Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File: 70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier: Bmk9Tzfbm+DsxfCe+KE0dhzPtwPszbuNtaOUs5zokkI=
Subject key identifier: 9B:CC:60:09:23:08:76:60:48:15:C5:25:EC:9F:43:6E:EE:38:7A:0F
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 0198941177D9AC8298D955EC0201E2B90CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number: 0B9D
Signing time: Sun 10 Aug 2025 13:00:29 +0000
Manifest this update: Sun 10 Aug 2025 13:00:29 +0000
Manifest next update: Mon 11 Aug 2025 13:00:29 +0000
Files and hashes: 1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: JgvkEn7AL5gvetJCjPSzyJNwdbzVL35eDjvqrA4LVvY=)
2: FiLJrOB6VSbXcUW10ayq5u0-45c.roa (hash: SVzm6u7ARr2O1cZhcAUWJuayXj1RRfV/z3YIwyKiXZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:77:d9:ac:82:98:d9:55:ec:02:01:e2:b9:0c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: Aug 10 13:00:29 2025 GMT
Not After : Aug 11 13:00:29 2025 GMT
Subject: CN=9bcc6009230876604815c525ec9f436eee387a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:5c:21:fc:17:11:a3:e7:3d:94:b3:38:67:
3d:a8:b3:39:a8:a4:10:09:cc:88:e8:7a:e3:6d:4b:
f3:0e:a8:a1:78:04:ad:d6:64:33:c0:0b:6c:32:b1:
0a:06:91:2a:18:f9:74:e8:38:7b:3b:93:23:e2:60:
f6:4c:24:5b:7e:70:b2:c2:c6:a4:a6:fa:52:9e:40:
48:8f:64:a0:ff:0f:9e:d7:9a:83:71:1f:83:46:88:
0f:1e:a1:f6:36:d7:33:bb:41:83:43:0a:b8:5f:86:
3b:c8:c6:94:40:6e:d3:08:8d:71:49:58:52:75:60:
4c:b9:c4:79:cb:1a:8d:41:9e:97:ea:50:30:ed:15:
cf:13:4b:6e:c3:b5:72:c2:16:94:b2:a8:c3:36:da:
43:64:59:c2:08:35:8c:c5:ae:3e:1a:f3:d1:fa:86:
b8:8a:8b:42:36:05:b2:20:00:4e:59:ff:37:50:90:
e8:1f:ce:fc:7d:d2:7e:6c:1f:2f:0e:c8:97:ae:e2:
ce:f0:51:96:64:a9:94:25:91:55:fd:da:0e:1f:78:
5d:8a:69:82:55:a8:e6:73:52:0d:9b:06:f1:b6:bd:
a1:2e:f7:86:4f:b7:2d:08:5c:11:76:1f:8c:39:bc:
b1:d1:7d:44:59:fa:7c:98:7f:02:4c:90:31:2a:8b:
e7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CC:60:09:23:08:76:60:48:15:C5:25:EC:9F:43:6E:EE:38:7A:0F
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:a5:54:33:fa:4b:b8:6f:80:48:56:50:64:c1:ad:38:7c:e6:
cc:71:78:28:61:f9:c3:5a:21:ff:da:d7:97:59:d1:0c:e1:24:
af:d4:e9:74:49:69:3a:8b:1f:39:b2:69:75:80:ac:d3:f3:37:
16:2b:69:f2:3f:17:e9:7b:f0:d6:43:05:b4:5e:9f:48:1d:b0:
9e:74:ac:ce:0d:e3:58:8e:11:55:11:4c:e3:3c:d2:77:80:e1:
09:57:8a:4d:d4:e0:4d:55:06:33:66:fc:a8:ca:5f:c8:ed:ef:
3a:f2:e8:c0:b5:b7:67:ad:c6:27:0a:02:b6:70:13:8d:0a:70:
5e:81:dc:d6:09:7e:22:b5:50:99:9d:fa:48:86:7d:56:73:7b:
86:3f:53:ce:82:b4:9a:1a:34:9f:11:c2:df:ed:da:49:4b:47:
27:c1:16:05:dd:30:7f:bb:a2:07:94:f1:83:41:95:24:71:75:
34:ef:43:b7:2e:a7:ab:72:14:fd:ca:fc:83:7c:d6:24:2b:b0:
07:68:44:da:2b:86:eb:65:02:f0:cc:5f:08:8b:84:eb:fc:5a:
41:c9:48:06:a3:e5:55:c2:b7:ab:b9:28:a5:8e:45:a8:f4:2f:
c3:c8:bc:80:34:5f:98:db:f1:86:7a:c1:bb:89:3c:a0:78:63:
d9:5f:79:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUEXfZrIKY2VXsAgHiuQzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDJhZWQwZTkxYjIzZDBjZGNiZmIyNGFjODM5YjBkYmU2
YWEwNGIwHhcNMjUwODEwMTMwMDI5WhcNMjUwODExMTMwMDI5WjAzMTEwLwYDVQQD
Eyg5YmNjNjAwOTIzMDg3NjYwNDgxNWM1MjVlYzlmNDM2ZWVlMzg3YTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspVcIfwXEaPnPZSzOGc9qLM5qKQQ
CcyI6HrjbUvzDqiheASt1mQzwAtsMrEKBpEqGPl06Dh7O5Mj4mD2TCRbfnCywsak
pvpSnkBIj2Sg/w+e15qDcR+DRogPHqH2Ntczu0GDQwq4X4Y7yMaUQG7TCI1xSVhS
dWBMucR5yxqNQZ6X6lAw7RXPE0tuw7VywhaUsqjDNtpDZFnCCDWMxa4+GvPR+oa4
iotCNgWyIABOWf83UJDoH878fdJ+bB8vDsiXruLO8FGWZKmUJZFV/doOH3hdimmC
Vajmc1INmwbxtr2hLveGT7ctCFwRdh+MObyx0X1EWfp8mH8CTJAxKovn5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvMYAkjCHZgSBXFJeyfQ27uOHoPMB8GA1UdIwQY
MBaAFO9CrtDpGyPQzcv7JKyDmw2+aqBLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBLdTBPa2JJOUROeV9za3JJT2JEYjVxb0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iZDc1YTItZmM2ZS00YTg2LTllZGYt
NjY5OTA5ZTExY2UzLzEvNzBLdTBPa2JJOUROeV9za3JJT2JEYjVxb0VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iZDc1YTItZmM2ZS00YTg2LTllZGYtNjY5OTA5ZTExY2Uz
LzEvNzBLdTBPa2JJOUROeV9za3JJT2JEYjVxb0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4aVUM/pL
uG+ASFZQZMGtOHzmzHF4KGH5w1oh/9rXl1nRDOEkr9TpdElpOosfObJpdYCs0/M3
Fitp8j8X6Xvw1kMFtF6fSB2wnnSszg3jWI4RVRFM4zzSd4DhCVeKTdTgTVUGM2b8
qMpfyO3vOvLowLW3Z63GJwoCtnATjQpwXoHc1gl+IrVQmZ36SIZ9VnN7hj9TzoK0
mho0nxHC3+3aSUtHJ8EWBd0wf7uiB5Txg0GVJHF1NO9Dty6nq3IU/cr8g3zWJCuw
B2hE2iuG62UC8MxfCIuE6/xaQclIBqPlVcK3q7kopY5FqPQvw8i8gDRfmNvxhnrB
u4k8oHhj2V95IA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:16 2025 by rpki-client