETHUWKrlbGvJA_rrI9NI.roa (hash: 1FKPW+J1lE2HkIdpCVRmwjCFGmaaz0tFXqdGn/MO/uM=)
2: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: kOeOAIXI+Hyn/zJuc5o/5fNeAeu0k6G/zbuQVS0vM6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:73:d5:a7:5f:6b:fd:f2:bf:5d:cc:9e:55:96:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Aug 23 10:01:41 2025 GMT
Not After : Aug 24 10:01:41 2025 GMT
Subject: CN=005ed8fbdfa6ae763b46a8d150429da41c2d3e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:85:d5:92:26:32:ca:f5:14:0a:ad:cf:f2:
3d:b5:7c:ca:4c:ca:77:eb:e2:f3:7d:e6:36:34:81:
cc:08:80:1a:50:0c:01:1d:2a:aa:92:72:94:3d:45:
85:f0:ad:0f:41:63:a7:36:b9:50:76:8d:4d:d5:89:
5e:ea:eb:f3:7a:9d:f9:ee:01:01:62:a1:30:62:a4:
ca:04:cb:03:70:e8:b7:b4:80:e2:f8:8d:bb:34:85:
32:bf:e0:ad:49:09:b1:3c:23:58:ce:4f:fd:1d:b8:
e4:f2:4a:e2:e3:9a:d5:40:7d:9e:5c:c6:d3:bd:da:
08:5a:9e:dc:6e:72:08:9b:ad:30:97:c0:fc:6e:f9:
23:ed:ff:a9:2d:18:5c:6b:82:53:c3:87:52:3a:c6:
4c:e2:7a:f2:d9:0a:bc:ae:54:28:02:3b:7e:3d:f8:
b0:16:24:62:68:41:d4:0f:a9:9d:5a:29:1b:7b:a4:
c1:08:4d:83:4b:05:ee:5f:eb:a2:35:81:6f:e6:14:
c7:41:7f:95:70:99:56:00:40:e4:ec:d0:05:52:83:
5e:f3:d4:a1:1d:d2:91:27:26:c6:10:cb:f5:94:a6:
3c:eb:22:d7:e4:11:f2:81:21:51:9a:31:c1:92:16:
39:65:88:ef:5e:65:12:93:bf:5e:e2:bb:c1:67:a4:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:D8:FB:DF:A6:AE:76:3B:46:A8:D1:50:42:9D:A4:1C:2D:3E:38
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b2:9f:37:ff:ca:64:31:f0:a5:cd:77:14:74:e9:41:96:c0:
e7:59:c6:f3:f7:86:d6:67:eb:4e:52:26:f9:75:62:67:37:5b:
f8:db:60:7a:fc:0f:0a:f7:c5:33:aa:44:e9:55:50:ff:2f:e7:
ac:36:c6:4b:a6:42:8a:81:38:62:fd:52:f7:ff:6d:91:3a:f7:
7f:a7:b7:7c:66:e7:43:b0:0b:aa:fe:4c:33:24:57:11:97:26:
e0:5c:18:cf:26:a3:68:ac:ff:3e:ad:78:fe:4a:ff:a6:3f:c8:
03:32:59:76:4a:87:20:f5:38:b3:13:7e:d9:60:09:71:fe:de:
91:cd:4b:82:5e:a0:44:3a:bd:10:3f:e4:10:c2:81:fa:5d:b4:
54:dd:27:8e:90:07:13:09:44:09:5b:bc:e7:2b:b8:49:04:c0:
c0:ab:fb:4a:2c:fd:51:e7:3d:a0:51:01:91:38:72:0f:fc:93:
a6:19:95:5f:d9:db:6c:16:1f:d7:cc:3c:48:d8:f9:f7:71:46:
80:ff:c8:f8:6f:5f:c5:48:02:33:8b:5e:f8:4f:65:7a:d4:81:
f4:0c:c7:74:d8:ab:dc:1e:85:77:1b:de:2f:ce:12:76:5d:e2:
65:76:60:6a:d9:d1:ae:58:f8:21:60:f0:16:e1:e7:27:e0:15:
7b:1d:63:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYHPVp19r/fK/XcyeVZZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTQ2NjhiYTc2Y2Y1NTBjNDEzOWMxNzMwMDE2MDA3N2Rj
ZWEwNTkwHhcNMjUwODIzMTAwMTQxWhcNMjUwODI0MTAwMTQxWjAzMTEwLwYDVQQD
EygwMDVlZDhmYmRmYTZhZTc2M2I0NmE4ZDE1MDQyOWRhNDFjMmQzZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjGF1ZImMsr1FAqtz/I9tXzKTMp3
6+LzfeY2NIHMCIAaUAwBHSqqknKUPUWF8K0PQWOnNrlQdo1N1Yle6uvzep357gEB
YqEwYqTKBMsDcOi3tIDi+I27NIUyv+CtSQmxPCNYzk/9Hbjk8kri45rVQH2eXMbT
vdoIWp7cbnIIm60wl8D8bvkj7f+pLRhca4JTw4dSOsZM4nry2Qq8rlQoAjt+Pfiw
FiRiaEHUD6mdWikbe6TBCE2DSwXuX+uiNYFv5hTHQX+VcJlWAEDk7NAFUoNe89Sh
HdKRJybGEMv1lKY86yLX5BHygSFRmjHBkhY5ZYjvXmUSk79e4rvBZ6RN4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABe2Pvfpq52O0ao0VBCnaQcLT44MB8GA1UdIwQY
MBaAFPaUZounbPVQxBOcFzABYAd9zqBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEt
N2U1MDkxM2FjMDFkLzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEtN2U1MDkxM2FjMDFk
LzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLKfN//K
ZDHwpc13FHTpQZbA51nG8/eG1mfrTlIm+XViZzdb+NtgevwPCvfFM6pE6VVQ/y/n
rDbGS6ZCioE4Yv1S9/9tkTr3f6e3fGbnQ7ALqv5MMyRXEZcm4FwYzyajaKz/Pq14
/kr/pj/IAzJZdkqHIPU4sxN+2WAJcf7ekc1Lgl6gRDq9ED/kEMKB+l20VN0njpAH
EwlECVu85yu4SQTAwKv7Siz9Uec9oFEBkThyD/yTphmVX9nbbBYf18w8SNj593FG
gP/I+G9fxUgCM4te+E9letSB9AzHdNir3B6FdxveL84Sdl3iZXZgatnRrlj4IWDw
FuHnJ+AVex1jiA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:49 2025 by rpki-client