Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: tdfHOAVDVbQtaOZQfBmQ3Je0HIyjAlro7KsUQTvGSvo=
Subject key identifier: 69:EA:5C:C8:57:A0:92:7D:C1:1C:D3:8D:99:05:D0:F8:C7:3E:40:73
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 019778D3E3F34890DE01E238FB2913DB70DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 095F
Signing time: Mon 16 Jun 2025 13:00:41 +0000
Manifest this update: Mon 16 Jun 2025 13:00:41 +0000
Manifest next update: Tue 17 Jun 2025 13:00:41 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: 1T8YHiPITgANWLxmZ/qjtdLuS9NwYFqzGnN1qKTZ0bo=)
2: VwdOphY_UgRaqYf3Kg3b6kzwRf0.roa (hash: RncMvUV6R6LkD/qjU1iWGPE4PHApbhUX2ZP/1640Hn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:e3:f3:48:90:de:01:e2:38:fb:29:13:db:70:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: Jun 16 13:00:41 2025 GMT
Not After : Jun 17 13:00:41 2025 GMT
Subject: CN=69ea5cc857a0927dc11cd38d9905d0f8c73e4073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c8:50:ff:ae:a6:87:34:07:e9:8e:3c:5e:e7:
80:0d:2f:9f:18:8b:57:3a:93:8d:8d:af:12:d3:23:
22:a4:fd:56:44:97:86:e5:65:67:0d:4f:1b:d9:27:
45:d8:b1:5f:34:f4:72:66:7b:98:18:03:74:69:5b:
22:c5:ed:63:b1:b1:79:81:b7:a3:95:54:1b:70:f2:
64:8e:27:3d:f1:1f:37:45:a2:99:a0:40:70:6a:a8:
72:02:ae:52:ed:d8:60:5e:87:67:cb:6b:c8:a6:82:
00:d8:ef:89:52:fa:af:1e:42:79:99:a9:ce:a1:62:
dc:f5:54:77:15:6c:c3:78:3c:90:8d:e3:00:38:d2:
6a:26:23:ae:2e:ed:19:5d:9b:9f:13:b7:06:a7:eb:
47:85:b1:ab:36:3e:81:77:ab:fd:06:55:d3:82:89:
39:ed:0c:3b:f2:2a:db:36:de:bd:50:c6:37:43:4e:
2f:8c:1a:cf:8b:18:4e:b8:09:cc:41:d8:cf:d6:ce:
a7:50:c2:68:ab:6a:e1:f6:8d:48:4f:db:a7:02:9d:
65:6c:ed:25:d3:23:ad:17:cd:87:f7:c8:61:02:0b:
45:6f:f3:77:0a:a2:cf:07:16:0b:2c:01:5b:60:40:
72:5f:dc:1c:b7:df:9b:5c:88:05:35:e1:9d:96:53:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EA:5C:C8:57:A0:92:7D:C1:1C:D3:8D:99:05:D0:F8:C7:3E:40:73
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d3:c7:91:f1:02:f5:18:ad:0c:66:9f:f7:3a:14:6e:9d:fb:
64:cb:05:a6:a3:8d:1a:6f:76:e4:a1:e8:74:4f:c9:a4:84:ac:
09:0c:49:8e:cc:ac:4f:da:a7:58:eb:b0:08:59:93:19:1e:2c:
52:d6:cc:51:ac:59:ff:c7:dc:33:25:3e:fb:f9:dc:72:93:11:
e9:80:35:e5:60:59:bc:90:15:50:a5:4e:9f:2d:5a:3c:1e:e9:
d0:27:1b:ce:70:e7:de:d7:df:ff:59:1b:c1:7f:bd:17:fe:e7:
50:f9:f0:d9:dc:d6:22:46:40:e2:68:66:cc:e6:36:ea:1a:13:
58:20:b5:74:3d:63:07:70:04:b7:f9:dc:fd:09:78:91:98:92:
30:2d:a4:e0:64:6a:b1:1c:61:6d:39:07:fd:51:2e:7d:88:ab:
88:4d:e2:40:df:4e:11:a9:59:45:c2:62:23:5a:fc:53:af:0a:
6f:c5:8c:0d:f2:a5:b7:49:5e:b1:86:66:60:18:3a:0e:46:d8:
36:f3:de:15:6f:f9:aa:89:67:f5:f4:75:cb:eb:f4:3e:22:80:
f9:c4:d2:29:45:11:0c:80:3d:80:1b:bb:a4:7b:bb:7d:e7:05:
b1:c8:0d:75:a4:ac:2f:26:da:5d:7f:5b:fd:bf:24:19:0e:96:
d1:4a:f3:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd40+PzSJDeAeI4+ykT23DcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmRlNzJiZjVhMDBiZGVjNGQxZWZkZDdkMDIwMjllZTc5
ZTQ3MjAwHhcNMjUwNjE2MTMwMDQxWhcNMjUwNjE3MTMwMDQxWjAzMTEwLwYDVQQD
Eyg2OWVhNWNjODU3YTA5MjdkYzExY2QzOGQ5OTA1ZDBmOGM3M2U0MDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3chQ/66mhzQH6Y48XueADS+fGItX
OpONja8S0yMipP1WRJeG5WVnDU8b2SdF2LFfNPRyZnuYGAN0aVsixe1jsbF5gbej
lVQbcPJkjic98R83RaKZoEBwaqhyAq5S7dhgXodny2vIpoIA2O+JUvqvHkJ5manO
oWLc9VR3FWzDeDyQjeMAONJqJiOuLu0ZXZufE7cGp+tHhbGrNj6Bd6v9BlXTgok5
7Qw78irbNt69UMY3Q04vjBrPixhOuAnMQdjP1s6nUMJoq2rh9o1IT9unAp1lbO0l
0yOtF82H98hhAgtFb/N3CqLPBxYLLAFbYEByX9wct9+bXIgFNeGdllMD3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnqXMhXoJJ9wRzTjZkF0PjHPkBzMB8GA1UdIwQY
MBaAFPX95yv1oAvexNHv3X0CAp7nnkcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWYzbktfV2dDOTdFMGVfZGZRSUNudWVlUnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNGMyZTQtNGU5Yi00ODQ3LWE4ZWYt
MDgzOGY3OGMwMjU5LzEvOWYzbktfV2dDOTdFMGVfZGZRSUNudWVlUnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zNGMyZTQtNGU5Yi00ODQ3LWE4ZWYtMDgzOGY3OGMwMjU5
LzEvOWYzbktfV2dDOTdFMGVfZGZRSUNudWVlUnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9PHkfEC
9RitDGaf9zoUbp37ZMsFpqONGm925KHodE/JpISsCQxJjsysT9qnWOuwCFmTGR4s
UtbMUaxZ/8fcMyU++/nccpMR6YA15WBZvJAVUKVOny1aPB7p0CcbznDn3tff/1kb
wX+9F/7nUPnw2dzWIkZA4mhmzOY26hoTWCC1dD1jB3AEt/nc/Ql4kZiSMC2k4GRq
sRxhbTkH/VEufYiriE3iQN9OEalZRcJiI1r8U68Kb8WMDfKlt0lesYZmYBg6DkbY
NvPeFW/5qoln9fR1y+v0PiKA+cTSKUURDIA9gBu7pHu7fecFscgNdaSsLybaXX9b
/b8kGQ6W0UrzPg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:30:22 2025 by rpki-client