Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: YQVzOgs74miFNJmfj3XUVhSF3mKxoj0Nl9jSE/r8UQ8=
Subject key identifier: 3A:F9:6A:E8:3A:78:83:8B:B3:B6:4F:B7:4E:92:A5:99:E6:1F:DA:D7
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 0198D472FF574935E631E96BE4C3A9D33DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 06AD
Signing time: Sat 23 Aug 2025 01:02:42 +0000
Manifest this update: Sat 23 Aug 2025 01:02:42 +0000
Manifest next update: Sun 24 Aug 2025 01:02:42 +0000
Files and hashes: 1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: VlEaxZZsLNA0tSd8e1Z4qJkwIzxUWE8FGrWyBE8Y+IE=)
2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ff:57:49:35:e6:31:e9:6b:e4:c3:a9:d3:3d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Aug 23 01:02:42 2025 GMT
Not After : Aug 24 01:02:42 2025 GMT
Subject: CN=3af96ae83a78838bb3b64fb74e92a599e61fdad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:8d:6b:cb:bd:10:0d:5d:fb:e1:1a:4e:30:
79:4b:29:d9:1b:a0:9a:1a:dc:89:81:1a:a2:fa:f1:
fb:a5:ce:d3:ee:69:15:3f:f9:f6:bc:4f:4c:0d:ae:
dc:c9:08:b7:91:9c:c4:8c:a6:59:66:da:1b:c5:61:
dd:78:a0:5a:a8:45:29:4b:e1:57:5e:8d:53:09:50:
aa:1a:a5:0f:59:82:bf:5e:b2:05:27:90:1e:30:2f:
ad:40:77:59:f3:00:ca:1d:b8:25:c6:55:d9:8d:5d:
85:e3:d3:04:5d:97:fb:d3:0b:d3:31:fc:a4:4a:00:
c3:f6:68:fd:f4:53:d6:ab:e8:60:3d:e8:43:bd:97:
e5:4e:76:f1:af:01:87:da:36:c0:5f:4b:ad:86:94:
df:e2:69:7c:67:8e:4c:88:3d:5f:7c:dc:38:0d:ac:
12:80:8e:24:bd:3b:83:9d:fa:8e:0d:2f:b4:42:f9:
55:87:70:c9:c2:7f:64:98:d2:6d:cf:27:70:49:46:
c5:9f:10:a2:45:7b:2a:2c:2b:75:44:7b:d0:a7:5d:
5c:3d:b3:58:76:0a:e9:48:ab:d1:d9:bb:8f:49:67:
9c:0d:92:20:36:71:5b:79:ee:eb:32:95:4a:3b:b4:
b0:ef:c2:d0:e1:6f:1c:b8:21:c6:0f:61:13:d6:3d:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F9:6A:E8:3A:78:83:8B:B3:B6:4F:B7:4E:92:A5:99:E6:1F:DA:D7
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:bf:e9:f6:ab:4a:a5:a1:54:3b:06:51:56:f2:49:02:99:8b:
22:69:b6:45:6c:34:09:e1:43:08:fc:a0:8e:8a:b7:0e:af:70:
22:91:79:3d:16:9e:83:01:b5:ef:28:e8:74:62:04:5c:85:33:
d7:5b:87:9f:db:8f:d3:53:a0:c9:c1:d1:65:86:e1:7c:da:93:
a2:6e:93:43:9f:ab:ef:68:79:95:4e:7f:40:d1:b3:9e:0d:54:
64:fc:2d:85:f6:42:f3:ba:9e:5f:2b:53:1f:58:4e:c5:e7:60:
54:5f:6d:ae:5f:e4:dc:11:70:9e:b5:54:7e:67:63:bb:ba:2d:
b0:55:e3:0b:c6:48:83:68:42:93:35:29:6c:f0:c0:05:43:6b:
90:20:2d:2f:75:5e:49:d3:0e:30:67:6d:ce:d9:6e:ad:cf:3f:
b9:5c:8c:ff:5e:0f:b1:f4:f7:5b:b0:38:4a:ab:65:4e:99:9f:
87:5e:3f:73:14:9f:95:cf:6d:3f:59:e2:2b:6a:6b:1a:94:58:
17:42:2c:10:f9:65:6c:95:f6:66:2c:e9:04:38:5b:f0:33:56:
5c:26:90:d6:58:83:65:52:35:ab:05:2f:fe:97:b3:0c:86:ad:
8a:b2:7a:2e:ee:28:e2:27:1b:2b:88:a3:63:66:ad:19:46:1a:
ee:d7:49:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcv9XSTXmMelr5MOp0z22MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MmU5YTA0M2YzMTI4MzM2ZTNjOTdjMjU0MjU3NGM4YWQ5
MjlhYzkwHhcNMjUwODIzMDEwMjQyWhcNMjUwODI0MDEwMjQyWjAzMTEwLwYDVQQD
EygzYWY5NmFlODNhNzg4MzhiYjNiNjRmYjc0ZTkyYTU5OWU2MWZkYWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlaNa8u9EA1d++EaTjB5SynZG6Ca
GtyJgRqi+vH7pc7T7mkVP/n2vE9MDa7cyQi3kZzEjKZZZtobxWHdeKBaqEUpS+FX
Xo1TCVCqGqUPWYK/XrIFJ5AeMC+tQHdZ8wDKHbglxlXZjV2F49MEXZf70wvTMfyk
SgDD9mj99FPWq+hgPehDvZflTnbxrwGH2jbAX0uthpTf4ml8Z45MiD1ffNw4DawS
gI4kvTuDnfqODS+0QvlVh3DJwn9kmNJtzydwSUbFnxCiRXsqLCt1RHvQp11cPbNY
dgrpSKvR2buPSWecDZIgNnFbee7rMpVKO7Sw78LQ4W8cuCHGD2ET1j1Q/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr5aug6eIOLs7ZPt06SpZnmH9rXMB8GA1UdIwQY
MBaAFPUumgQ/MSgzbjyXwlQldMitkprJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTkt
ZWZmOGI5NWQyMGM1LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTktZWZmOGI5NWQyMGM1
LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUr/p9qtK
paFUOwZRVvJJApmLImm2RWw0CeFDCPygjoq3Dq9wIpF5PRaegwG17yjodGIEXIUz
11uHn9uP01OgycHRZYbhfNqTom6TQ5+r72h5lU5/QNGzng1UZPwthfZC87qeXytT
H1hOxedgVF9trl/k3BFwnrVUfmdju7otsFXjC8ZIg2hCkzUpbPDABUNrkCAtL3Ve
SdMOMGdtztlurc8/uVyM/14PsfT3W7A4SqtlTpmfh14/cxSflc9tP1niK2prGpRY
F0IsEPllbJX2ZizpBDhb8DNWXCaQ1liDZVI1qwUv/pezDIatirJ6Lu4o4icbK4ij
Y2atGUYa7tdJ1w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:18 2025 by rpki-client