Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
File: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft (raw, json)
Hash identifier: o6BrkJ/bePHyx6E6HE2UZAXJWZmDEP3/iZ/JU6MtQ+s=
Subject key identifier: B6:90:03:76:A1:C9:75:2E:10:7A:F3:A8:64:A6:8C:25:8B:00:DA:08
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial: 01987B9C74107FF9B96B4607E76371AF948A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
Manifest number: 0524
Signing time: Tue 05 Aug 2025 19:01:47 +0000
Manifest this update: Tue 05 Aug 2025 19:01:47 +0000
Manifest next update: Wed 06 Aug 2025 19:01:47 +0000
Files and hashes: 1: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl (hash: vdQKbY7TzE+lm4s34hyY11M8Hpu+42+kbGH/ifUx5/w=)
2: hmRzovRV4UHybR1HxVtSJMOLDCw.roa (hash: OsQ6iHBOvn0+b51MYRo/b13uIhsZ7r4gypQoB9TbMVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:74:10:7f:f9:b9:6b:46:07:e7:63:71:af:94:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Validity
Not Before: Aug 5 19:01:47 2025 GMT
Not After : Aug 6 19:01:47 2025 GMT
Subject: CN=b6900376a1c9752e107af3a864a68c258b00da08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:14:35:8f:b5:3b:2c:b0:be:bd:ec:81:7d:
a9:65:63:48:a0:86:62:7b:6f:80:84:7e:ce:08:c1:
e0:86:0c:7e:20:b0:0a:3d:8c:bd:60:f9:ba:11:ac:
28:ae:4c:7c:c5:12:f6:c8:cc:b1:7d:5d:23:62:02:
a6:cb:eb:5d:3f:65:8a:13:95:24:4c:79:81:01:36:
2a:0b:22:67:2a:ce:fe:63:bf:93:0f:52:56:63:b1:
bb:00:40:eb:25:34:db:e0:2d:ee:d2:26:67:9d:87:
5b:99:b7:10:72:da:e3:88:f5:84:f9:23:9f:67:e9:
0a:fd:24:3c:59:9d:fe:54:f5:f0:be:59:32:75:e6:
04:85:c2:a9:ea:9c:eb:56:df:c9:4c:f9:54:94:db:
14:8b:0a:a4:b7:49:3f:09:14:89:66:ff:ec:45:8f:
a0:40:45:48:c1:f2:cc:26:eb:30:8f:a0:76:cb:11:
6d:33:56:06:d4:6a:ce:95:7f:39:20:28:6d:88:08:
37:74:63:ac:bb:0d:9f:1c:db:b6:84:3e:5e:25:ec:
e7:d9:5f:62:54:33:ea:8b:a8:6e:77:6f:a0:48:14:
ab:ff:13:d3:51:ac:bb:00:7f:4b:b5:f0:57:2e:52:
a1:d9:ac:4c:24:f7:4b:56:a8:94:1b:f7:02:ee:9e:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:90:03:76:A1:C9:75:2E:10:7A:F3:A8:64:A6:8C:25:8B:00:DA:08
X509v3 Authority Key Identifier:
keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4c:70:f8:31:23:37:07:9f:fe:0e:8b:2b:9b:88:a8:41:81:
74:f4:c9:8c:48:d5:55:6c:a3:a6:26:de:a6:40:0f:5c:75:a6:
0f:31:08:39:66:23:06:01:0b:4d:b1:ee:38:bc:6f:41:eb:19:
ab:6b:09:d1:f3:a3:6e:9f:a0:e6:7c:06:27:6c:5b:04:ef:65:
3d:bb:64:6e:09:43:b6:d3:e2:21:2e:2b:48:5a:d1:22:3d:78:
06:5e:8a:0e:2b:2f:14:48:62:27:c6:83:19:4c:1c:8c:e9:fa:
f4:cd:5c:d2:04:10:96:89:e1:7e:07:8d:ef:61:1e:1a:58:61:
ae:41:9b:04:3c:49:e9:42:4a:d4:9f:0e:2f:b8:f6:80:d6:7b:
36:2f:4f:51:81:4d:ac:5c:5d:df:55:ac:c4:13:b5:51:31:32:
e6:cb:7a:ce:dc:cd:28:e6:6e:be:6f:1a:6a:b5:74:8a:f4:2a:
2b:29:dc:5a:50:46:1f:73:4c:57:f1:b9:bd:52:4b:d8:b4:93:
97:52:97:60:fd:ed:97:4b:d7:fe:df:e1:e5:a6:4d:8d:88:4c:
23:86:ec:e5:6c:1d:ee:6a:f4:7d:6b:0d:cd:eb:eb:bf:ac:d1:
09:89:5a:ea:8e:db:4c:e3:be:34:86:f7:e8:82:ec:9c:88:58:
a9:ae:09:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nHQQf/m5a0YH52Nxr5SKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1M2ZkOWU2OWQ3ZDFmMmRkYzI2NzA5MTYyNjE5MGNlYWE4
NWNmYzIwHhcNMjUwODA1MTkwMTQ3WhcNMjUwODA2MTkwMTQ3WjAzMTEwLwYDVQQD
EyhiNjkwMDM3NmExYzk3NTJlMTA3YWYzYTg2NGE2OGMyNThiMDBkYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCQUNY+1Oyywvr3sgX2pZWNIoIZi
e2+AhH7OCMHghgx+ILAKPYy9YPm6Eaworkx8xRL2yMyxfV0jYgKmy+tdP2WKE5Uk
THmBATYqCyJnKs7+Y7+TD1JWY7G7AEDrJTTb4C3u0iZnnYdbmbcQctrjiPWE+SOf
Z+kK/SQ8WZ3+VPXwvlkydeYEhcKp6pzrVt/JTPlUlNsUiwqkt0k/CRSJZv/sRY+g
QEVIwfLMJuswj6B2yxFtM1YG1GrOlX85IChtiAg3dGOsuw2fHNu2hD5eJezn2V9i
VDPqi6hud2+gSBSr/xPTUay7AH9LtfBXLlKh2axMJPdLVqiUG/cC7p4fNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaQA3ahyXUuEHrzqGSmjCWLANoIMB8GA1UdIwQY
MBaAFPU/2eadfR8t3CZwkWJhkM6qhc/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTct
NGM4OTgwYjU4MTI2LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTctNGM4OTgwYjU4MTI2
LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkxw+DEj
Nwef/g6LK5uIqEGBdPTJjEjVVWyjpibepkAPXHWmDzEIOWYjBgELTbHuOLxvQesZ
q2sJ0fOjbp+g5nwGJ2xbBO9lPbtkbglDttPiIS4rSFrRIj14Bl6KDisvFEhiJ8aD
GUwcjOn69M1c0gQQlonhfgeN72EeGlhhrkGbBDxJ6UJK1J8OL7j2gNZ7Ni9PUYFN
rFxd31WsxBO1UTEy5st6ztzNKOZuvm8aarV0ivQqKyncWlBGH3NMV/G5vVJL2LST
l1KXYP3tl0vX/t/h5aZNjYhMI4bs5Wwd7mr0fWsNzevrv6zRCYla6o7bTOO+NIb3
6ILsnIhYqa4Jjg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:02:20 2025 by rpki-client