Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier: rZmT3l3LMEV8TOLmCGFMRu+82AjayjBZqiZq/V0jPOk=
Subject key identifier: 25:E5:CA:10:94:8A:6A:56:74:BB:C9:E8:07:AA:42:9D:74:12:54:FE
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial: 0197B9A1BD44BF76E4A3986F328F47E2D226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number: 09BA
Signing time: Sun 29 Jun 2025 03:01:13 +0000
Manifest this update: Sun 29 Jun 2025 03:01:13 +0000
Manifest next update: Mon 30 Jun 2025 03:01:13 +0000
Files and hashes: 1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: w9CkJSHC0BS5WhsqkkY5vadXKy9KUFBgrjAsyV7MvxY=)
2: XLp6CpBQr9azCpsnYXzng1ufYf0.roa (hash: VoQFnds5dZA1et1XDrrDT8jx8hBkjrNF5oeGODTmq4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:bd:44:bf:76:e4:a3:98:6f:32:8f:47:e2:d2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Validity
Not Before: Jun 29 03:01:13 2025 GMT
Not After : Jun 30 03:01:13 2025 GMT
Subject: CN=25e5ca10948a6a5674bbc9e807aa429d741254fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:1a:7c:54:b4:d8:be:dc:5b:5a:59:0d:77:
2b:f9:da:36:3a:e0:5d:84:cd:06:31:1d:67:fb:70:
7a:43:20:73:f6:33:42:d3:60:1c:cc:1b:c9:5a:82:
f0:a4:a3:c6:f6:55:e3:97:07:02:2d:98:47:9d:a8:
d8:af:47:cd:c2:04:7f:17:e6:90:37:97:c5:2d:0c:
0c:fb:2a:fe:60:b2:5b:c3:f5:63:32:b5:3a:bf:a6:
07:43:82:c5:2b:e2:72:fe:4e:5e:fa:4d:e6:3a:6a:
b3:c1:71:39:9d:7f:92:89:ba:59:91:0f:f5:95:f5:
37:6d:2c:34:2f:fb:54:7d:a0:e0:10:c4:26:d6:1a:
ed:02:85:fe:8e:9e:05:34:79:fd:25:55:71:14:cf:
d6:28:78:3c:ef:25:82:9f:c5:48:81:dc:3c:b9:65:
a3:d4:39:4e:6e:d5:00:24:c5:0b:d0:a2:c9:f1:60:
b1:8b:0d:a6:49:c9:c2:22:e8:bb:c9:c6:99:48:36:
8f:ff:22:1c:45:dc:d0:f9:f8:6d:d2:04:34:61:4e:
72:85:80:f1:4f:5f:59:a4:a7:77:5b:dc:ba:97:f9:
99:44:32:42:f7:6d:99:95:f6:1c:8a:30:a3:9c:f9:
de:f1:45:14:0e:c6:2e:a7:c3:11:94:b9:40:91:37:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E5:CA:10:94:8A:6A:56:74:BB:C9:E8:07:AA:42:9D:74:12:54:FE
X509v3 Authority Key Identifier:
keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:dc:a9:a1:80:9d:82:9f:56:29:cb:3f:38:af:d2:8a:9f:23:
ab:00:9e:22:a5:f8:ad:eb:6d:4f:30:3c:d0:b4:ad:fa:8e:a1:
d2:25:57:c9:d0:ab:ac:21:ab:48:01:63:ed:85:8d:e4:e2:33:
dc:33:bd:5c:31:12:0a:fb:68:ca:3b:26:ec:eb:78:41:f6:7a:
df:20:0f:7f:e3:91:e5:4c:31:ca:a2:c6:0c:ee:a2:3e:40:74:
2f:e3:1d:97:87:05:c9:3d:31:54:24:e2:74:ec:56:82:e5:2c:
3c:9e:8d:73:2f:89:a5:d3:aa:c0:f1:48:c1:15:f2:8e:9b:60:
fe:90:7e:fd:7f:eb:1a:f5:66:fb:ef:78:b9:1a:d0:62:a8:e5:
46:c2:af:d4:b9:54:20:e6:d3:f8:10:8b:52:07:c7:a2:7b:bd:
c4:f2:75:65:3f:32:30:fe:f6:4d:70:78:33:8c:20:21:f3:11:
4c:90:bf:22:64:5e:8f:ce:56:2c:3d:e2:33:e1:ac:f6:7c:26:
de:fa:01:e2:70:af:36:32:1d:02:50:dc:c6:dc:6a:f8:bf:9e:
b9:18:da:98:e3:8d:33:d3:dc:d7:60:b8:02:b2:e5:96:46:f3:
b8:ee:10:58:0b:71:1b:ce:53:ea:b7:dc:25:8d:8a:33:d9:0b:
48:25:a4:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5ob1Ev3bko5hvMo9H4tImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjVmYWM0YTVkOTViNDFhMDcyZWJiZjRmMDM1ZDA5YjNh
YTU5YzcwHhcNMjUwNjI5MDMwMTEzWhcNMjUwNjMwMDMwMTEzWjAzMTEwLwYDVQQD
EygyNWU1Y2ExMDk0OGE2YTU2NzRiYmM5ZTgwN2FhNDI5ZDc0MTI1NGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhMafFS02L7cW1pZDXcr+do2OuBd
hM0GMR1n+3B6QyBz9jNC02AczBvJWoLwpKPG9lXjlwcCLZhHnajYr0fNwgR/F+aQ
N5fFLQwM+yr+YLJbw/VjMrU6v6YHQ4LFK+Jy/k5e+k3mOmqzwXE5nX+SibpZkQ/1
lfU3bSw0L/tUfaDgEMQm1hrtAoX+jp4FNHn9JVVxFM/WKHg87yWCn8VIgdw8uWWj
1DlObtUAJMUL0KLJ8WCxiw2mScnCIui7ycaZSDaP/yIcRdzQ+fht0gQ0YU5yhYDx
T19ZpKd3W9y6l/mZRDJC922ZlfYcijCjnPne8UUUDsYup8MRlLlAkTcFsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXlyhCUimpWdLvJ6AeqQp10ElT+MB8GA1UdIwQY
MBaAFNEl+sSl2VtBoHLrv08DXQmzqlnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMt
MGRlZDA2ZTQwYTc1LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMtMGRlZDA2ZTQwYTc1
LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9ypoYCd
gp9WKcs/OK/Sip8jqwCeIqX4rettTzA80LSt+o6h0iVXydCrrCGrSAFj7YWN5OIz
3DO9XDESCvtoyjsm7Ot4QfZ63yAPf+OR5UwxyqLGDO6iPkB0L+Mdl4cFyT0xVCTi
dOxWguUsPJ6Ncy+JpdOqwPFIwRXyjptg/pB+/X/rGvVm++94uRrQYqjlRsKv1LlU
IObT+BCLUgfHonu9xPJ1ZT8yMP72TXB4M4wgIfMRTJC/ImRej85WLD3iM+Gs9nwm
3voB4nCvNjIdAlDcxtxq+L+euRjamOONM9Pc12C4ArLllkbzuO4QWAtxG85T6rfc
JY2KM9kLSCWkug==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:49:55 2025 by rpki-client