Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: wFVg5+Ms7wrmoC5zugjrAFMpd2Jts6CLaDMCUdJTg38=
Subject key identifier: 98:5E:CE:15:61:36:04:5D:09:CD:B7:C2:BF:C1:6E:97:91:3D:0A:05
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 0198D4E0CB18BAE8CCE7E51931C860BC2450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 03:02:38 +0000
Manifest this update: Sat 23 Aug 2025 03:02:38 +0000
Manifest next update: Sun 24 Aug 2025 03:02:38 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: 86OowxsQ/RlQToAl1LV2Z3I/PZX+RLMkrc+Lgah9LIM=)
2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:cb:18:ba:e8:cc:e7:e5:19:31:c8:60:bc:24:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Aug 23 03:02:38 2025 GMT
Not After : Aug 24 03:02:38 2025 GMT
Subject: CN=985ece156136045d09cdb7c2bfc16e97913d0a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:ce:99:d6:8c:df:32:40:87:12:02:71:e7:
f6:60:63:f0:fd:18:43:df:77:21:b6:80:da:af:51:
31:76:d9:8d:16:1b:a8:7d:69:83:74:19:92:d0:1a:
45:e8:63:1d:51:9f:2d:f9:31:33:51:5e:c2:98:b9:
36:a6:5a:12:1a:27:c9:9b:a3:de:09:ad:21:c0:56:
50:50:e3:1f:d6:bc:58:7e:fb:92:40:f6:74:aa:a6:
9e:62:80:cb:0b:ab:c2:12:78:59:0e:a8:74:23:a7:
e7:d7:96:2e:92:b8:07:08:5c:97:6f:fe:47:aa:ac:
e1:4a:2a:66:9c:30:db:77:9a:84:cc:b1:1a:a6:72:
48:2b:61:cd:99:63:ce:28:26:c2:02:e7:eb:01:fa:
66:01:87:0b:37:5d:da:8f:50:d7:47:c5:08:94:eb:
ae:e5:8b:49:38:87:b0:4c:7e:58:ec:8b:43:2a:5d:
a5:21:e2:e5:fe:ec:73:cf:fc:58:29:fd:4f:44:dc:
2a:96:87:6b:e0:f8:63:52:67:9c:4a:4e:24:89:49:
5e:2d:3a:e4:da:4c:c7:cf:cc:e6:06:88:70:f7:3f:
27:79:10:88:d7:83:f9:00:c0:e4:04:d0:57:12:ca:
03:cb:e3:94:f2:77:22:6e:b8:d4:29:b5:a9:af:bd:
87:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5E:CE:15:61:36:04:5D:09:CD:B7:C2:BF:C1:6E:97:91:3D:0A:05
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:33:0f:f2:81:d8:b2:c7:62:e6:6a:6c:26:bb:c7:88:71:10:
f1:a6:42:a6:6a:bd:95:cc:4b:a2:80:09:fb:a6:c0:ba:dc:79:
55:e3:e9:25:56:f9:99:bd:e6:93:fc:cf:59:1a:ee:0c:cf:9a:
7c:66:2b:de:70:bf:c5:e6:9c:11:09:54:de:2f:e5:3d:bb:75:
51:37:70:4f:65:b7:91:fc:0e:b0:94:77:a8:a1:71:82:14:75:
b7:ad:09:0e:15:36:5f:a0:71:5a:ea:42:11:e0:58:04:9e:fe:
20:de:b2:fe:24:57:b8:2b:84:d4:be:dc:77:42:80:a9:ea:46:
71:09:a2:a9:da:bb:16:8d:2a:b6:c4:8a:6b:88:5c:e6:ff:7c:
8f:ea:b1:ca:7d:ea:bd:22:99:41:8a:fa:e1:83:d9:17:96:57:
a7:49:b7:77:18:39:c1:fd:67:f6:3f:12:3b:43:72:2a:42:45:
f7:03:b3:a6:a6:f2:d3:18:fa:32:e8:24:d6:73:e1:04:97:23:
37:6a:d5:42:d5:d3:37:6e:a3:73:77:c6:5a:ed:ce:8a:c6:8f:
17:3b:35:41:d0:89:50:41:e8:ee:4a:17:48:b4:8f:ec:c2:5e:
38:a5:95:db:09:1e:69:3e:4a:e8:97:7b:4d:13:96:18:47:41:
6d:cf:62:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4MsYuujM5+UZMchgvCRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MWI5OTgzMWQ0NGIwYmY3YzAwYzUwOTc3ZjYwYjE4NDQz
NDljZjIwHhcNMjUwODIzMDMwMjM4WhcNMjUwODI0MDMwMjM4WjAzMTEwLwYDVQQD
Eyg5ODVlY2UxNTYxMzYwNDVkMDljZGI3YzJiZmMxNmU5NzkxM2QwYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyvOmdaM3zJAhxICcef2YGPw/RhD
33chtoDar1ExdtmNFhuofWmDdBmS0BpF6GMdUZ8t+TEzUV7CmLk2ploSGifJm6Pe
Ca0hwFZQUOMf1rxYfvuSQPZ0qqaeYoDLC6vCEnhZDqh0I6fn15YukrgHCFyXb/5H
qqzhSipmnDDbd5qEzLEapnJIK2HNmWPOKCbCAufrAfpmAYcLN13aj1DXR8UIlOuu
5YtJOIewTH5Y7ItDKl2lIeLl/uxzz/xYKf1PRNwqlodr4PhjUmecSk4kiUleLTrk
2kzHz8zmBohw9z8neRCI14P5AMDkBNBXEsoDy+OU8ncibrjUKbWpr72HqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhezhVhNgRdCc23wr/BbpeRPQoFMB8GA1UdIwQY
MBaAFPcbmYMdRLC/fADFCXf2CxhENJzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82ZTYxNzUtNjM1YS00Y2M2LTk0ZWQt
MGRjZjQ1YTVhZjNkLzEvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC82ZTYxNzUtNjM1YS00Y2M2LTk0ZWQtMGRjZjQ1YTVhZjNk
LzEvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejMP8oHY
ssdi5mpsJrvHiHEQ8aZCpmq9lcxLooAJ+6bAutx5VePpJVb5mb3mk/zPWRruDM+a
fGYr3nC/xeacEQlU3i/lPbt1UTdwT2W3kfwOsJR3qKFxghR1t60JDhU2X6BxWupC
EeBYBJ7+IN6y/iRXuCuE1L7cd0KAqepGcQmiqdq7Fo0qtsSKa4hc5v98j+qxyn3q
vSKZQYr64YPZF5ZXp0m3dxg5wf1n9j8SO0NyKkJF9wOzpqby0xj6Mugk1nPhBJcj
N2rVQtXTN26jc3fGWu3OisaPFzs1QdCJUEHo7koXSLSP7MJeOKWV2wkeaT5K6Jd7
TROWGEdBbc9iZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:41 2025 by rpki-client