Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: E1CRsL3uEqcB4N5GzmN44b2Jc/uwy8g72t0mVOGDy8g=
Subject key identifier: 20:4A:37:11:C5:8A:4C:DF:7F:17:88:E3:78:AA:36:D2:DF:72:64:0D
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 0198D73B5FD2303E46FC7742546413290277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0D58
Signing time: Sat 23 Aug 2025 14:00:49 +0000
Manifest this update: Sat 23 Aug 2025 14:00:49 +0000
Manifest next update: Sun 24 Aug 2025 14:00:49 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: 2w6iRkl5zfEYAk9jpeWQMyqQd0fZdSFSP8OD67N3kqY=)
2: B8bTTGpK1L-pMyO-WGFk_7H-LC8.roa (hash: r0JNxuBgg4on067YK5COQPlyCkk+tp458uDvr2IE4z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:5f:d2:30:3e:46:fc:77:42:54:64:13:29:02:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Aug 23 14:00:49 2025 GMT
Not After : Aug 24 14:00:49 2025 GMT
Subject: CN=204a3711c58a4cdf7f1788e378aa36d2df72640d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:fd:fa:5f:d4:bb:6a:b8:69:f7:3a:95:27:
28:e3:88:42:3f:22:58:8f:0f:d7:d9:74:52:95:af:
e3:e5:ea:40:a3:41:22:9d:29:91:5b:58:3e:98:a4:
5d:7c:17:9f:44:b9:10:76:d7:2c:e1:bb:04:be:14:
f8:7a:da:f0:a6:a3:08:6f:d6:1c:40:f0:41:a4:9b:
98:f6:76:12:fc:cf:17:08:62:28:24:27:c7:ee:b2:
c4:54:d9:48:f5:f7:a0:50:3b:e5:0b:d3:1d:f4:54:
d3:c8:04:02:92:85:34:e4:90:bb:42:6a:c1:3c:f2:
68:c1:c2:6a:bb:bd:88:76:3c:3e:d9:02:86:a1:f6:
d3:79:f2:a0:df:05:97:68:35:a8:21:77:d5:9d:4d:
74:5b:4a:a6:f7:76:31:cf:7a:29:1a:ce:b0:12:f4:
5e:04:b6:b1:18:ad:8b:72:a3:54:b5:23:bf:12:4c:
44:57:26:50:7d:fa:ba:f9:da:40:06:d1:ae:8e:8f:
33:23:18:82:41:ee:b8:69:84:c6:3f:fb:92:c0:a9:
07:3e:f0:e1:9f:0c:4b:31:fe:53:db:65:52:cd:81:
ec:cf:13:fb:bd:10:47:c9:ae:85:41:4d:45:67:31:
13:bb:7a:3c:bc:eb:1a:7e:21:b0:4d:55:f1:ed:ab:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4A:37:11:C5:8A:4C:DF:7F:17:88:E3:78:AA:36:D2:DF:72:64:0D
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2d:0d:18:ea:ac:ae:9a:42:91:d7:41:91:cb:22:49:b9:8f:
5f:7e:2d:37:4f:5f:ff:d9:a6:56:04:cc:9d:c5:11:39:6b:00:
49:33:5a:e3:fe:9b:76:53:72:52:ac:60:a4:59:d0:2b:70:51:
e9:68:a4:66:16:e0:3f:77:53:63:39:25:3d:8a:93:10:07:97:
e6:70:d4:71:7a:65:20:4f:dc:14:da:8c:01:87:cc:90:48:35:
2c:4c:f7:a2:61:be:ef:24:2e:7c:d4:ff:0f:62:48:44:09:7d:
92:46:d0:6e:32:72:dd:cc:a3:93:5b:fc:aa:96:d3:d2:9c:68:
2b:51:cf:bc:54:dc:29:5c:a2:97:ff:3d:30:55:34:30:e6:58:
a7:15:3a:16:fb:67:22:7e:58:bd:21:3e:4f:4a:2d:c9:d5:dd:
6a:0e:1c:d8:4b:fc:03:1c:95:77:83:1d:5c:71:98:8c:6c:43:
a8:38:b7:da:c2:52:71:ca:89:ee:b3:f3:4e:9b:a1:1a:d8:b3:
92:f3:18:2f:a7:25:05:69:26:51:99:ba:e4:3e:01:9d:b7:10:
d3:4e:2b:4f:52:91:b5:05:19:d8:5b:b3:7c:7c:c6:57:9c:ad:
14:cc:f2:d9:e7:43:64:b2:f8:be:ba:ba:bc:e4:c3:29:49:ab:
68:fd:cb:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO1/SMD5G/HdCVGQTKQJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OWFkYjAyMDhhMmQyYTcxOGQzMDY0YjQ2MTNmZGM0MzIw
ZDI4ZjkwHhcNMjUwODIzMTQwMDQ5WhcNMjUwODI0MTQwMDQ5WjAzMTEwLwYDVQQD
EygyMDRhMzcxMWM1OGE0Y2RmN2YxNzg4ZTM3OGFhMzZkMmRmNzI2NDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZr9+l/Uu2q4afc6lSco44hCPyJY
jw/X2XRSla/j5epAo0EinSmRW1g+mKRdfBefRLkQdtcs4bsEvhT4etrwpqMIb9Yc
QPBBpJuY9nYS/M8XCGIoJCfH7rLEVNlI9fegUDvlC9Md9FTTyAQCkoU05JC7QmrB
PPJowcJqu72Idjw+2QKGofbTefKg3wWXaDWoIXfVnU10W0qm93Yxz3opGs6wEvRe
BLaxGK2LcqNUtSO/EkxEVyZQffq6+dpABtGujo8zIxiCQe64aYTGP/uSwKkHPvDh
nwxLMf5T22VSzYHszxP7vRBHya6FQU1FZzETu3o8vOsafiGwTVXx7asGRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBKNxHFikzffxeI43iqNtLfcmQNMB8GA1UdIwQY
MBaAFPWa2wIIotKnGNMGS0YT/cQyDSj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jMGZlZjktYWZmZi00OWRlLTgwOGEt
ZTQ0NzhjNTUzMDhhLzEvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jMGZlZjktYWZmZi00OWRlLTgwOGEtZTQ0NzhjNTUzMDhh
LzEvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADS0NGOqs
rppCkddBkcsiSbmPX34tN09f/9mmVgTMncUROWsASTNa4/6bdlNyUqxgpFnQK3BR
6WikZhbgP3dTYzklPYqTEAeX5nDUcXplIE/cFNqMAYfMkEg1LEz3omG+7yQufNT/
D2JIRAl9kkbQbjJy3cyjk1v8qpbT0pxoK1HPvFTcKVyil/89MFU0MOZYpxU6Fvtn
In5YvSE+T0otydXdag4c2Ev8AxyVd4MdXHGYjGxDqDi32sJSccqJ7rPzTpuhGtiz
kvMYL6clBWkmUZm65D4BnbcQ004rT1KRtQUZ2FuzfHzGV5ytFMzy2edDZLL4vrq6
vOTDKUmraP3LwQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:29:40 2025 by rpki-client