Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
File: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft (raw, json)
Hash identifier: sq5PKIVCi2TGbb3GShelqhfmmTHjDQmnSaq1iVEDMEU=
Subject key identifier: 09:19:D3:DB:57:82:16:42:91:93:37:DD:1D:E0:FC:9F:D0:8B:C7:EA
Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
Certificate issuer: /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Certificate serial: 01977FE8FCEBEB5808511C665E24E28B0EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
Manifest number: 0632
Signing time: Tue 17 Jun 2025 22:01:04 +0000
Manifest this update: Tue 17 Jun 2025 22:01:04 +0000
Manifest next update: Wed 18 Jun 2025 22:01:04 +0000
Files and hashes: 1: 1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl (hash: sgcIEmTiVkWqSp0n9snIwlcStd0I6jjCQDrj2Fnofg4=)
2: 1Xq5NcZrjlFL23QLXPQ2cW-IBls.roa (hash: HbBq96j6XF4InfiwCDfEHXOlCXag1YicK/gCEex0C0Y=)
3: WPkeJ7VVhsQIoqJp0qX_1NW0Ods.roa (hash: mxYAtiu5jjm0C1BeKBzzTHZkmyPXrcSCe59vx0mWEsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:e8:fc:eb:eb:58:08:51:1c:66:5e:24:e2:8b:0e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Validity
Not Before: Jun 17 22:01:04 2025 GMT
Not After : Jun 18 22:01:04 2025 GMT
Subject: CN=0919d3db57821642919337dd1de0fc9fd08bc7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:83:71:ff:18:1e:f5:dd:d1:96:d2:75:46:
ee:73:25:b2:0e:1a:de:2a:ac:bf:3e:e1:84:23:0a:
0b:98:5f:a1:5e:0e:81:ee:ab:b6:af:25:48:2f:b4:
bd:1c:69:d0:b7:b4:7e:35:59:65:98:40:5f:66:bc:
18:2f:54:a4:7f:a4:80:6e:a4:1e:1a:53:d4:da:0a:
41:cd:a2:56:72:4d:51:0a:10:00:68:61:d9:4e:ed:
2c:64:00:b4:7d:0d:5e:9b:e8:08:44:49:f3:c0:f0:
cf:bc:9b:29:65:59:8f:ca:ea:d9:78:dd:d9:61:4f:
27:9d:1a:91:52:9a:31:1c:98:88:3d:a5:5e:7e:8b:
15:95:6a:6d:5d:40:02:0f:59:c6:4c:0f:18:61:ef:
98:d2:95:97:85:e0:76:71:cb:b0:ce:52:04:78:57:
44:5a:7d:fe:41:87:80:b1:3b:dc:e6:9f:3f:d1:ff:
22:73:ed:b3:7f:74:b2:f8:dd:a6:c6:bd:79:a7:c7:
72:1d:e7:1a:0d:d9:0f:16:35:06:9f:34:a8:e9:fc:
46:ed:e9:0f:95:77:c6:26:34:ab:82:af:ae:93:88:
6a:3f:99:94:e3:66:f4:78:6f:75:66:e3:f6:d4:0f:
7f:25:88:de:48:b7:6b:ed:29:f9:c8:d7:a8:3c:ad:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:19:D3:DB:57:82:16:42:91:93:37:DD:1D:E0:FC:9F:D0:8B:C7:EA
X509v3 Authority Key Identifier:
keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:63:85:ad:9f:c3:c4:b5:cf:9a:0e:36:d3:e0:35:ac:1d:1a:
