Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
File: 9rkcLAjwDWdj0unmosRCETDz3b0.mft (raw, json)
Hash identifier: LDmzGly3Pa0KC09sHCNYMnxfgj3L3/MGXxB0FgmHLLs=
Subject key identifier: EC:D1:CF:3C:73:86:2D:1F:86:C3:BE:2F:47:04:66:5C:BA:5F:04:0E
Authority key identifier: F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
Certificate issuer: /CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Certificate serial: 0198733D553268430D8DF8EF435B101D57F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
Manifest number: 02C4
Signing time: Mon 04 Aug 2025 04:00:55 +0000
Manifest this update: Mon 04 Aug 2025 04:00:55 +0000
Manifest next update: Tue 05 Aug 2025 04:00:55 +0000
Files and hashes: 1: 9rkcLAjwDWdj0unmosRCETDz3b0.crl (hash: Hn49S+ANBD9//nR1oQjHRhWvemmQVOqDNgtsN84oSxc=)
2: qWCmFtsXHG35E1fSvLwIlYexFOQ.roa (hash: DZEUcJBHB58OY/U7lPR8QQCuA+d6j3m8DCG3gbMXeLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:55:32:68:43:0d:8d:f8:ef:43:5b:10:1d:57:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd
Validity
Not Before: Aug 4 04:00:55 2025 GMT
Not After : Aug 5 04:00:55 2025 GMT
Subject: CN=ecd1cf3c73862d1f86c3be2f4704665cba5f040e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:27:e9:4c:11:35:59:6a:48:fc:15:a4:80:
5e:b3:4f:84:d9:d2:16:50:89:01:9a:ef:80:22:21:
f9:bc:7a:89:45:bb:fc:22:d6:52:8b:45:dc:53:72:
48:a0:f6:81:97:58:ca:66:70:f7:3b:c2:84:1d:16:
e6:61:d6:72:7e:a0:7c:8e:5f:08:3c:7d:65:7c:2d:
6e:fc:4b:b7:7d:6e:ca:2e:3b:30:a5:e5:2c:64:68:
cd:7a:2d:1d:94:62:2d:b9:75:b0:14:b8:a7:4b:72:
8a:aa:77:f2:6f:15:ad:9e:61:18:6d:1a:cd:a1:51:
5d:7d:99:d2:b6:6a:3a:88:2f:d1:76:1e:07:17:e0:
6c:de:a6:e5:4e:90:fe:31:20:e4:59:76:90:bc:5f:
6f:a1:5c:45:e3:2f:e2:f9:6b:cb:26:57:2c:c4:88:
0e:a9:43:d9:0a:8b:19:fb:80:e1:0d:93:5c:11:61:
fc:23:ee:ca:48:0f:a6:dd:79:5c:5e:b8:cd:84:10:
8d:76:4b:c3:36:07:9c:00:25:1a:71:8a:c2:99:18:
f1:b6:86:17:16:5a:85:d3:4d:fd:b8:06:86:1f:e1:
98:86:4a:fe:af:68:52:c4:d6:c5:9c:ca:8c:2d:3c:
aa:87:db:2c:6b:47:14:99:35:9f:1e:0a:4b:96:b3:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D1:CF:3C:73:86:2D:1F:86:C3:BE:2F:47:04:66:5C:BA:5F:04:0E
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5c:c2:30:d7:e5:d2:cf:64:b2:89:34:73:4f:d1:f8:cf:10:
ec:78:f0:9e:ad:34:26:58:4b:01:53:c3:f8:9a:6c:ec:b9:54:
d6:7b:67:d1:29:7a:82:f1:e0:c0:04:74:1a:da:2c:2d:4c:e0:
31:df:90:20:ab:4b:3d:34:3e:8d:1e:e5:65:31:1e:3c:db:be:
7e:87:dc:02:c2:17:a1:07:7e:15:c9:d8:88:b7:25:58:13:8d:
52:fa:54:7d:41:19:c8:a8:51:6c:d6:87:f1:0b:ba:22:46:37:
45:89:3f:65:0d:34:26:9e:c8:30:4d:d8:1c:fb:9d:a7:db:6b:
9e:6b:e0:17:03:1b:79:d0:0c:d1:10:70:56:97:cc:79:9b:a1:
5e:c9:d1:fc:6b:fc:cc:a5:cc:ad:d2:bd:18:b8:b0:d6:66:13:
8f:c2:98:9f:b6:26:99:62:08:65:6f:5a:0c:ff:55:9a:56:fc:
2d:2d:c9:9b:f1:0e:2d:b3:f3:75:3f:96:46:0d:4b:d7:a4:61:
91:9d:b5:9d:74:d6:bb:79:3b:f5:12:01:0f:e2:71:18:29:f5:
7f:e6:17:45:4e:bf:8b:4b:db:01:11:b9:c2:97:8f:17:2c:d3:
9b:19:1c:06:e3:e1:80:9c:e8:56:8a:94:24:34:2c:70:6e:a3:
81:24:b2:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPVUyaEMNjfjvQ1sQHVfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjkxYzJjMDhmMDBkNjc2M2QyZTllNmEyYzQ0MjExMzBm
M2RkYmQwHhcNMjUwODA0MDQwMDU1WhcNMjUwODA1MDQwMDU1WjAzMTEwLwYDVQQD
EyhlY2QxY2YzYzczODYyZDFmODZjM2JlMmY0NzA0NjY1Y2JhNWYwNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT4n6UwRNVlqSPwVpIBes0+E2dIW
UIkBmu+AIiH5vHqJRbv8ItZSi0XcU3JIoPaBl1jKZnD3O8KEHRbmYdZyfqB8jl8I
PH1lfC1u/Eu3fW7KLjswpeUsZGjNei0dlGItuXWwFLinS3KKqnfybxWtnmEYbRrN
oVFdfZnStmo6iC/Rdh4HF+Bs3qblTpD+MSDkWXaQvF9voVxF4y/i+WvLJlcsxIgO
qUPZCosZ+4DhDZNcEWH8I+7KSA+m3XlcXrjNhBCNdkvDNgecACUacYrCmRjxtoYX
FlqF0039uAaGH+GYhkr+r2hSxNbFnMqMLTyqh9ssa0cUmTWfHgpLlrMtuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzRzzxzhi0fhsO+L0cEZly6XwQOMB8GA1UdIwQY
MBaAFPa5HCwI8A1nY9Lp5qLEQhEw8929MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84ZGE1ZTgtODU0NC00OWQ5LWE4M2Yt
OGM5MWY5NmJlNjI1LzEvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84ZGE1ZTgtODU0NC00OWQ5LWE4M2YtOGM5MWY5NmJlNjI1
LzEvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVzCMNfl
0s9ksok0c0/R+M8Q7Hjwnq00JlhLAVPD+Jps7LlU1ntn0Sl6gvHgwAR0GtosLUzg
Md+QIKtLPTQ+jR7lZTEePNu+fofcAsIXoQd+FcnYiLclWBONUvpUfUEZyKhRbNaH
8Qu6IkY3RYk/ZQ00Jp7IME3YHPudp9trnmvgFwMbedAM0RBwVpfMeZuhXsnR/Gv8
zKXMrdK9GLiw1mYTj8KYn7YmmWIIZW9aDP9Vmlb8LS3Jm/EOLbPzdT+WRg1L16Rh
kZ21nXTWu3k79RIBD+JxGCn1f+YXRU6/i0vbARG5wpePFyzTmxkcBuPhgJzoVoqU
JDQscG6jgSSyDA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:27 2025 by rpki-client