Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier: Gl1mnyqu5kZJZraTbQhI2kFcXhd+WhBBdXvAJ7zs2iA=
Subject key identifier: E4:60:FA:51:8A:EA:AD:65:45:39:C0:5F:EF:13:6D:0B:CC:F8:BF:9E
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 019873E39C2D60E55DC7F58431636E092CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number: 1186
Signing time: Mon 04 Aug 2025 07:02:33 +0000
Manifest this update: Mon 04 Aug 2025 07:02:33 +0000
Manifest next update: Tue 05 Aug 2025 07:02:33 +0000
Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: 6EJ93MnkpA84/+5eeP7NZZA/4LeIMuHX/WQIrqxeYkM=)
2: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (hash: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:9c:2d:60:e5:5d:c7:f5:84:31:63:6e:09:2c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: Aug 4 07:02:33 2025 GMT
Not After : Aug 5 07:02:33 2025 GMT
Subject: CN=e460fa518aeaad654539c05fef136d0bccf8bf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:8f:c5:70:de:a4:27:63:1e:fe:a4:04:cf:
02:d8:f1:2b:45:ff:ef:51:fc:b2:96:87:ff:5c:86:
18:ac:7e:b6:7a:0f:21:ad:ae:71:f0:3c:4c:84:68:
31:3b:13:44:d1:14:ea:08:5b:76:27:de:42:e2:41:
e9:81:c9:07:30:bf:7a:2c:c8:e6:3b:c8:96:97:ee:
75:05:9b:f6:76:53:b6:e3:12:47:3e:69:85:f9:46:
89:fd:5d:61:e5:78:ba:d8:2f:82:f4:dd:3d:a3:4b:
3b:52:5e:bc:4e:b0:be:5e:13:3f:e6:13:c4:d5:c0:
68:93:2c:ed:cd:e2:3d:c5:ee:25:b3:91:8f:6b:b8:
a6:c7:88:d4:9f:ac:28:5d:40:90:fa:b8:b6:ca:d1:
a6:77:19:25:70:98:00:55:7b:b8:0f:4c:7b:70:7a:
0b:94:ee:11:21:9a:e2:07:06:45:b1:61:c6:4e:1b:
5d:ed:12:d1:77:c7:74:aa:44:7a:68:05:4c:94:a7:
c8:6b:0d:b3:55:06:4f:74:18:51:39:bd:7e:b5:46:
a3:4d:d6:2d:77:cb:09:8a:34:46:3d:8f:72:a1:70:
d3:05:b5:a0:5e:ed:f7:dc:63:b0:af:64:52:56:ff:
d1:a0:63:48:36:95:55:fa:b0:db:ce:15:e7:d2:4e:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:60:FA:51:8A:EA:AD:65:45:39:C0:5F:EF:13:6D:0B:CC:F8:BF:9E
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c2:2b:ca:88:5b:06:45:d7:eb:58:c7:0b:e7:73:c0:64:7c:
c5:0b:d7:60:67:26:97:dd:d7:4d:5b:6c:1c:d2:74:a7:cb:6b:
81:f6:ad:f1:f5:64:87:8f:cb:3f:22:30:db:71:af:a0:5f:7b:
1e:f1:b9:5f:c4:51:46:d0:35:72:fd:a8:e0:5b:b7:63:39:af:
19:2d:e1:a9:21:5d:d8:4c:8b:59:dc:3d:87:17:07:54:cd:4b:
fe:dd:de:23:f5:0a:8c:41:7c:a2:63:68:e9:c8:ff:5b:9e:58:
d3:48:37:69:97:bf:9a:cb:c9:2a:d1:e6:95:b3:a9:be:8c:fe:
35:d8:9e:7c:f4:69:9e:16:19:62:73:81:e9:65:51:a9:d9:18:
0b:36:4a:00:d3:45:a0:fe:ff:40:90:a0:0d:ec:86:fc:b2:f1:
30:f5:38:e6:9c:b2:18:ed:65:58:09:bd:fc:ec:79:e7:55:63:
f9:ed:89:63:23:68:74:0c:c5:9b:2e:39:e8:f9:93:1f:ec:b7:
00:86:00:30:dd:6a:78:db:db:16:cb:19:50:51:30:af:d9:c7:
3b:d4:09:61:5f:d8:77:bb:7a:24:66:4e:67:c7:a7:f2:c0:9f:
9d:92:66:cc:a3:f6:5d:7c:65:91:1c:a7:77:e1:41:73:d2:bf:
9c:a9:bc:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz45wtYOVdx/WEMWNuCSzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDFmNTBkZjI2M2ZlNTA5ZmM1ZGU5YzVhNDczYTI4ZTM4
MTI2MzkwHhcNMjUwODA0MDcwMjMzWhcNMjUwODA1MDcwMjMzWjAzMTEwLwYDVQQD
EyhlNDYwZmE1MThhZWFhZDY1NDUzOWMwNWZlZjEzNmQwYmNjZjhiZjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tmPxXDepCdjHv6kBM8C2PErRf/v
Ufyylof/XIYYrH62eg8hra5x8DxMhGgxOxNE0RTqCFt2J95C4kHpgckHML96LMjm
O8iWl+51BZv2dlO24xJHPmmF+UaJ/V1h5Xi62C+C9N09o0s7Ul68TrC+XhM/5hPE
1cBokyztzeI9xe4ls5GPa7imx4jUn6woXUCQ+ri2ytGmdxklcJgAVXu4D0x7cHoL
lO4RIZriBwZFsWHGThtd7RLRd8d0qkR6aAVMlKfIaw2zVQZPdBhROb1+tUajTdYt
d8sJijRGPY9yoXDTBbWgXu333GOwr2RSVv/RoGNINpVV+rDbzhXn0k6yrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORg+lGK6q1lRTnAX+8TbQvM+L+eMB8GA1UdIwQY
MBaAFEvR9Q3yY/5Qn8XenFpHOijjgSY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDIwYTItYjg4MS00NjFjLWJiZjUt
MmI2ODA5MzM5NzAyLzEvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83ZDIwYTItYjg4MS00NjFjLWJiZjUtMmI2ODA5MzM5NzAy
LzEvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsIryohb
BkXX61jHC+dzwGR8xQvXYGcml93XTVtsHNJ0p8trgfat8fVkh4/LPyIw23GvoF97
HvG5X8RRRtA1cv2o4Fu3YzmvGS3hqSFd2EyLWdw9hxcHVM1L/t3eI/UKjEF8omNo
6cj/W55Y00g3aZe/msvJKtHmlbOpvoz+NdiefPRpnhYZYnOB6WVRqdkYCzZKANNF
oP7/QJCgDeyG/LLxMPU45pyyGO1lWAm9/Ox551Vj+e2JYyNodAzFmy456PmTH+y3
AIYAMN1qeNvbFssZUFEwr9nHO9QJYV/Yd7t6JGZOZ8en8sCfnZJmzKP2XXxlkRyn
d+FBc9K/nKm8QQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:14 2025 by rpki-client