Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
File: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft (raw, json)
Hash identifier: eY/NxnHj+o8DEU9xmFI+Ok7GN5hAxB8/3qLdeOAaC7M=
Subject key identifier: DD:B6:85:BF:CC:63:F4:32:A4:73:EC:56:4F:07:37:17:6E:DC:33:05
Authority key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
Certificate issuer: /CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Certificate serial: 0197688551F2295B8A2DFEAC0ABF8EA074D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
Manifest number: 01AF
Signing time: Fri 13 Jun 2025 09:00:57 +0000
Manifest this update: Fri 13 Jun 2025 09:00:57 +0000
Manifest next update: Sat 14 Jun 2025 09:00:57 +0000
Files and hashes: 1: 862AzXPpO4q0TZw2prtOswI6C3U.roa (hash: UvMXTudocwR1LdtSYifhkjBcDLnzk1IebtQXMqpmBY0=)
2: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl (hash: j8lyfzcWZVlRN/ZLP+VZNf6q/+oopPQRGUeMH6fCd8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:51:f2:29:5b:8a:2d:fe:ac:0a:bf:8e:a0:74:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Validity
Not Before: Jun 13 09:00:57 2025 GMT
Not After : Jun 14 09:00:57 2025 GMT
Subject: CN=ddb685bfcc63f432a473ec564f0737176edc3305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:ba:03:42:93:d6:2b:96:41:2f:0c:10:94:
90:04:e3:68:53:38:d9:44:80:d7:76:92:47:44:4f:
f8:89:4b:f7:28:88:53:b3:da:53:1a:1a:1d:00:43:
02:67:84:34:32:fd:7b:51:5b:65:ae:58:95:5f:0f:
f9:00:59:fd:65:52:79:1a:41:5f:42:51:f9:46:fe:
10:aa:82:ec:fd:22:ca:d9:37:d2:ae:ec:30:9a:a1:
3d:bd:56:c3:1b:d3:d7:21:f6:a5:9d:6c:dc:1f:f4:
8a:ba:07:26:b4:8b:6d:7b:2e:8f:11:a8:66:99:c4:
0b:85:83:95:79:17:d9:4a:8e:82:ae:e2:c2:46:b5:
dc:01:f8:74:d7:97:e9:5c:d2:5b:5b:8f:31:ae:e0:
a9:0d:d5:5c:dc:08:f8:ec:02:cf:1e:8c:bf:be:c3:
eb:5e:26:96:97:81:19:a3:56:ec:da:a4:b4:9d:a7:
4c:6b:4e:2e:5d:07:42:9d:3c:6c:c8:22:ba:97:97:
6d:27:73:b0:83:df:f8:b4:76:52:ff:44:46:7a:4b:
d1:f3:69:ca:b0:d2:c1:44:3f:76:e3:e8:ef:17:7b:
21:7c:b5:f7:3e:17:f8:58:7a:64:ab:0e:22:fc:85:
25:b1:ac:47:90:76:4c:6f:ec:8e:d7:1e:30:b9:18:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B6:85:BF:CC:63:F4:32:A4:73:EC:56:4F:07:37:17:6E:DC:33:05
X509v3 Authority Key Identifier:
keyid:F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:03:85:75:78:be:f4:3b:04:11:47:f2:bb:13:8f:41:5e:95:
e0:b6:8c:77:75:4f:8d:d8:95:30:2e:7b:78:e8:71:cf:67:dc:
fa:37:03:ec:00:b1:bb:5e:c9:72:27:e8:b4:6c:6e:ee:26:d4:
1f:5b:db:08:8d:22:bc:28:97:e7:9b:9d:62:4f:bf:10:85:9a:
f5:7c:d5:dc:8b:4f:84:42:6c:b8:b0:bf:78:9c:0d:5e:e0:77:
22:82:8f:e4:fa:a5:2c:e3:4b:10:17:81:23:46:c2:72:c9:8d:
e0:17:90:0a:b7:22:27:26:df:d6:97:45:45:c9:5f:83:46:09:
7a:68:d5:99:92:30:bd:73:71:c6:1c:48:e2:27:26:ed:8f:17:
2f:44:9c:cf:57:51:78:4a:50:61:bd:7d:fb:c9:f6:cd:04:2b:
c4:b6:52:4a:b3:31:b9:bd:ca:22:b1:8f:6f:ab:52:db:8d:0e:
b4:a1:cd:5c:ec:16:09:0e:b1:22:c9:3a:af:61:5c:ba:c2:38:
2e:b4:73:f6:30:f9:72:6f:4e:cc:a2:d6:7c:6e:d6:2b:27:81:
f4:c1:e5:b1:53:7b:67:fc:2c:27:7f:df:71:ea:db:6d:68:01:
83:c5:1c:4b:79:08:bf:86:9d:1b:24:bc:65:e7:f8:48:49:ac:
75:95:a9:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohVHyKVuKLf6sCr+OoHTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWZiMjRjZTY3YzIxMTI5N2IwNjVjNjdmMWI4MjA5Yjk5
NDRiMGYwHhcNMjUwNjEzMDkwMDU3WhcNMjUwNjE0MDkwMDU3WjAzMTEwLwYDVQQD
EyhkZGI2ODViZmNjNjNmNDMyYTQ3M2VjNTY0ZjA3MzcxNzZlZGMzMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ba6A0KT1iuWQS8MEJSQBONoUzjZ
RIDXdpJHRE/4iUv3KIhTs9pTGhodAEMCZ4Q0Mv17UVtlrliVXw/5AFn9ZVJ5GkFf
QlH5Rv4QqoLs/SLK2TfSruwwmqE9vVbDG9PXIfalnWzcH/SKugcmtIttey6PEahm
mcQLhYOVeRfZSo6CruLCRrXcAfh015fpXNJbW48xruCpDdVc3Aj47ALPHoy/vsPr
XiaWl4EZo1bs2qS0nadMa04uXQdCnTxsyCK6l5dtJ3Owg9/4tHZS/0RGekvR82nK
sNLBRD924+jvF3shfLX3Phf4WHpkqw4i/IUlsaxHkHZMb+yO1x4wuRgTcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN22hb/MY/QypHPsVk8HNxdu3DMFMB8GA1UdIwQY
MBaAFPafskzmfCESl7Blxn8bggm5lEsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zZTZiMjYtYTE0Ni00MmNmLTgyZjMt
OWU1MTM4ZTEyMGM5LzEvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zZTZiMjYtYTE0Ni00MmNmLTgyZjMtOWU1MTM4ZTEyMGM5
LzEvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggOFdXi+
9DsEEUfyuxOPQV6V4LaMd3VPjdiVMC57eOhxz2fc+jcD7ACxu17JcifotGxu7ibU
H1vbCI0ivCiX55udYk+/EIWa9XzV3ItPhEJsuLC/eJwNXuB3IoKP5PqlLONLEBeB
I0bCcsmN4BeQCrciJybf1pdFRclfg0YJemjVmZIwvXNxxhxI4icm7Y8XL0Scz1dR
eEpQYb19+8n2zQQrxLZSSrMxub3KIrGPb6tS240OtKHNXOwWCQ6xIsk6r2FcusI4
LrRz9jD5cm9OzKLWfG7WKyeB9MHlsVN7Z/wsJ3/fcerbbWgBg8UcS3kIv4adGyS8
Zef4SEmsdZWpEg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:48 2025 by rpki-client