Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: nFD6Zo9SDzyzbgrJry1tixzNfgCoKb11fazBrTb4x78=
Subject key identifier: 37:BD:31:F2:AE:74:06:5F:60:4B:E7:8C:C6:F1:F4:47:73:51:0D:14
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 0197B5C4EDFB8894E4EE6740C29C6E0849A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 09:01:11 +0000
Manifest this update: Sat 28 Jun 2025 09:01:11 +0000
Manifest next update: Sun 29 Jun 2025 09:01:11 +0000
Files and hashes: 1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: acX3IFVHzCftMz5mhL1xaP8C+XNc0QFqBCgvybUW1xI=)
2: LF_3HwZmRrCki2d-FP5TfnY-Yfo.roa (hash: OqUUHUSkyKdGpgaBU1hHW7IYtyTJfajGz9ID3t644ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:ed:fb:88:94:e4:ee:67:40:c2:9c:6e:08:49:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Jun 28 09:01:11 2025 GMT
Not After : Jun 29 09:01:11 2025 GMT
Subject: CN=37bd31f2ae74065f604be78cc6f1f44773510d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:8d:e1:0f:bb:fb:90:93:1e:24:24:73:42:
47:9d:86:22:87:82:d4:f7:b6:24:d0:1d:09:66:d1:
01:31:4f:bc:a2:d8:47:21:bb:86:8e:9a:f2:2e:7d:
c8:0c:ad:e0:20:3e:e9:3e:4a:e7:fa:fb:86:36:82:
45:9b:ce:d8:19:eb:ac:25:0f:87:ca:a9:2e:8d:50:
33:14:90:ba:15:e0:3a:96:e9:59:80:09:75:53:21:
63:a7:59:30:00:b7:9b:29:4a:5e:90:71:96:71:d3:
d3:11:26:75:b7:eb:33:fc:5b:94:01:62:cf:74:56:
89:a2:35:77:44:cc:b8:6e:1c:f6:ca:62:8e:40:84:
f7:d1:4b:be:8e:5b:50:d6:5e:63:9e:e8:ac:27:db:
f9:f7:09:00:52:2f:d9:f3:67:7b:b0:4e:1b:2a:55:
bc:07:7a:1b:35:1a:14:4f:e2:d3:c4:83:0a:fc:55:
3b:99:88:67:0d:2a:06:b6:e1:47:4b:7e:46:d2:e4:
10:11:5e:6c:35:30:dd:a6:c2:45:2f:f3:14:34:a4:
ab:31:8f:b8:81:54:f8:14:88:88:24:81:0f:a2:16:
95:2f:11:6e:7e:cf:ed:3e:4e:61:cd:fb:f4:08:fe:
15:5f:9f:c1:bf:7b:28:3e:2d:e0:32:60:96:84:ed:
9d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BD:31:F2:AE:74:06:5F:60:4B:E7:8C:C6:F1:F4:47:73:51:0D:14
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c4:09:ce:b8:e0:32:1d:1d:2e:b0:54:b5:b7:65:27:3d:fd:
5b:8c:f1:fb:e9:47:85:44:db:8c:43:30:5b:bb:e1:6d:ca:3f:
41:be:fb:11:1c:a0:35:ae:e0:0c:7b:09:61:63:63:7f:85:66:
20:93:00:2f:54:d6:03:61:91:e9:43:17:b6:f3:c6:44:61:6a:
b3:a9:dc:4f:f6:a3:38:d0:fc:85:f2:1c:91:03:24:f0:d7:77:
1c:6d:28:3a:f0:df:ec:8e:69:d1:c9:9e:68:12:da:f8:6f:62:
81:53:18:5d:7a:ab:32:7b:93:c0:3e:11:ea:94:2b:a0:89:7d:
45:39:bc:f1:48:ed:3f:40:3a:67:85:ab:cc:ac:42:40:c1:a8:
1e:6c:6d:1e:57:75:b6:01:1c:05:a9:b7:d0:2f:60:2e:13:d2:
a8:2f:c3:f7:2b:b2:fb:8d:51:92:2b:9b:d8:23:66:3f:f3:dd:
5f:00:14:c9:b9:62:49:00:09:01:50:74:2c:ce:35:f2:80:c1:
29:7f:a3:b7:f4:22:b8:06:a8:4f:4d:c7:fc:c5:82:18:08:a8:
e1:38:9e:fc:43:1f:55:fb:76:e5:d6:e3:c4:c5:b9:c8:d9:26:
ec:70:b7:71:e8:0a:ab:a2:6c:6d:a4:6d:1b:c6:64:a7:9b:cd:
d6:b8:e7:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xO37iJTk7mdAwpxuCEmjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MGI2YjQyNTYwMGEyNWE2ZGMxMzJkZTUxNDc5N2UyYWE0
YjAyNDcwHhcNMjUwNjI4MDkwMTExWhcNMjUwNjI5MDkwMTExWjAzMTEwLwYDVQQD
EygzN2JkMzFmMmFlNzQwNjVmNjA0YmU3OGNjNmYxZjQ0NzczNTEwZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XGN4Q+7+5CTHiQkc0JHnYYih4LU
97Yk0B0JZtEBMU+8othHIbuGjpryLn3IDK3gID7pPkrn+vuGNoJFm87YGeusJQ+H
yqkujVAzFJC6FeA6lulZgAl1UyFjp1kwALebKUpekHGWcdPTESZ1t+sz/FuUAWLP
dFaJojV3RMy4bhz2ymKOQIT30Uu+jltQ1l5jnuisJ9v59wkAUi/Z82d7sE4bKlW8
B3obNRoUT+LTxIMK/FU7mYhnDSoGtuFHS35G0uQQEV5sNTDdpsJFL/MUNKSrMY+4
gVT4FIiIJIEPohaVLxFufs/tPk5hzfv0CP4VX5/Bv3soPi3gMmCWhO2dgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDe9MfKudAZfYEvnjMbx9EdzUQ0UMB8GA1UdIwQY
MBaAFPULa0JWAKJabcEy3lFHl+KqSwJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYt
MTAwZjg0ZmU5NTBjLzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYtMTAwZjg0ZmU5NTBj
LzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsQJzrjg
Mh0dLrBUtbdlJz39W4zx++lHhUTbjEMwW7vhbco/Qb77ERygNa7gDHsJYWNjf4Vm
IJMAL1TWA2GR6UMXtvPGRGFqs6ncT/ajOND8hfIckQMk8Nd3HG0oOvDf7I5p0cme
aBLa+G9igVMYXXqrMnuTwD4R6pQroIl9RTm88UjtP0A6Z4WrzKxCQMGoHmxtHld1
tgEcBam30C9gLhPSqC/D9yuy+41Rkiub2CNmP/PdXwAUybliSQAJAVB0LM418oDB
KX+jt/QiuAaoT03H/MWCGAio4Tie/EMfVft25dbjxMW5yNkm7HC3cegKq6JsbaRt
G8Zkp5vN1rjnSg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:49 2025 by rpki-client