Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: tvPmzspn9ns7rlczuy0C0nve8yeyfIx8DfrmBDDDSfA=
Subject key identifier: 91:58:07:66:4A:9B:8E:15:69:18:A3:D2:35:57:D7:8A:29:D3:FB:3D
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 0198D5BBB05C63679C95575EDA2EB1FC279D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 075A
Signing time: Sat 23 Aug 2025 07:01:44 +0000
Manifest this update: Sat 23 Aug 2025 07:01:44 +0000
Manifest next update: Sun 24 Aug 2025 07:01:44 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: iBSUx51PuQ5Y/mp+M7JmfUf0QfPF2/LY67fcCW2uhlg=)
2: K7A7C17ACPryQjif4dPHFWCYnmw.roa (hash: yO751NJRBOSn6gMdo40XzsiJt+C4xy6LseVpnpZi3tM=)
3: nkm_AqdgrcdDszFPZGQsvTeQ99w.roa (hash: tWZj3SfE+CRbF9Ic1OICFS30cFtSOef9JMakRYCQj78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b0:5c:63:67:9c:95:57:5e:da:2e:b1:fc:27:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Aug 23 07:01:44 2025 GMT
Not After : Aug 24 07:01:44 2025 GMT
Subject: CN=915807664a9b8e156918a3d23557d78a29d3fb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:e2:c7:29:ec:10:3f:5a:44:c2:9f:2c:29:
6f:64:b9:75:44:62:42:ba:31:fc:6a:9b:30:c9:2d:
19:3c:1c:93:31:3f:15:a7:e3:65:45:c0:24:2a:26:
2a:48:2a:a2:ae:67:d6:5b:99:71:d4:22:0a:bc:35:
f3:81:fd:61:1c:28:a2:2f:26:79:00:54:f4:97:f1:
7e:da:30:9e:45:ec:6a:fd:17:87:05:b8:51:61:99:
2c:d2:94:68:72:9a:4d:df:3b:c3:60:a9:d4:7b:59:
40:6a:80:a7:ba:73:58:61:63:32:46:85:53:b9:88:
3e:90:38:56:3a:bc:26:96:4d:a8:38:df:6c:c0:58:
51:42:93:b7:67:39:8a:ac:f8:d4:e8:5b:5f:0c:3d:
3a:89:dc:fd:eb:76:e5:9a:db:41:49:e2:e8:b7:27:
a6:81:42:5c:99:e9:3a:00:16:40:07:6a:c9:26:98:
0c:e0:d1:aa:27:c2:1d:0a:12:b9:63:de:16:58:1e:
1a:7d:e6:76:17:c2:1d:65:a9:58:05:f1:0d:6b:4c:
7e:44:20:95:41:c8:05:32:41:09:b1:01:85:48:f8:
cc:ee:49:b0:37:42:da:2a:46:c0:15:d7:05:84:7c:
9e:c4:e6:9f:62:d4:d8:ce:03:41:4e:0d:08:af:6b:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:58:07:66:4A:9B:8E:15:69:18:A3:D2:35:57:D7:8A:29:D3:FB:3D
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cd:ac:60:21:b0:40:60:c5:cf:98:b6:fe:66:56:69:8d:29:
48:3d:5f:ab:00:d1:e2:5e:6c:f1:e4:6b:e0:50:cd:33:c3:64:
40:0f:cc:c2:89:ac:56:10:e8:bb:ca:a3:f7:ac:0e:4f:46:1f:
d2:13:1a:c3:9a:01:9a:47:75:be:07:43:d5:45:b1:03:e7:d7:
06:68:29:14:a8:4a:ab:6a:7e:f5:b8:ee:e4:0f:6b:b4:e5:07:
e5:9b:a6:cc:fe:fa:c9:de:66:6d:15:3e:82:85:db:21:78:8e:
eb:b1:a1:f3:6a:5b:92:64:df:b5:e6:81:39:cd:0e:15:a6:71:
96:b8:fb:c6:a8:38:be:71:04:1b:03:b8:06:c8:da:9b:17:35:
99:93:db:77:08:fd:d1:4a:f6:e1:73:78:41:9e:01:9d:ef:37:
a8:7e:f5:c7:e1:38:9c:f7:8f:f6:84:9a:cc:1b:50:f4:61:c7:
ff:08:34:63:18:e6:d8:e5:6b:9d:97:2b:15:a8:e0:48:0a:89:
30:da:cd:be:5b:66:20:c1:8e:9f:d2:71:9c:1e:f6:12:aa:50:
2a:29:44:5a:a1:d4:ea:ee:c1:e6:12:e1:dc:04:4d:4d:cb:15:
f3:34:6b:85:ed:41:a6:c3:02:69:dd:33:9c:b2:50:b9:14:d8:
69:38:47:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7BcY2eclVde2i6x/CedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZDRlMGRhNjhjMTQ0NjY4OTQxOWQxMDM3MTFiMTkxZGVk
NTY3ZjQwHhcNMjUwODIzMDcwMTQ0WhcNMjUwODI0MDcwMTQ0WjAzMTEwLwYDVQQD
Eyg5MTU4MDc2NjRhOWI4ZTE1NjkxOGEzZDIzNTU3ZDc4YTI5ZDNmYjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHDixynsED9aRMKfLClvZLl1RGJC
ujH8apswyS0ZPByTMT8Vp+NlRcAkKiYqSCqirmfWW5lx1CIKvDXzgf1hHCiiLyZ5
AFT0l/F+2jCeRexq/ReHBbhRYZks0pRocppN3zvDYKnUe1lAaoCnunNYYWMyRoVT
uYg+kDhWOrwmlk2oON9swFhRQpO3ZzmKrPjU6FtfDD06idz963blmttBSeLotyem
gUJcmek6ABZAB2rJJpgM4NGqJ8IdChK5Y94WWB4afeZ2F8IdZalYBfENa0x+RCCV
QcgFMkEJsQGFSPjM7kmwN0LaKkbAFdcFhHyexOafYtTYzgNBTg0Ir2s1ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFYB2ZKm44VaRij0jVX14op0/s9MB8GA1UdIwQY
MBaAFNPU4NpowURmiUGdEDcRsZHe1Wf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjIt
Y2IzNDRmMTgwMGVkLzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjItY2IzNDRmMTgwMGVk
LzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANs2sYCGw
QGDFz5i2/mZWaY0pSD1fqwDR4l5s8eRr4FDNM8NkQA/MwomsVhDou8qj96wOT0Yf
0hMaw5oBmkd1vgdD1UWxA+fXBmgpFKhKq2p+9bju5A9rtOUH5ZumzP76yd5mbRU+
goXbIXiO67Gh82pbkmTfteaBOc0OFaZxlrj7xqg4vnEEGwO4Bsjamxc1mZPbdwj9
0Ur24XN4QZ4Bne83qH71x+E4nPeP9oSazBtQ9GHH/wg0Yxjm2OVrnZcrFajgSAqJ
MNrNvltmIMGOn9JxnB72EqpQKilEWqHU6u7B5hLh3ARNTcsV8zRrhe1BpsMCad0z
nLJQuRTYaThHMw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:16 2025 by rpki-client