Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier: z2Pq8awlHMbfgyML9t+jUCQRX44IxKF7OYTkLqnIZ/A=
Subject key identifier: 3C:82:D1:C5:FF:B4:F5:3F:5B:5D:86:0E:22:79:17:C9:A1:98:20:D9
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 0198D5BBA14F8F61D949623F813FAC432D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number: 0F33
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: wKHdvYq5rPECAPgVJeXe2p3uHFBg/TKS71z6d2xlXhw=)
2: aLKZdbyHdUQAxsRZ3ruuENc53TE.roa (hash: yhXtjt95UoYbZR58FaQJ/OrRbsl6cTOpt3SfPdy5STs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a1:4f:8f:61:d9:49:62:3f:81:3f:ac:43:2d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=3c82d1c5ffb4f53f5b5d860e227917c9a19820d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:2d:89:cb:88:e6:e3:85:84:87:54:11:50:
e4:88:f4:e6:fa:11:78:40:36:6e:7b:31:6b:ec:b9:
6f:6a:f1:b9:32:8d:0a:99:bc:03:52:16:75:d5:eb:
c9:ff:bc:8e:f2:4b:61:79:9d:f8:99:40:23:91:f6:
40:2e:31:6c:eb:ee:55:29:52:10:1f:44:62:31:a0:
18:db:0d:d4:6b:41:03:5b:b2:a4:fb:88:52:aa:f5:
8d:ed:aa:c7:87:a3:16:57:c6:81:a4:3c:57:5f:bd:
d7:d5:c0:68:0d:e4:d0:26:b8:40:f7:54:a2:33:9f:
6c:72:26:8a:70:26:87:fb:96:e4:00:e5:13:10:5c:
85:53:0e:d8:91:a3:30:2d:a4:16:34:0b:f5:c5:52:
8e:33:2a:b8:6f:de:6e:9a:55:00:de:38:67:8d:8a:
2b:02:3b:ca:3d:e5:fa:93:b8:61:72:1b:4a:52:10:
f5:75:e5:43:90:7e:f0:22:9e:8f:03:90:8c:02:c2:
79:fe:8c:3e:cb:dd:9b:f0:81:f7:54:31:1d:2f:2c:
79:14:1d:39:f1:cb:3a:3f:92:f9:9f:70:5d:19:17:
6e:f8:0a:25:25:13:47:26:01:3b:36:55:7d:90:bb:
25:e1:87:9d:e5:9c:02:fa:9e:f9:fc:c9:b8:8f:11:
2f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:82:D1:C5:FF:B4:F5:3F:5B:5D:86:0E:22:79:17:C9:A1:98:20:D9
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:46:d9:57:b7:dd:4e:22:82:02:38:44:7c:d9:79:8d:da:36:
cb:4e:d4:91:58:df:07:49:28:9e:ef:63:4d:8c:e5:3e:e5:74:
8f:b3:d4:db:d4:fa:6a:37:ff:be:0c:cf:6c:1c:63:c3:39:65:
db:89:b2:36:d5:a7:9c:6f:a9:ca:28:b2:a8:cc:74:19:14:ba:
25:3b:5b:76:58:ff:0b:01:b7:81:44:52:31:94:37:7a:89:e8:
9c:11:f6:c0:bd:ca:cb:16:0f:3b:7b:a5:7e:74:f6:2a:9a:91:
78:74:0e:5b:b2:85:ad:90:d9:f7:91:91:44:52:5d:ae:e0:2f:
e3:9c:68:17:af:9d:25:aa:14:93:bd:17:95:9c:95:3a:90:d4:
5b:36:9f:e2:d2:db:e5:3e:6c:cb:dc:29:57:98:89:9e:78:8a:
41:fa:c1:1b:d0:2d:6f:5d:7f:82:41:c6:ca:d2:91:cb:de:27:
1b:0e:d9:45:9b:04:3f:58:80:a4:d9:8f:d9:fc:e8:f7:1d:05:
b0:dd:39:ad:8a:86:5d:d5:cf:1e:b2:82:d1:c7:5f:6b:76:da:
92:d1:c3:b6:a7:e0:ce:87:1e:e6:a6:1c:d6:ad:d7:d8:ec:2f:
80:32:1e:02:f4:58:6e:98:26:60:14:74:e3:27:c9:d6:0b:c9:
59:6a:27:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6FPj2HZSWI/gT+sQy2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2E0ODEyYTE1OWVmNmE5ZTkyOTcyZTc1NzJhZDY2MmQ3
MjIxNWEwHhcNMjUwODIzMDcwMTQwWhcNMjUwODI0MDcwMTQwWjAzMTEwLwYDVQQD
EygzYzgyZDFjNWZmYjRmNTNmNWI1ZDg2MGUyMjc5MTdjOWExOTgyMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY0ticuI5uOFhIdUEVDkiPTm+hF4
QDZuezFr7LlvavG5Mo0KmbwDUhZ11evJ/7yO8ktheZ34mUAjkfZALjFs6+5VKVIQ
H0RiMaAY2w3Ua0EDW7Kk+4hSqvWN7arHh6MWV8aBpDxXX73X1cBoDeTQJrhA91Si
M59sciaKcCaH+5bkAOUTEFyFUw7YkaMwLaQWNAv1xVKOMyq4b95umlUA3jhnjYor
AjvKPeX6k7hhchtKUhD1deVDkH7wIp6PA5CMAsJ5/ow+y92b8IH3VDEdLyx5FB05
8cs6P5L5n3BdGRdu+AolJRNHJgE7NlV9kLsl4Yed5ZwC+p75/Mm4jxEv3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyC0cX/tPU/W12GDiJ5F8mhmCDZMB8GA1UdIwQY
MBaAFPV6SBKhWe9qnpKXLnVyrWYtciFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhwSUVxRlo3MnFla3BjdWRYS3RaaTF5SVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZmJlMTAtOTQ4Ny00MTE1LTk4NTYt
YmViNzBmZDQxNWNhLzEvOVhwSUVxRlo3MnFla3BjdWRYS3RaaTF5SVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80ZmJlMTAtOTQ4Ny00MTE1LTk4NTYtYmViNzBmZDQxNWNh
LzEvOVhwSUVxRlo3MnFla3BjdWRYS3RaaTF5SVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUbZV7fd
TiKCAjhEfNl5jdo2y07UkVjfB0konu9jTYzlPuV0j7PU29T6ajf/vgzPbBxjwzll
24myNtWnnG+pyiiyqMx0GRS6JTtbdlj/CwG3gURSMZQ3eononBH2wL3KyxYPO3ul
fnT2KpqReHQOW7KFrZDZ95GRRFJdruAv45xoF6+dJaoUk70XlZyVOpDUWzaf4tLb
5T5sy9wpV5iJnniKQfrBG9Atb11/gkHGytKRy94nGw7ZRZsEP1iApNmP2fzo9x0F
sN05rYqGXdXPHrKC0cdfa3baktHDtqfgzoce5qYc1q3X2OwvgDIeAvRYbpgmYBR0
4yfJ1gvJWWonKg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:38 2025 by rpki-client