Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: ebXjvF9aP99sgviFY4ImKeyH4Ld/lEvZC6dxTERGmiU=
Subject key identifier: 2F:01:CE:61:69:36:EF:93:98:16:B5:C9:FB:F8:2C:EB:3A:BA:25:A0
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 0197B77C0353D7C81173069D5D720F48CEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 077D
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: 8wvKaNZPMB6fonw1NrYfUg2gnbk.roa (hash: 3qdVN8DevKvufLzN2R8DX4QYa4MJxDLMUWeWlDqsEhs=)
2: ERoj6kZ7f09LojIbK7F6-iIQ3Q0.roa (hash: vYYSfaPpbNWHfZROyqOxGskbcYsJiw4rOn2tsPINhLk=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: sbGumrNdn/0N/r6eh7g9gLK8/M0Ge9+cWankOic5jy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:03:53:d7:c8:11:73:06:9d:5d:72:0f:48:ce:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=2f01ce616936ef939816b5c9fbf82ceb3aba25a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:e0:9d:e0:dd:aa:2d:54:18:cc:1b:cd:b9:
e9:96:9b:eb:7d:91:1b:57:ea:ca:0f:d3:ea:1d:b3:
64:31:02:a3:16:98:c1:60:77:90:e8:4b:5d:ec:64:
5c:8e:81:1e:52:b4:7c:b0:f5:fe:38:45:42:89:f6:
16:56:dc:5d:5a:e5:ca:02:6c:44:6e:f5:d1:e6:9c:
5f:8c:d5:b1:81:20:3f:87:c4:f0:fb:61:ec:fd:0e:
58:ce:43:8a:fd:c0:a6:80:e4:93:05:02:6d:e2:ee:
a0:75:ce:b2:71:d9:11:23:6b:5f:e1:27:80:ef:f4:
03:88:0c:db:5b:59:9f:3e:38:1c:12:a9:38:53:52:
75:27:1d:e2:55:3a:f8:f0:40:e6:51:a3:34:4f:1a:
01:27:81:2d:c1:61:d2:73:e0:4e:fd:b3:ab:04:b9:
14:2f:0c:4b:c9:1b:10:58:2e:bc:fc:91:e4:7a:1b:
5e:9b:20:c3:68:50:d7:8a:25:38:c1:ec:48:7a:b5:
6c:51:5d:0d:27:b0:29:0c:00:96:c1:75:35:ac:ab:
64:6c:37:31:8f:2f:8e:3d:c7:42:f7:ad:4b:8b:a1:
e2:dc:cc:87:b9:95:32:e0:44:ed:b6:ce:ac:5e:55:
3b:28:14:14:c1:71:57:78:8a:9d:ab:77:b1:54:18:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:01:CE:61:69:36:EF:93:98:16:B5:C9:FB:F8:2C:EB:3A:BA:25:A0
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bb:67:70:bd:07:b1:64:99:ac:1f:3b:88:fc:2b:d6:ca:6b:
4e:91:f3:65:40:17:32:74:12:44:b9:40:a1:11:ab:06:72:98:
a8:37:30:8a:ce:7d:fa:74:08:d8:ea:8f:f9:b4:9e:e9:dc:e3:
58:f9:b1:0f:e8:9b:99:89:6d:c2:10:c4:82:d1:71:b0:a7:49:
4b:78:51:93:d0:75:93:25:1e:97:7f:a8:fe:99:37:85:b2:e4:
a0:bb:37:92:3d:53:96:6f:94:c0:ce:10:89:83:bf:76:d7:29:
13:e8:b2:6b:5d:06:4a:9b:70:e9:89:38:5a:48:82:4f:b4:cd:
0d:e8:39:73:66:da:da:22:46:c0:5a:f9:84:4b:23:48:0f:c0:
6e:59:4a:f6:a9:90:40:35:14:ed:89:21:b7:04:49:1d:2c:3a:
2f:94:61:47:22:e6:43:70:a7:a4:fb:da:b3:80:db:4f:44:8f:
6e:c8:9a:52:01:c3:38:6e:14:7b:3a:23:1f:2c:09:7d:36:e9:
ad:56:2b:52:b2:99:f1:82:92:46:a1:ca:f9:a9:cd:af:6d:00:
3b:31:e4:5a:c4:ee:7a:f7:59:db:00:02:b9:34:2e:92:a5:2a:
52:f8:51:0e:93:63:30:59:ad:d1:f9:a7:1a:3b:7c:f2:c7:30:
50:1b:b9:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fANT18gRcwadXXIPSM7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDJkYzFkMmM4ZmJkYzA4NTE2YWIwYmIyMDg4YzM3ZWIw
MDI4NjMwHhcNMjUwNjI4MTcwMDQ3WhcNMjUwNjI5MTcwMDQ3WjAzMTEwLwYDVQQD
EygyZjAxY2U2MTY5MzZlZjkzOTgxNmI1YzlmYmY4MmNlYjNhYmEyNWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOvgneDdqi1UGMwbzbnplpvrfZEb
V+rKD9PqHbNkMQKjFpjBYHeQ6Etd7GRcjoEeUrR8sPX+OEVCifYWVtxdWuXKAmxE
bvXR5pxfjNWxgSA/h8Tw+2Hs/Q5YzkOK/cCmgOSTBQJt4u6gdc6ycdkRI2tf4SeA
7/QDiAzbW1mfPjgcEqk4U1J1Jx3iVTr48EDmUaM0TxoBJ4EtwWHSc+BO/bOrBLkU
LwxLyRsQWC68/JHkehtemyDDaFDXiiU4wexIerVsUV0NJ7ApDACWwXU1rKtkbDcx
jy+OPcdC961Li6Hi3MyHuZUy4ETtts6sXlU7KBQUwXFXeIqdq3exVBgFKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8BzmFpNu+TmBa1yfv4LOs6uiWgMB8GA1UdIwQY
MBaAFLvS3B0sj73AhRarC7IIjDfrAChjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTct
MDY0MzdlYzQ2NmI4LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTctMDY0MzdlYzQ2NmI4
LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbtncL0H
sWSZrB87iPwr1sprTpHzZUAXMnQSRLlAoRGrBnKYqDcwis59+nQI2OqP+bSe6dzj
WPmxD+ibmYltwhDEgtFxsKdJS3hRk9B1kyUel3+o/pk3hbLkoLs3kj1Tlm+UwM4Q
iYO/dtcpE+iya10GSptw6Yk4WkiCT7TNDeg5c2ba2iJGwFr5hEsjSA/AbllK9qmQ
QDUU7YkhtwRJHSw6L5RhRyLmQ3CnpPvas4DbT0SPbsiaUgHDOG4UezojHywJfTbp
rVYrUrKZ8YKSRqHK+anNr20AOzHkWsTuevdZ2wACuTQukqUqUvhRDpNjMFmt0fmn
Gjt88scwUBu5jg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:14 2025 by rpki-client