Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier: 6+nvYDcneNhJ95xyCbzDxqKXQOojwXcYymoOQ8/rTFQ=
Subject key identifier: DE:37:09:D5:0A:7A:F9:79:3D:1D:C5:EE:F4:D5:A5:40:22:B5:A0:C9
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 01977942096F76FEA534B08A00AF2F41BF03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number: 159C
Signing time: Mon 16 Jun 2025 15:01:00 +0000
Manifest this update: Mon 16 Jun 2025 15:01:00 +0000
Manifest next update: Tue 17 Jun 2025 15:01:00 +0000
Files and hashes: 1: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=)
2: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=)
3: Fnl-4WGHpZ5LXFARfr2ATzp8vLk.roa (hash: ux6nyEJd1cHyE1av/8nhZIQD47mVZkeQGG+DrMwKlok=)
4: QX-JX3Qu6B9dGH2bgHRHXCFQSGM.roa (hash: Libk/j+UTy/9cJUk+hwXMnFM9cOquglWjTlufdsoMkE=)
5: bDPZ2IR6ImcRHKaCKb1DFYZSPeU.roa (hash: C/oWZRw0Dl261ZToD4X2GP0Mb4nYzslAlII1IzygPX8=)
6: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=)
7: lipPE0ZW42V7IEiCduQOBOaBQRM.roa (hash: nPRnjF3dKcW3adjgIBLS/OZJ6pE6pjg9DlJLpdzKt78=)
8: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=)
9: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: GvgjX+EnD32cwqd0ewgEE3K0AoSehRBZa+duf6/05ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:09:6f:76:fe:a5:34:b0:8a:00:af:2f:41:bf:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Jun 16 15:01:00 2025 GMT
Not After : Jun 17 15:01:00 2025 GMT
Subject: CN=de3709d50a7af9793d1dc5eef4d5a54022b5a0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:55:99:2f:29:4c:bc:06:33:dd:29:b6:17:76:
ab:f7:c3:37:dc:f5:81:41:a7:1d:e9:e0:c5:4c:14:
00:c8:42:64:ca:64:0f:35:d9:7b:6c:ff:8c:53:22:
d0:8c:26:5c:ec:78:59:71:ba:d3:fa:63:a9:86:07:
96:8b:19:7b:4a:e4:49:2e:c8:3b:04:ca:11:b0:6d:
ec:c4:fa:ed:c2:81:64:ab:90:e7:7d:53:a6:15:a2:
5f:f2:86:d3:fa:61:c3:b6:eb:6b:67:94:80:53:79:
1b:17:2b:69:ef:1d:3e:c9:d6:9b:fc:8c:91:f0:33:
d3:07:1d:03:3c:18:f2:eb:44:ca:1b:3f:36:eb:d9:
31:df:3d:b2:47:3d:31:13:79:c4:c4:e4:98:40:69:
f2:6d:f2:60:f7:34:f7:dc:50:58:28:d4:b1:a8:5d:
aa:3c:21:79:bf:df:e0:fa:c7:d9:d0:9a:db:0d:97:
1a:7e:d6:44:5d:7e:4f:ef:2e:93:d0:d4:06:23:26:
95:90:aa:b5:b9:1b:66:19:f8:2c:e5:f6:33:32:4a:
45:24:97:3c:42:17:ba:9c:56:91:5d:7e:b5:40:31:
7c:f1:65:70:82:76:e1:65:7a:a1:99:a1:63:d0:2c:
10:df:df:b6:31:17:66:0b:da:6b:c9:c3:f7:3d:4b:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:37:09:D5:0A:7A:F9:79:3D:1D:C5:EE:F4:D5:A5:40:22:B5:A0:C9
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a1:53:c8:11:b4:9f:64:11:f7:17:fe:08:eb:f1:c3:0c:61:
d1:65:c5:43:70:de:e1:a9:0e:c3:e2:b0:69:60:15:a6:55:e7:
bf:01:d5:8a:18:81:d0:5e:24:fd:80:47:4b:58:b5:8e:88:ac:
66:3e:65:3b:c4:0b:51:ea:be:88:45:a7:df:d7:25:00:26:61:
5f:9a:d7:8a:46:af:a4:41:66:c5:1d:19:1e:db:26:72:6e:70:
44:3f:62:c5:95:71:8d:70:b8:a6:53:6c:82:3f:d3:6c:7d:2c:
7c:8c:09:05:49:bc:1f:af:b2:0e:c0:58:63:fd:23:b6:ed:7b:
da:78:70:d0:87:50:cf:7a:fb:4f:49:a0:62:99:f2:ef:85:c9:
61:61:de:63:95:0d:4a:36:42:cd:bf:d8:bc:12:20:62:0e:b2:
89:61:e4:88:6b:d0:ac:f1:33:ed:43:62:c8:19:74:2c:f1:56:
ed:04:f0:0d:83:d4:4f:f1:2e:61:6c:4d:c9:51:39:45:78:3e:
27:43:d5:1c:de:17:a5:2e:8b:4c:30:53:5f:d5:0f:f6:bd:ed:
d8:e0:18:a2:f5:3a:62:ef:f0:87:dc:2c:c5:bd:ea:ba:6c:d0:
ab:20:cc:8e:8b:6e:5c:90:98:0d:37:43:07:dc:51:8f:42:86:
da:99:2f:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5Qglvdv6lNLCKAK8vQb8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5
NGVlYzMwHhcNMjUwNjE2MTUwMTAwWhcNMjUwNjE3MTUwMTAwWjAzMTEwLwYDVQQD
EyhkZTM3MDlkNTBhN2FmOTc5M2QxZGM1ZWVmNGQ1YTU0MDIyYjVhMGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81WZLylMvAYz3Sm2F3ar98M33PWB
Qacd6eDFTBQAyEJkymQPNdl7bP+MUyLQjCZc7HhZcbrT+mOphgeWixl7SuRJLsg7
BMoRsG3sxPrtwoFkq5DnfVOmFaJf8obT+mHDtutrZ5SAU3kbFytp7x0+ydab/IyR
8DPTBx0DPBjy60TKGz8269kx3z2yRz0xE3nExOSYQGnybfJg9zT33FBYKNSxqF2q
PCF5v9/g+sfZ0JrbDZcaftZEXX5P7y6T0NQGIyaVkKq1uRtmGfgs5fYzMkpFJJc8
Qhe6nFaRXX61QDF88WVwgnbhZXqhmaFj0CwQ39+2MRdmC9prycP3PUvIdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN43CdUKevl5PR3F7vTVpUAitaDJMB8GA1UdIwQY
MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt
MjhkNWI2MDdhNDdmLzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm
LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaFTyBG0
n2QR9xf+COvxwwxh0WXFQ3De4akOw+KwaWAVplXnvwHVihiB0F4k/YBHS1i1jois
Zj5lO8QLUeq+iEWn39clACZhX5rXikavpEFmxR0ZHtsmcm5wRD9ixZVxjXC4plNs
gj/TbH0sfIwJBUm8H6+yDsBYY/0jtu172nhw0IdQz3r7T0mgYpny74XJYWHeY5UN
SjZCzb/YvBIgYg6yiWHkiGvQrPEz7UNiyBl0LPFW7QTwDYPUT/EuYWxNyVE5RXg+
J0PVHN4XpS6LTDBTX9UP9r3t2OAYovU6Yu/wh9wsxb3qumzQqyDMjotuXJCYDTdD
B9xRj0KG2pkveg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:45:29 2025 by rpki-client