Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: /1Te2e1ti23o3qRx+VSmMW+1jnwHcVXUXISkUlTXp7w=
Subject key identifier: BA:84:F6:C4:A3:21:25:98:5E:35:19:01:C1:EB:9E:EB:99:61:BE:B1
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 0197B6A255C696EAFB047DC3A683688F3CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 0619
Signing time: Sat 28 Jun 2025 13:03:01 +0000
Manifest this update: Sat 28 Jun 2025 13:03:01 +0000
Manifest next update: Sun 29 Jun 2025 13:03:01 +0000
Files and hashes: 1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: m8QfTFtxu0aB0pS1s6rKohqw7WMggR8HagO/OeQc87U=)
2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:55:c6:96:ea:fb:04:7d:c3:a6:83:68:8f:3c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Jun 28 13:03:01 2025 GMT
Not After : Jun 29 13:03:01 2025 GMT
Subject: CN=ba84f6c4a32125985e351901c1eb9eeb9961beb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b2:d6:6e:d4:aa:ff:25:7b:a4:58:6c:7c:f5:
92:d4:92:81:b0:c3:b0:fe:40:b4:af:93:61:8f:f1:
6c:19:19:d4:01:31:f4:55:56:79:a0:fc:be:0f:05:
be:5e:73:ee:df:f0:55:1d:aa:94:05:7f:5d:43:62:
51:ae:3a:7f:93:c0:e2:19:7f:30:fa:01:2f:77:44:
08:77:1e:b8:df:f5:3d:69:14:0c:65:fe:8f:5b:f3:
e4:87:95:9b:a0:df:8d:bd:5c:9c:ed:34:df:58:ca:
ca:f9:d6:4a:b7:b6:3b:e6:a3:fb:d7:6a:ac:b2:49:
2f:d0:39:c9:32:0c:bc:9f:8b:59:b7:b3:ab:7d:60:
48:5e:c9:c3:15:fa:31:4a:32:62:a8:b1:01:f2:1b:
49:8c:42:75:3e:98:21:4b:a8:29:5d:cb:87:18:54:
8c:84:23:9f:62:b8:62:03:04:9e:65:9c:24:4c:61:
bf:df:15:31:e4:2a:e0:08:06:a7:ef:1d:a7:0e:6f:
8d:9a:94:ab:25:dd:32:49:64:0a:0e:33:c6:0b:aa:
f4:0b:75:84:99:b0:93:92:c1:69:58:14:5c:25:ec:
3e:11:32:e0:eb:16:be:c3:08:52:d1:80:fe:d9:5e:
1a:de:41:84:21:96:0b:98:ec:7b:67:d0:2e:73:d9:
96:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:84:F6:C4:A3:21:25:98:5E:35:19:01:C1:EB:9E:EB:99:61:BE:B1
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:32:a3:41:39:d5:70:d9:c9:21:e1:51:d0:1a:4f:40:79:73:
4b:34:5b:c4:1e:56:20:c0:a4:60:8c:cd:65:b0:ba:7e:a5:3f:
9f:5e:1c:9c:ff:99:b1:53:5a:6a:e3:07:48:ab:11:1d:06:79:
54:fc:65:53:07:33:9f:05:81:f1:1c:d4:20:bb:07:97:89:fb:
e1:b1:42:f7:c5:82:5a:fb:03:0b:87:dc:a2:cb:bf:f8:e7:04:
19:86:4f:ff:ab:56:2e:7f:61:88:e6:69:f2:9c:2c:dc:7c:7c:
b1:34:3b:90:8b:6f:e2:9a:f2:bf:63:49:1c:f7:64:ea:19:30:
d7:89:95:a1:82:d4:2b:f1:85:b3:ab:89:b2:10:9f:6d:4c:a8:
6b:5a:35:c1:d3:a2:5c:60:c8:6c:35:13:3f:8c:a1:2e:64:a1:
6c:02:90:66:b7:b7:ed:d9:41:36:1b:1c:de:60:25:8a:59:9b:
c5:a5:d6:f0:8b:34:30:ad:57:01:c0:fa:d4:49:96:6e:86:ce:
a3:53:00:0c:72:85:05:3e:48:8e:af:b6:2e:1d:69:fa:d5:1d:
63:32:4e:2b:c9:30:eb:6e:8e:04:dc:61:92:01:79:b2:c0:de:
43:2b:bc:3e:d4:e6:46:d6:4b:71:21:40:70:0c:0d:87:e7:ac:
be:1b:96:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2olXGlur7BH3DpoNojzysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MmU5YTA0M2YzMTI4MzM2ZTNjOTdjMjU0MjU3NGM4YWQ5
MjlhYzkwHhcNMjUwNjI4MTMwMzAxWhcNMjUwNjI5MTMwMzAxWjAzMTEwLwYDVQQD
EyhiYTg0ZjZjNGEzMjEyNTk4NWUzNTE5MDFjMWViOWVlYjk5NjFiZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rLWbtSq/yV7pFhsfPWS1JKBsMOw
/kC0r5Nhj/FsGRnUATH0VVZ5oPy+DwW+XnPu3/BVHaqUBX9dQ2JRrjp/k8DiGX8w
+gEvd0QIdx643/U9aRQMZf6PW/Pkh5WboN+NvVyc7TTfWMrK+dZKt7Y75qP712qs
skkv0DnJMgy8n4tZt7OrfWBIXsnDFfoxSjJiqLEB8htJjEJ1PpghS6gpXcuHGFSM
hCOfYrhiAwSeZZwkTGG/3xUx5CrgCAan7x2nDm+NmpSrJd0ySWQKDjPGC6r0C3WE
mbCTksFpWBRcJew+ETLg6xa+wwhS0YD+2V4a3kGEIZYLmOx7Z9Auc9mWjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqE9sSjISWYXjUZAcHrnuuZYb6xMB8GA1UdIwQY
MBaAFPUumgQ/MSgzbjyXwlQldMitkprJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTkt
ZWZmOGI5NWQyMGM1LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTktZWZmOGI5NWQyMGM1
LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzKjQTnV
cNnJIeFR0BpPQHlzSzRbxB5WIMCkYIzNZbC6fqU/n14cnP+ZsVNaauMHSKsRHQZ5
VPxlUwcznwWB8RzUILsHl4n74bFC98WCWvsDC4fcosu/+OcEGYZP/6tWLn9hiOZp
8pws3Hx8sTQ7kItv4pryv2NJHPdk6hkw14mVoYLUK/GFs6uJshCfbUyoa1o1wdOi
XGDIbDUTP4yhLmShbAKQZre37dlBNhsc3mAlilmbxaXW8Is0MK1XAcD61EmWbobO
o1MADHKFBT5Ijq+2Lh1p+tUdYzJOK8kw626OBNxhkgF5ssDeQyu8PtTmRtZLcSFA
cAwNh+esvhuWqg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:22 2025 by rpki-client