Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: rri2UPKpSH7M59+1NNoihvsWS0ToGsgT0QN3z8MFxQU=
Subject key identifier: F6:42:34:C3:3C:AB:09:08:E3:BF:93:15:CF:F9:51:B8:78:8D:F0:F6
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 019785B44997C0420EEFAA20FD8B40DE5F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 0E83
Signing time: Thu 19 Jun 2025 01:01:14 +0000
Manifest this update: Thu 19 Jun 2025 01:01:14 +0000
Manifest next update: Fri 20 Jun 2025 01:01:14 +0000
Files and hashes: 1: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: 66sdf2uzooNwnkKcV6K8UlFfKNJLlTznoBk5x7AX8Mc=)
2: OpJ_uz4hg9WS1uTnKXn75qGvb3w.roa (hash: zJt7hWD6hoBRKS4g5AHeuYKclEqIASb0N8YkICHekl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:b4:49:97:c0:42:0e:ef:aa:20:fd:8b:40:de:5f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Jun 19 01:01:14 2025 GMT
Not After : Jun 20 01:01:14 2025 GMT
Subject: CN=f64234c33cab0908e3bf9315cff951b8788df0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:94:3b:1d:e4:a1:19:93:08:12:f2:74:a9:
ba:6d:39:0a:a6:ef:26:d9:c1:65:b1:5d:c3:43:34:
25:04:57:cb:67:33:47:78:34:32:4e:c6:d9:da:d9:
ac:0d:12:62:1e:db:55:33:8d:49:16:c0:30:57:5c:
e4:31:94:78:d5:b6:bd:67:07:30:0b:00:db:30:9b:
76:63:4e:7b:b9:ba:4f:5a:cc:18:b4:c0:eb:72:ba:
c9:09:cd:c2:ed:d4:6c:92:fd:9b:7c:5f:8d:70:09:
b5:90:9b:5e:70:48:38:35:63:51:74:51:03:0e:1d:
1d:e0:10:57:75:f6:d9:ae:0c:b3:69:35:a3:0b:c9:
28:d0:3b:38:a8:4d:77:96:6e:03:a5:47:08:94:1f:
63:e8:67:99:5d:b5:52:3b:ea:b2:34:56:b7:88:d3:
75:71:47:49:47:0b:94:6a:57:5e:90:06:ed:de:bb:
77:29:d1:b9:29:cc:a4:3f:be:5a:09:4e:78:26:cf:
ae:12:c3:65:0f:a8:96:1a:39:1e:9f:8f:df:fd:23:
fd:cc:23:e8:b2:c2:a6:10:1e:70:58:b2:e4:8c:af:
61:99:2b:28:14:ff:02:ad:cb:48:a5:2a:59:81:d7:
91:9e:96:95:2b:5c:6e:3d:90:a3:8b:22:01:74:59:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:42:34:C3:3C:AB:09:08:E3:BF:93:15:CF:F9:51:B8:78:8D:F0:F6
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c2:22:4f:ff:98:ed:29:f8:6b:e3:da:56:c3:85:60:35:bd:
83:88:40:17:d9:3c:04:f0:de:c4:6e:30:4f:32:83:4e:77:46:
cb:1f:37:a3:15:2a:6f:49:91:d9:46:b0:36:6e:50:3b:1a:4b:
e5:25:0b:60:d1:cd:57:3b:36:25:a5:5f:8a:1a:ab:08:f0:31:
cb:e0:d6:ee:d7:52:f4:1c:a8:e5:e7:d5:c7:7d:a0:6e:ef:4d:
13:81:0a:3f:82:44:b8:c9:2a:b1:83:be:63:18:7c:76:c3:25:
d3:ec:e3:1a:bc:f2:28:34:33:03:45:72:d8:c0:30:ec:5d:a5:
0f:b3:cf:12:c1:6c:77:b0:82:89:1e:76:72:35:b7:fe:36:6e:
77:e2:bf:47:2f:25:1c:21:a8:16:56:73:8e:7c:11:24:a7:56:
2b:e8:8a:39:30:74:c8:00:cf:41:28:22:31:a1:1f:96:ef:4a:
9c:94:49:d1:f7:da:c0:03:48:4f:23:63:bc:cd:c6:0c:bd:de:
b0:b3:df:53:2f:74:38:55:9b:29:37:d0:ef:ae:82:5f:c2:63:
94:2f:1f:5f:2c:d5:c9:88:57:1d:48:84:cb:24:9a:c5:82:49:
fd:6d:89:53:8b:66:0f:bd:97:13:4d:be:75:09:ba:8a:fc:3c:
17:30:e5:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeFtEmXwEIO76og/YtA3l9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Y2IwYzhmMjA4NDMzMDIwMzRmNjM2NTZlYTI5ZWJkNmQx
MTYzYWEwHhcNMjUwNjE5MDEwMTE0WhcNMjUwNjIwMDEwMTE0WjAzMTEwLwYDVQQD
EyhmNjQyMzRjMzNjYWIwOTA4ZTNiZjkzMTVjZmY5NTFiODc4OGRmMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnKUOx3koRmTCBLydKm6bTkKpu8m
2cFlsV3DQzQlBFfLZzNHeDQyTsbZ2tmsDRJiHttVM41JFsAwV1zkMZR41ba9Zwcw
CwDbMJt2Y057ubpPWswYtMDrcrrJCc3C7dRskv2bfF+NcAm1kJtecEg4NWNRdFED
Dh0d4BBXdfbZrgyzaTWjC8ko0Ds4qE13lm4DpUcIlB9j6GeZXbVSO+qyNFa3iNN1
cUdJRwuUaldekAbt3rt3KdG5KcykP75aCU54Js+uEsNlD6iWGjken4/f/SP9zCPo
ssKmEB5wWLLkjK9hmSsoFP8CrctIpSpZgdeRnpaVK1xuPZCjiyIBdFkWtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZCNMM8qwkI47+TFc/5Ubh4jfD2MB8GA1UdIwQY
MBaAFPbLDI8ghDMCA09jZW6inr1tEWOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUt
MmFmM2Q2MmJlN2YyLzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUtMmFmM2Q2MmJlN2Yy
LzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMIiT/+Y
7Sn4a+PaVsOFYDW9g4hAF9k8BPDexG4wTzKDTndGyx83oxUqb0mR2UawNm5QOxpL
5SULYNHNVzs2JaVfihqrCPAxy+DW7tdS9Byo5efVx32gbu9NE4EKP4JEuMkqsYO+
Yxh8dsMl0+zjGrzyKDQzA0Vy2MAw7F2lD7PPEsFsd7CCiR52cjW3/jZud+K/Ry8l
HCGoFlZzjnwRJKdWK+iKOTB0yADPQSgiMaEflu9KnJRJ0ffawANITyNjvM3GDL3e
sLPfUy90OFWbKTfQ766CX8JjlC8fXyzVyYhXHUiEyySaxYJJ/W2JU4tmD72XE02+
dQm6ivw8FzDl+A==
-----END CERTIFICATE-----
Generated at Thu Jun 19 04:14:46 2025 by rpki-client