Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: lizjTrrZ1exPYDfiQKnSpqOpbC6JhkosabttBKrMHl8=
Subject key identifier: 39:82:7B:B0:CD:C2:78:59:7F:A4:A3:D7:5F:C1:52:BC:49:72:DA:AC
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 01989DB9C1D332DB5F245DDB2A316C0F5C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 0F14
Signing time: Tue 12 Aug 2025 10:00:53 +0000
Manifest this update: Tue 12 Aug 2025 10:00:53 +0000
Manifest next update: Wed 13 Aug 2025 10:00:53 +0000
Files and hashes: 1: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: yzRQlTZh0lpvW6vvKRV+T0Zi50X6bqxmxX4IwCp9Pmo=)
2: OpJ_uz4hg9WS1uTnKXn75qGvb3w.roa (hash: zJt7hWD6hoBRKS4g5AHeuYKclEqIASb0N8YkICHekl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:b9:c1:d3:32:db:5f:24:5d:db:2a:31:6c:0f:5c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Aug 12 10:00:53 2025 GMT
Not After : Aug 13 10:00:53 2025 GMT
Subject: CN=39827bb0cdc278597fa4a3d75fc152bc4972daac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:a6:b7:e9:64:d0:63:ca:da:35:44:c4:6c:
a4:23:98:d3:4f:d0:86:9c:ac:ff:ee:72:93:ce:c9:
74:1e:04:67:3d:2d:ef:9b:2d:12:13:63:b7:a1:4e:
19:3c:5f:55:7a:e5:9d:28:ab:4a:3a:df:01:9d:5e:
e7:35:56:57:53:23:07:2f:4a:cb:4e:8c:5f:95:6b:
db:3a:0b:60:31:eb:56:38:36:14:3b:0e:51:84:e8:
4d:b2:49:d8:b1:6d:96:d8:61:fd:5f:8a:a3:af:30:
80:98:e0:70:ea:85:91:f4:29:03:24:ec:c9:ae:3a:
44:21:73:cd:7a:2b:e7:d8:2c:8d:0e:d8:f5:84:8e:
b3:4c:81:00:97:21:f1:56:fd:b9:41:15:da:a9:b5:
7d:84:3e:3d:a4:94:97:08:37:82:db:f2:5e:a5:23:
f7:f4:47:33:4d:25:7a:d1:9b:74:2f:9d:09:db:35:
48:96:2c:9e:6b:bd:30:02:bf:49:6b:df:5e:f9:24:
88:b8:e3:8b:d3:c7:86:50:e7:d0:bf:02:92:e2:db:
13:d6:cb:2c:7a:46:bb:82:67:23:20:b9:6c:25:10:
37:e0:9b:5a:94:3c:e9:f1:16:d2:cc:53:67:b0:00:
4d:cb:14:84:4d:85:7b:85:61:90:12:9d:cb:f5:bf:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:82:7B:B0:CD:C2:78:59:7F:A4:A3:D7:5F:C1:52:BC:49:72:DA:AC
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8b:68:86:d8:b1:51:c1:c7:9b:54:03:20:33:b8:95:8f:4f:
03:72:88:e3:66:6d:c9:d9:d7:52:0a:f5:15:19:8c:0f:7f:6c:
a9:0d:ae:2c:35:72:75:11:a1:96:f0:c6:9b:68:bb:f6:23:aa:
6e:c9:e8:4f:9b:48:20:25:77:7c:28:c6:fe:fc:06:fa:16:da:
fa:ce:1c:59:b4:2a:d2:0e:e1:a1:79:2c:f5:ed:19:8b:52:c0:
a5:43:18:cc:f5:e7:0f:34:1a:e0:d3:b0:2c:0a:2c:e3:6f:04:
17:17:e4:71:82:15:d0:81:7b:a0:32:9e:35:4f:fd:76:66:2d:
de:81:23:31:9b:ce:ef:fb:4a:ef:23:6f:0c:44:ae:19:32:c6:
d0:9e:bd:23:cd:27:19:10:ec:9e:89:8d:d8:be:6d:e5:57:69:
24:16:ff:2c:f1:59:23:8e:ca:c4:d4:90:70:fd:72:3b:b4:40:
26:c3:c3:14:3c:7d:d0:b4:26:81:4c:cc:e3:0f:21:30:39:cd:
d0:c4:be:08:27:42:c1:bb:ff:c7:f7:e8:56:95:f5:d9:5c:7b:
7c:f0:21:43:23:1a:da:73:31:1b:5b:2c:f2:f2:da:b0:18:10:
07:99:c6:9a:52:c7:44:40:ef:0c:15:a4:86:4d:e1:87:67:90:
80:42:e3:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiducHTMttfJF3bKjFsD1wrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Y2IwYzhmMjA4NDMzMDIwMzRmNjM2NTZlYTI5ZWJkNmQx
MTYzYWEwHhcNMjUwODEyMTAwMDUzWhcNMjUwODEzMTAwMDUzWjAzMTEwLwYDVQQD
EygzOTgyN2JiMGNkYzI3ODU5N2ZhNGEzZDc1ZmMxNTJiYzQ5NzJkYWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytOmt+lk0GPK2jVExGykI5jTT9CG
nKz/7nKTzsl0HgRnPS3vmy0SE2O3oU4ZPF9VeuWdKKtKOt8BnV7nNVZXUyMHL0rL
ToxflWvbOgtgMetWODYUOw5RhOhNsknYsW2W2GH9X4qjrzCAmOBw6oWR9CkDJOzJ
rjpEIXPNeivn2CyNDtj1hI6zTIEAlyHxVv25QRXaqbV9hD49pJSXCDeC2/JepSP3
9EczTSV60Zt0L50J2zVIliyea70wAr9Ja99e+SSIuOOL08eGUOfQvwKS4tsT1sss
eka7gmcjILlsJRA34JtalDzp8RbSzFNnsABNyxSETYV7hWGQEp3L9b8lxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmCe7DNwnhZf6Sj11/BUrxJctqsMB8GA1UdIwQY
MBaAFPbLDI8ghDMCA09jZW6inr1tEWOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUt
MmFmM2Q2MmJlN2YyLzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUtMmFmM2Q2MmJlN2Yy
LzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADotohtix
UcHHm1QDIDO4lY9PA3KI42ZtydnXUgr1FRmMD39sqQ2uLDVydRGhlvDGm2i79iOq
bsnoT5tIICV3fCjG/vwG+hba+s4cWbQq0g7hoXks9e0Zi1LApUMYzPXnDzQa4NOw
LAos428EFxfkcYIV0IF7oDKeNU/9dmYt3oEjMZvO7/tK7yNvDESuGTLG0J69I80n
GRDsnomN2L5t5VdpJBb/LPFZI47KxNSQcP1yO7RAJsPDFDx90LQmgUzM4w8hMDnN
0MS+CCdCwbv/x/foVpX12Vx7fPAhQyMa2nMxG1ss8vLasBgQB5nGmlLHREDvDBWk
hk3hh2eQgELjqQ==
-----END CERTIFICATE-----
Generated at Tue Aug 12 18:16:04 2025 by rpki-client