Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier: JVPpg2tYFWXHAPlOoYJn7GPlDuprWR9vcsgnER5HaPg=
Subject key identifier: 8F:52:D5:F8:77:B6:9B:C5:5F:FE:1C:1A:34:9D:94:0A:1D:D9:AF:A9
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial: 0197B70F0F97DF8F0F849F4EB196809E1106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number: 12EA
Signing time: Sat 28 Jun 2025 15:01:46 +0000
Manifest this update: Sat 28 Jun 2025 15:01:46 +0000
Manifest next update: Sun 29 Jun 2025 15:01:46 +0000
Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: RnwL0jO4tYQavf0+nT8QeeXB/mxpYzo8v/cY+mH8s9o=)
2: k_l8rtQi2P6fa9dQhkQ5j5jaCYE.roa (hash: sMo/6l6OJgyWFVqU8cFbnDYPktbERaDpmId+0GVplIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:0f:97:df:8f:0f:84:9f:4e:b1:96:80:9e:11:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Validity
Not Before: Jun 28 15:01:46 2025 GMT
Not After : Jun 29 15:01:46 2025 GMT
Subject: CN=8f52d5f877b69bc55ffe1c1a349d940a1dd9afa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:74:75:5a:bd:98:c3:de:17:8c:a6:a0:c2:03:
a0:1d:be:07:0a:12:59:07:dc:7e:14:da:a1:23:4b:
4e:20:a3:41:48:0d:ca:dd:20:00:a8:67:28:7d:6f:
46:9a:69:58:34:79:63:96:2a:54:da:ce:09:34:07:
11:36:46:cb:69:6b:1c:89:89:f4:71:69:4b:07:8a:
65:e3:54:74:ff:fe:89:de:67:ec:d2:be:da:e0:d8:
ac:04:3d:fa:08:4e:5f:9f:00:30:b5:3b:f4:54:46:
02:7c:4b:17:48:18:71:ad:0e:2b:4e:14:47:51:47:
c5:0e:54:64:e6:d6:74:18:7c:b6:5c:9d:59:0b:e2:
98:12:1f:ad:29:87:7a:c4:88:c3:11:85:7d:67:d8:
5b:b6:22:b8:75:30:e0:64:8b:64:85:f7:d7:d3:74:
eb:48:06:91:62:76:76:19:8d:64:57:1f:55:77:e2:
7a:81:c0:44:ee:c5:e4:62:39:7c:8c:f8:12:b7:69:
82:cf:9d:a4:0c:95:4c:1b:fb:85:c1:39:f4:75:be:
54:81:64:b1:1e:7d:bc:ab:bb:c1:a9:51:6a:9f:ea:
28:7c:7c:e6:a9:38:7c:e1:02:1d:04:95:27:07:36:
0c:df:6a:b7:de:c5:c9:b4:9c:9d:3b:62:84:5e:07:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:52:D5:F8:77:B6:9B:C5:5F:FE:1C:1A:34:9D:94:0A:1D:D9:AF:A9
X509v3 Authority Key Identifier:
keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0c:23:3f:00:e6:b5:72:5f:8e:5b:38:76:df:f4:ee:c6:f2:
7f:b4:84:b3:af:2c:6c:ad:1c:df:08:2a:c0:20:8a:bc:aa:0e:
14:11:bf:85:dd:4a:ce:4b:42:c1:43:0c:9e:dd:54:39:7e:90:
c3:45:1c:5c:24:41:b4:e0:a2:90:e4:1b:49:7e:3f:20:39:e1:
fa:b4:89:3a:81:df:73:0d:cf:39:74:b1:f7:a0:2a:ee:61:19:
1a:26:54:86:8e:95:88:e5:64:90:80:88:d9:66:0c:44:ee:9b:
c4:28:53:7d:4c:be:9e:99:36:ba:dd:08:95:ff:8c:e1:86:d7:
2f:a5:4c:70:eb:b0:40:bc:7f:4e:f0:8e:d6:df:ef:cb:1f:65:
b2:ac:e4:cc:29:57:02:d7:b4:8b:e7:c7:d4:9e:05:e3:d4:46:
03:77:a8:cf:2f:0e:d0:09:1c:db:3b:80:d9:23:af:bb:f4:df:
81:27:8f:cb:b8:15:ad:2d:8f:97:1b:ea:e9:e4:af:4b:85:e9:
68:91:61:28:b2:56:2d:cc:a3:a1:32:bc:cc:ce:c1:96:26:d8:
62:a0:52:f0:22:10:f4:53:f5:6e:c8:26:84:69:51:43:64:e9:
1a:65:ab:2a:da:d8:2f:97:d2:43:c4:40:20:9c:48:7e:c8:b0:
07:65:68:b6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe3Dw+X348PhJ9OsZaAnhEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NWY1YTM1NzM4YzMyMjllMmY0Mzk0NTAwYzMyMmM4Mjc1
YTk3YTIwHhcNMjUwNjI4MTUwMTQ2WhcNMjUwNjI5MTUwMTQ2WjAzMTEwLwYDVQQD
Eyg4ZjUyZDVmODc3YjY5YmM1NWZmZTFjMWEzNDlkOTQwYTFkZDlhZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3R1Wr2Yw94XjKagwgOgHb4HChJZ
B9x+FNqhI0tOIKNBSA3K3SAAqGcofW9GmmlYNHljlipU2s4JNAcRNkbLaWsciYn0
cWlLB4pl41R0//6J3mfs0r7a4NisBD36CE5fnwAwtTv0VEYCfEsXSBhxrQ4rThRH
UUfFDlRk5tZ0GHy2XJ1ZC+KYEh+tKYd6xIjDEYV9Z9hbtiK4dTDgZItkhffX03Tr
SAaRYnZ2GY1kVx9Vd+J6gcBE7sXkYjl8jPgSt2mCz52kDJVMG/uFwTn0db5UgWSx
Hn28q7vBqVFqn+oofHzmqTh84QIdBJUnBzYM32q33sXJtJydO2KEXgcXewIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFI9S1fh3tpvFX/4cGjSdlAod2a+pMB8GA1UdIwQY
MBaAFPlfWjVzjDIp4vQ5RQDDIsgnWpeiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1WOWFOWE9NTWluaTlEbEZBTU1peUNkYWw2SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvZDQ5YzIxLWRlYWQtNGRjNC05NDc4
LWExMGI3Y2M5OGJjOC8xLzEtVjlhTlhPTU1pbmk5RGxGQU1NaXlDZGFsNkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2QxL2Q0OWMyMS1kZWFkLTRkYzQtOTQ3OC1hMTBiN2NjOThi
YzgvMS8xLVY5YU5YT01NaW5pOURsRkFNTWl5Q2RhbDZJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAwj
PwDmtXJfjls4dt/07sbyf7SEs68sbK0c3wgqwCCKvKoOFBG/hd1KzktCwUMMnt1U
OX6Qw0UcXCRBtOCikOQbSX4/IDnh+rSJOoHfcw3POXSx96Aq7mEZGiZUho6ViOVk
kICI2WYMRO6bxChTfUy+npk2ut0Ilf+M4YbXL6VMcOuwQLx/TvCO1t/vyx9lsqzk
zClXAte0i+fH1J4F49RGA3eozy8O0Akc2zuA2SOvu/TfgSePy7gVrS2Plxvq6eSv
S4XpaJFhKLJWLcyjoTK8zM7BlibYYqBS8CIQ9FP1bsgmhGlRQ2TpGmWrKtrYL5fS
Q8RAIJxIfsiwB2Votg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:34 2025 by rpki-client