Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
File: 9qD_yrRKardihf2LFfuprgRywAo.mft (raw, json)
Hash identifier: F4oQxAzppQXW583ijl4EHkG5WQMtfzLnU+MGT+BtGCA=
Subject key identifier: AF:66:FF:04:F9:0C:AF:31:A4:C3:AC:3A:64:39:2B:8B:67:2B:3F:30
Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Certificate issuer: /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Certificate serial: 01978991034747A5103A1D11E43608FBBACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
Manifest number: 159F
Signing time: Thu 19 Jun 2025 19:01:11 +0000
Manifest this update: Thu 19 Jun 2025 19:01:11 +0000
Manifest next update: Fri 20 Jun 2025 19:01:11 +0000
Files and hashes: 1: 9qD_yrRKardihf2LFfuprgRywAo.crl (hash: pJqfDVhmzjP4WMrikcMnfq00ss6J+CeAFQLyxLMJ7Js=)
2: XPkwDLJHT478MATdbgeUa5gcEiA.roa (hash: DoMDYSGNMC9OU+9UBRPPXJnhTtSu9q09Id+HJ989GvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:91:03:47:47:a5:10:3a:1d:11:e4:36:08:fb:ba:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Validity
Not Before: Jun 19 19:01:11 2025 GMT
Not After : Jun 20 19:01:11 2025 GMT
Subject: CN=af66ff04f90caf31a4c3ac3a64392b8b672b3f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:14:24:3c:b1:6a:d8:6e:7b:18:c6:64:d7:
0b:61:88:82:29:5d:e3:30:23:71:4b:04:5d:13:a8:
3c:d5:65:6c:ab:e1:0a:b9:a7:d5:21:d8:c7:32:92:
29:0a:3c:e7:e4:20:85:61:8f:6d:39:41:d7:e7:ce:
7a:25:d5:85:87:e3:1a:73:be:e9:f4:49:35:86:73:
a7:fc:47:4e:56:08:dd:cd:aa:89:27:0b:50:0b:8f:
2d:d9:10:6e:22:1e:5a:f7:25:91:46:b1:98:57:f8:
e7:69:d2:09:27:bf:c1:f1:ab:4f:b6:96:e7:0f:58:
73:f4:97:48:79:00:c7:78:cb:b4:5d:14:e5:78:d0:
ea:ee:0e:64:80:89:96:d0:b1:18:6c:dc:51:25:fd:
97:b4:96:48:40:57:68:44:d5:e7:8d:f7:4f:ae:cf:
35:0c:ba:b4:2a:ed:e7:ab:e5:3f:5b:c9:a8:c1:94:
43:d7:7a:08:48:00:3a:63:86:1a:24:02:00:78:6f:
2f:ad:44:46:e2:95:ce:3a:5a:4e:22:1a:20:ee:b4:
65:92:4b:c9:58:9e:41:1a:ed:9f:64:28:21:6f:ac:
36:9b:5f:0b:1d:ac:78:04:ff:6e:da:93:be:08:4b:
be:23:12:f0:8e:d0:cd:45:d9:f2:13:ed:63:64:db:
35:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:66:FF:04:F9:0C:AF:31:A4:C3:AC:3A:64:39:2B:8B:67:2B:3F:30
X509v3 Authority Key Identifier:
keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:81:b2:df:0b:f5:53:5f:c7:a3:97:41:c6:e0:79:23:b2:c9:
3d:e2:a8:b6:83:03:4f:d7:67:96:ba:c0:09:0f:39:09:cb:bf:
77:3e:1c:9c:b3:a8:75:2f:75:28:85:75:0e:f6:8a:9d:fd:e8:
