Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: +NmyGbBV/W3nl+kN7UqKfxyCGdKx7t9lZomdIBNb/AA=
Subject key identifier: 2C:60:83:36:9F:F3:32:E3:A6:60:02:94:41:A3:83:50:E5:61:34:29
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 019771517258225E5ACE383520EC84FF57B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 158F
Signing time: Sun 15 Jun 2025 02:00:52 +0000
Manifest this update: Sun 15 Jun 2025 02:00:52 +0000
Manifest next update: Mon 16 Jun 2025 02:00:52 +0000
Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: 057DYiAUrRr9QC8VtR16VINsFTs6wDkbXNAmg84KlkQ=)
3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:72:58:22:5e:5a:ce:38:35:20:ec:84:ff:57:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Jun 15 02:00:52 2025 GMT
Not After : Jun 16 02:00:52 2025 GMT
Subject: CN=2c6083369ff332e3a660029441a38350e5613429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:37:15:cf:bb:95:8c:4c:27:ac:7d:66:26:
f2:84:fb:36:32:f2:c2:ea:7d:3a:5e:a5:ed:52:03:
a9:f6:bd:5a:1c:99:5f:a9:2f:a7:bc:8f:42:02:6d:
d1:1c:29:a9:a7:bd:e2:e2:22:0c:3f:47:e2:4b:77:
14:e6:05:77:ff:27:c2:c2:dc:6d:1d:32:c9:17:cb:
1e:0e:fa:15:f2:c5:f9:54:19:39:3e:54:27:99:03:
33:69:9a:82:2c:e2:f2:ee:c5:05:da:78:c8:10:fb:
9f:9f:56:67:ae:1f:1e:ed:23:eb:64:99:ae:4c:47:
7c:14:cd:2a:a7:c0:28:4a:7a:5d:66:bb:39:4f:d3:
66:b2:bc:5d:a4:eb:a7:23:e6:e3:00:45:b3:28:b8:
32:53:6c:05:8a:42:97:e0:9f:80:b0:0f:1e:24:e4:
63:41:89:5c:40:28:76:95:6c:dc:f1:9f:9d:56:24:
da:67:f3:50:d4:43:66:8a:bf:7c:0d:d5:e4:58:8a:
f1:34:99:58:87:6f:30:ad:16:e3:b0:05:f7:f1:cf:
4a:b6:87:84:4d:71:51:f2:9f:a5:60:d9:c1:9c:c3:
64:4b:86:28:27:7d:e8:25:12:dc:c3:a8:9d:a8:d8:
d8:44:f1:b5:a1:80:c0:fb:e1:b2:3a:bd:51:1e:90:
e7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:60:83:36:9F:F3:32:E3:A6:60:02:94:41:A3:83:50:E5:61:34:29
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:12:b5:08:56:dc:be:ef:90:56:e1:da:b4:ce:88:86:67:8d:
70:98:b5:20:02:08:bb:fc:e8:57:f3:9a:df:d6:db:40:5b:5f:
44:b4:c2:79:34:ea:13:95:9f:bf:66:75:d3:6d:ce:e7:c0:0b:
67:9d:71:44:22:16:df:3e:e7:35:0c:14:8e:2f:3f:58:a0:d5:
09:0c:31:9a:d2:40:29:68:20:bb:c2:15:b8:45:4d:e6:84:46:
e7:01:a9:01:5b:28:42:4b:1a:56:f6:1d:01:38:0f:c8:6a:f1:
93:c9:dd:5a:1f:7a:27:90:94:3a:27:b2:0e:04:83:c7:b1:83:
4a:71:45:11:53:93:90:8f:34:65:b7:50:5c:4e:15:bc:35:2f:
4f:b9:0b:68:d4:55:cf:35:d4:1f:d0:c8:f7:9c:99:90:64:6c:
b4:6a:93:48:6d:62:22:bd:6b:ef:b6:62:a9:7b:bf:4b:4c:6b:
c2:e3:f8:db:59:cc:dc:6e:77:91:97:8a:02:d5:41:75:a6:8e:
15:95:18:20:a3:c7:26:b2:ea:88:a2:46:45:7c:0c:f9:3f:04:
be:25:00:a2:79:f1:02:02:24:72:fd:4f:d5:f7:18:90:b2:9f:
fa:6c:68:48:1c:54:89:ee:16:35:a2:57:23:78:fb:ac:fe:6c:
3d:d4:01:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxUXJYIl5azjg1IOyE/1e1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTlkNTMzMTAyNDMxODcwODNmZGM5NjA5NzM1NDY1YjEw
ODkwNDMwHhcNMjUwNjE1MDIwMDUyWhcNMjUwNjE2MDIwMDUyWjAzMTEwLwYDVQQD
EygyYzYwODMzNjlmZjMzMmUzYTY2MDAyOTQ0MWEzODM1MGU1NjEzNDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8A3Fc+7lYxMJ6x9ZibyhPs2MvLC
6n06XqXtUgOp9r1aHJlfqS+nvI9CAm3RHCmpp73i4iIMP0fiS3cU5gV3/yfCwtxt
HTLJF8seDvoV8sX5VBk5PlQnmQMzaZqCLOLy7sUF2njIEPufn1Znrh8e7SPrZJmu
TEd8FM0qp8AoSnpdZrs5T9NmsrxdpOunI+bjAEWzKLgyU2wFikKX4J+AsA8eJORj
QYlcQCh2lWzc8Z+dViTaZ/NQ1ENmir98DdXkWIrxNJlYh28wrRbjsAX38c9KtoeE
TXFR8p+lYNnBnMNkS4YoJ33oJRLcw6idqNjYRPG1oYDA++GyOr1RHpDnVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxggzaf8zLjpmAClEGjg1DlYTQpMB8GA1UdIwQY
MBaAFPTp1TMQJDGHCD/clglzVGWxCJBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAt
N2U2NjY0OGZjMjY0LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAtN2U2NjY0OGZjMjY0
LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhK1CFbc
vu+QVuHatM6IhmeNcJi1IAIIu/zoV/Oa39bbQFtfRLTCeTTqE5Wfv2Z1023O58AL
Z51xRCIW3z7nNQwUji8/WKDVCQwxmtJAKWggu8IVuEVN5oRG5wGpAVsoQksaVvYd
ATgPyGrxk8ndWh96J5CUOieyDgSDx7GDSnFFEVOTkI80ZbdQXE4VvDUvT7kLaNRV
zzXUH9DI95yZkGRstGqTSG1iIr1r77ZiqXu/S0xrwuP421nM3G53kZeKAtVBdaaO
FZUYIKPHJrLqiKJGRXwM+T8EviUAonnxAgIkcv1P1fcYkLKf+mxoSBxUie4WNaJX
I3j7rP5sPdQBpg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:27 2025 by rpki-client