Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: 1jxo9PntCu7A67w9sbpFZKYFOTI1+7ZYzqhsjdAOJQQ=
Subject key identifier: 9D:B0:84:BE:11:AF:93:9C:22:B6:B7:F7:9E:05:AB:C0:A5:37:E2:14
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 0197B7B364E86F7CEEF9F2A91A8DB60CFB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 11A1
Signing time: Sat 28 Jun 2025 18:01:16 +0000
Manifest this update: Sat 28 Jun 2025 18:01:16 +0000
Manifest next update: Sun 29 Jun 2025 18:01:16 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: uzZLAVApeibY8ewrOi8+dzbT8jl0uNEU4CSoHrBvxOI=)
2: jFj_wAVFaMa6v6BwAOU_Uc1FIto.roa (hash: OCl5X/o2fl4tL/vj2OOu1PZNEi03ZxIx2lIN6Tnh8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:64:e8:6f:7c:ee:f9:f2:a9:1a:8d:b6:0c:fb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Jun 28 18:01:16 2025 GMT
Not After : Jun 29 18:01:16 2025 GMT
Subject: CN=9db084be11af939c22b6b7f79e05abc0a537e214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:aa:99:80:4a:17:90:6c:ee:23:c8:ff:70:75:
74:38:66:fe:25:96:2a:f9:5f:05:bf:70:2a:cd:3b:
e0:c4:bc:59:8c:ad:79:04:7a:5f:3f:b4:9d:a8:94:
d0:47:5f:59:b1:b6:e1:63:e6:ca:1a:57:77:44:75:
e4:34:52:57:a4:ea:e6:e2:9a:89:b7:ef:31:27:90:
cc:ec:6a:c3:b3:3c:3c:cb:ce:4c:91:ed:ed:00:8a:
eb:eb:37:bc:dc:c7:ae:81:47:ee:7b:20:8d:55:27:
c2:f8:3c:f7:9f:3b:d2:3d:5c:ce:f7:d2:7f:48:0a:
87:3d:57:87:8b:33:1f:20:74:eb:9b:29:6a:2a:b1:
54:3f:9a:3c:97:b5:4b:53:f1:59:4f:e3:9d:fd:94:
8b:2e:ea:e9:21:2b:46:a8:c7:92:9e:02:d0:e0:fd:
87:22:55:43:c4:de:aa:5d:1f:11:d7:10:d5:39:c4:
da:10:b4:4b:9b:15:3b:d1:82:ac:ef:eb:fc:e4:97:
ed:db:45:53:db:bb:3a:9f:83:62:52:08:18:27:e3:
ed:91:c3:df:41:95:02:4c:03:f1:44:bd:24:32:9f:
8f:8c:93:02:4d:a9:28:52:d5:e1:b3:dd:02:35:15:
9a:d8:d4:fb:55:29:74:26:be:da:6b:b9:69:2d:47:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B0:84:BE:11:AF:93:9C:22:B6:B7:F7:9E:05:AB:C0:A5:37:E2:14
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:64:83:e4:3c:6a:8d:87:f5:ad:49:f6:f1:d7:18:29:be:dc:
27:f6:93:77:f4:96:db:58:0f:1f:1b:be:e6:08:dc:b9:57:c0:
c8:5d:3c:33:81:1d:63:a8:07:28:14:da:f8:44:3c:06:76:86:
25:ae:3b:44:ea:30:48:fe:71:c5:51:24:d7:3a:e4:e5:17:0c:
6c:94:11:bd:27:8e:e1:17:16:91:c8:bf:64:01:25:98:92:e5:
27:a1:1e:0f:b6:62:81:b2:f9:49:0c:17:6d:71:0a:c6:d0:2a:
2a:f5:39:76:3f:5a:c8:30:5c:bb:45:b7:53:5d:45:de:9d:44:
86:0c:18:b8:f6:8b:31:5d:59:d7:54:83:ae:69:75:54:9c:ba:
a9:34:98:e5:1a:ff:83:3a:91:d1:08:97:7b:f9:e7:07:77:05:
d1:a9:42:48:44:52:9d:23:46:3a:ba:62:71:6f:53:60:d1:da:
15:87:0f:b0:13:63:77:20:ed:f7:d9:e9:69:5b:50:81:54:ac:
c5:24:ab:d3:d0:96:3a:7e:f5:f2:12:c7:55:06:db:ed:32:a1:
51:4f:19:22:fa:67:e6:26:a4:e1:e0:b3:36:54:3e:ac:f0:5a:
03:64:f5:b9:73:f4:bc:f6:cb:d4:f8:26:e0:11:fb:64:2c:db:
1d:0d:66:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s2Tob3zu+fKpGo22DPtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmY0NmJhNmNkOGUyZjM1YWZkYjViNWY5Zjg2NTAyZjgz
NGMzNGEwHhcNMjUwNjI4MTgwMTE2WhcNMjUwNjI5MTgwMTE2WjAzMTEwLwYDVQQD
Eyg5ZGIwODRiZTExYWY5MzljMjJiNmI3Zjc5ZTA1YWJjMGE1MzdlMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36qZgEoXkGzuI8j/cHV0OGb+JZYq
+V8Fv3AqzTvgxLxZjK15BHpfP7SdqJTQR19ZsbbhY+bKGld3RHXkNFJXpOrm4pqJ
t+8xJ5DM7GrDszw8y85Mke3tAIrr6ze83MeugUfueyCNVSfC+Dz3nzvSPVzO99J/
SAqHPVeHizMfIHTrmylqKrFUP5o8l7VLU/FZT+Od/ZSLLurpIStGqMeSngLQ4P2H
IlVDxN6qXR8R1xDVOcTaELRLmxU70YKs7+v85Jft20VT27s6n4NiUggYJ+PtkcPf
QZUCTAPxRL0kMp+PjJMCTakoUtXhs90CNRWa2NT7VSl0Jr7aa7lpLUf87wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2whL4Rr5OcIra3954Fq8ClN+IUMB8GA1UdIwQY
MBaAFPX/Rrps2OLzWv21tfn4ZQL4NMNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUt
NmFkMjBhMmVhY2I4LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUtNmFkMjBhMmVhY2I4
LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGSD5Dxq
jYf1rUn28dcYKb7cJ/aTd/SW21gPHxu+5gjcuVfAyF08M4EdY6gHKBTa+EQ8BnaG
Ja47ROowSP5xxVEk1zrk5RcMbJQRvSeO4RcWkci/ZAElmJLlJ6EeD7ZigbL5SQwX
bXEKxtAqKvU5dj9ayDBcu0W3U11F3p1EhgwYuPaLMV1Z11SDrml1VJy6qTSY5Rr/
gzqR0QiXe/nnB3cF0alCSERSnSNGOrpicW9TYNHaFYcPsBNjdyDt99npaVtQgVSs
xSSr09CWOn718hLHVQbb7TKhUU8ZIvpn5iak4eCzNlQ+rPBaA2T1uXP0vPbL1Pgm
4BH7ZCzbHQ1mNg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:12 2025 by rpki-client