56:5f:ce:a3:49:b8:2a:89:b5:ae:a8:65:1c:e9:78:cc:2e:1b:
56:cc:c6:d8:7f:20:59:cf:e0:c7:c6:b9:e7:a4:d2:18:02:26:
c6:1c:25:7c:9f:e5:1e:16:d0:3a:26:1a:45:fd:07:bf:27:70:
c3:1f:44:3f:03:8b:bd:f5:5e:39:dc:c0:cf:b2:2c:08:1a:71:
fc:d7:46:a5:3f:a9:3f:43:1e:f2:40:a7:99:9c:0c:d7:79:f0:
16:cf:78:8e:f8:26:14:cc:b6:6d:89:71:e1:5e:6c:cd:e5:78:
3d:dd:6d:ab:d8:33:75:31:32:99:d0:d6:59:5e:52:a9:be:36:
c6:34:ff:c6:b8:74:fc:fb:38:f9:04:fa:89:50:44:d9:bb:98:
f1:75:c5:a9:d8:8d:48:43:e9:23:87:c6:ea:46:95:9d:26:f2:
db:a7:b8:b7:84:0d:2e:cc:50:ac:5c:0b:57:4e:30:a0:f7:90:
86:00:72:da:39:b6:94:9b:86:72:e1:8d:a5:e6:a2:d9:ea:32:
ba:80:91:23:a2:a1:4e:17:93:ab:23:0f:e0:33:b2:d9:c4:0d:
b8:41:9e:d9:a2:9b:de:f1:e3:6b:49:35:2a:4f:14:aa:bc:9f:
2c:a2:5a:81
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZd/6Pzr61gIURxmXiTiiw7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OGRmZmY3ZjNjZGFhNzlhYThjNTFmNWNlMTJiMjM4NzA2
NDQwODEwHhcNMjUwNjE3MjIwMTA0WhcNMjUwNjE4MjIwMTA0WjAzMTEwLwYDVQQD
EygwOTE5ZDNkYjU3ODIxNjQyOTE5MzM3ZGQxZGUwZmM5ZmQwOGJjN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW2Dcf8YHvXd0ZbSdUbucyWyDhre
Kqy/PuGEIwoLmF+hXg6B7qu2ryVIL7S9HGnQt7R+NVllmEBfZrwYL1Skf6SAbqQe
GlPU2gpBzaJWck1RChAAaGHZTu0sZAC0fQ1em+gIREnzwPDPvJspZVmPyurZeN3Z
YU8nnRqRUpoxHJiIPaVefosVlWptXUACD1nGTA8YYe+Y0pWXheB2ccuwzlIEeFdE
Wn3+QYeAsTvc5p8/0f8ic+2zf3Sy+N2mxr15p8dyHecaDdkPFjUGnzSo6fxG7ekP
lXfGJjSrgq+uk4hqP5mU42b0eG91ZuP21A9/JYjeSLdr7Sn5yNeoPK1UoQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAkZ09tXghZCkZM33R3g/J/Qi8fqMB8GA1UdIwQY
MBaAFPmN//fzzap5qoxR9c4SsjhwZECBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZM185X1BOcW5tcWpGSDF6aEt5T0hCa1FJRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvNTQ3MWE4LWFlZGYtNGQ4Ni1hNDZk
LTc4OGM2MzA2YmIzZi8xLzEtWTNfOV9QTnFubXFqRkgxemhLeU9IQmtRSUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY4LzU0NzFhOC1hZWRmLTRkODYtYTQ2ZC03ODhjNjMwNmJi
M2YvMS8xLVkzXzlfUE5xbm1xakZIMXpoS3lPSEJrUUlFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmOF
rZ/DxLXPmg420+A1rB0aVl/Oo0m4Kom1rqhlHOl4zC4bVszG2H8gWc/gx8a556TS
GAImxhwlfJ/lHhbQOiYaRf0Hvydwwx9EPwOLvfVeOdzAz7IsCBpx/NdGpT+pP0Me
8kCnmZwM13nwFs94jvgmFMy2bYlx4V5szeV4Pd1tq9gzdTEymdDWWV5Sqb42xjT/
xrh0/Ps4+QT6iVBE2buY8XXFqdiNSEPpI4fG6kaVnSby26e4t4QNLsxQrFwLV04w
oPeQhgBy2jm2lJuGcuGNpeai2eoyuoCRI6KhTheTqyMP4DOy2cQNuEGe2aKb3vHj
a0k1Kk8UqryfLKJagQ==
-----END CERTIFICATE-----
Generated at Wed Jun 18 03:01:07 2025 by rpki-client