ef:ac:ef:51:50:66:94:8d:ac:11:74:b4:37:8a:6f:62:51:7b:
a8:f0:98:a1:50:2a:14:4e:d9:77:06:24:04:0b:95:52:4b:a4:
dc:d6:ed:e8:5e:d1:86:7c:2c:ce:f2:44:0f:e5:da:c6:5c:a3:
1c:69:f2:b8:58:64:7e:e0:24:d1:55:4e:d0:41:75:88:3a:00:
4e:11:17:73:2a:f9:34:3f:ba:4a:9e:c2:5d:75:1c:c5:3f:27:
bd:b9:22:d5:2d:3f:60:c9:37:a9:20:24:ff:a4:8c:01:cf:6e:
b3:ee:b7:5f:94:59:77:9b:f7:1a:88:88:23:eb:08:ac:21:5d:
50:fd:a8:f5:08:8f:31:5b:14:57:50:e0:50:09:82:d3:9f:fa:
6a:eb:d0:36:d7:80:07:29:e1:e2:a7:ca:1f:dd:f8:c1:ae:b3:
13:e9:02:ee:43:83:d0:7c:76:33:7c:99:7a:67:9d:c1:f2:f9:
1b:61:07:43:8a:d2:ed:95:87:a4:57:ae:95:1d:aa:d6:9c:20:
e7:ba:d3:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeJkQNHR6UQOh0R5DYI+7rPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YTBmZmNhYjQ0YTZhYjc2Mjg1ZmQ4YjE1ZmJhOWFlMDQ3
MmMwMGEwHhcNMjUwNjE5MTkwMTExWhcNMjUwNjIwMTkwMTExWjAzMTEwLwYDVQQD
EyhhZjY2ZmYwNGY5MGNhZjMxYTRjM2FjM2E2NDM5MmI4YjY3MmIzZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseEUJDyxathuexjGZNcLYYiCKV3j
MCNxSwRdE6g81WVsq+EKuafVIdjHMpIpCjzn5CCFYY9tOUHX5856JdWFh+Mac77p
9Ek1hnOn/EdOVgjdzaqJJwtQC48t2RBuIh5a9yWRRrGYV/jnadIJJ7/B8atPtpbn
D1hz9JdIeQDHeMu0XRTleNDq7g5kgImW0LEYbNxRJf2XtJZIQFdoRNXnjfdPrs81
DLq0Ku3nq+U/W8mowZRD13oISAA6Y4YaJAIAeG8vrURG4pXOOlpOIhog7rRlkkvJ
WJ5BGu2fZCghb6w2m18LHax4BP9u2pO+CEu+IxLwjtDNRdnyE+1jZNs1RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9m/wT5DK8xpMOsOmQ5K4tnKz8wMB8GA1UdIwQY
MBaAFPag/8q0Smq3YoX9ixX7qa4EcsAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXFEX3lyUkthcmRpaGYyTEZmdXByZ1J5d0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hNWUwNTgtZjQ3NS00N2NjLWI5ZWMt
YWU0NjA5NDM4OWJhLzEvOXFEX3lyUkthcmRpaGYyTEZmdXByZ1J5d0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9hNWUwNTgtZjQ3NS00N2NjLWI5ZWMtYWU0NjA5NDM4OWJh
LzEvOXFEX3lyUkthcmRpaGYyTEZmdXByZ1J5d0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4Gy3wv1
U1/Ho5dBxuB5I7LJPeKotoMDT9dnlrrACQ85Ccu/dz4cnLOodS91KIV1DvaKnf3o
76zvUVBmlI2sEXS0N4pvYlF7qPCYoVAqFE7ZdwYkBAuVUkuk3Nbt6F7RhnwszvJE
D+XaxlyjHGnyuFhkfuAk0VVO0EF1iDoAThEXcyr5ND+6Sp7CXXUcxT8nvbki1S0/
YMk3qSAk/6SMAc9us+63X5RZd5v3GoiII+sIrCFdUP2o9QiPMVsUV1DgUAmC05/6
auvQNteABynh4qfKH934wa6zE+kC7kOD0Hx2M3yZemedwfL5G2EHQ4rS7ZWHpFeu
lR2q1pwg57rTDg==
-----END CERTIFICATE-----
Generated at Thu Jun 19 23:11:56 2025 by rpki-client