Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json)
Hash identifier: k0Adq2YbAX6uK1wXRBvsDkcRXvTLywj1B/6VEs5OYvM=
Subject key identifier: 3C:6A:A6:FE:3D:9B:2C:7D:CF:98:1E:98:F3:59:8C:2F:65:52:9D:72
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial: 01978C23F1D939B74D63002B7DFB917CD387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
Manifest number: 15A1
Signing time: Fri 20 Jun 2025 07:00:55 +0000
Manifest this update: Fri 20 Jun 2025 07:00:55 +0000
Manifest next update: Sat 21 Jun 2025 07:00:55 +0000
Files and hashes: 1: d_f-2basXF4ecUjEUuL7_QGvdV8.roa (hash: 3qi4PJf12FWilDaOg+5R4nsdnVGnK/XQkSLQfanFNGo=)
2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: 2Oebq8IjjS3KlbcY8AMco2tzDXdWqs8xazbc7CRd+8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:23:f1:d9:39:b7:4d:63:00:2b:7d:fb:91:7c:d3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
Validity
Not Before: Jun 20 07:00:55 2025 GMT
Not After : Jun 21 07:00:55 2025 GMT
Subject: CN=3c6aa6fe3d9b2c7dcf981e98f3598c2f65529d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:0e:47:1d:38:a5:38:39:c6:ff:d3:09:bd:
ae:b7:0a:2c:c8:33:ff:54:8a:af:6e:b4:17:d7:e9:
70:92:ec:1b:b0:4c:e3:f9:2c:9c:f3:03:ce:5f:3f:
88:59:f0:51:9f:38:51:f9:93:fd:f1:5f:5d:3b:91:
15:65:ff:0e:08:70:7a:63:54:97:d8:19:59:f2:1c:
e2:2d:6e:16:13:04:99:20:62:93:ce:f0:53:f1:1e:
fa:c0:56:23:35:e1:42:20:2c:ef:85:39:bb:8a:3d:
d7:7c:3b:7b:bb:51:eb:f8:06:17:e7:4b:66:ef:35:
27:af:8c:f2:39:25:39:05:90:ae:a4:52:8e:a9:55:
70:38:1b:96:e5:09:33:a1:59:97:3a:c4:47:b2:16:
f7:6d:19:1a:34:70:6e:c2:e2:3c:05:22:62:7f:a4:
53:b7:f0:c5:b1:6e:14:1a:51:1c:6f:5c:25:cc:f1:
65:e2:3a:c3:48:99:26:3b:76:4d:44:0b:d5:74:30:
af:3c:19:50:ae:12:43:54:78:5f:83:f1:5f:9c:d1:
d5:e5:a5:0f:fe:bc:f8:ec:18:8c:05:76:c0:68:2b:
30:b1:a4:1a:32:7e:16:8c:c2:6c:ff:b1:c6:04:80:
f0:e1:41:bc:65:04:bc:ad:4b:15:64:f2:1c:e6:70:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6A:A6:FE:3D:9B:2C:7D:CF:98:1E:98:F3:59:8C:2F:65:52:9D:72
X509v3 Authority Key Identifier:
keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:49:dc:77:e1:49:0a:3f:34:e8:0c:46:21:0f:64:07:8d:b2:
39:08:7c:f1:32:19:7b:bd:56:3d:47:2f:fa:f5:b5:c6:e1:29:
a3:8c:e1:b6:af:be:2b:2a:70:b6:a6:ca:57:e7:ba:5b:58:8a:
22:ba:9e:90:e1:fe:e0:71:8b:70:48:f1:a4:60:2d:d2:27:da:
7c:26:c0:da:ea:a4:71:77:fd:b1:f3:7c:f1:16:3e:23:fd:c2:
ad:f9:96:1b:48:5e:2a:59:d3:a1:dc:ad:92:35:7f:7c:d2:18:
66:60:24:94:ee:db:06:8f:04:a5:bd:72:a9:34:e3:6b:a7:f6:
3a:ca:23:85:68:94:45:4c:b1:4d:52:e3:a8:15:89:80:56:c6:
b6:cb:4b:2a:7a:4e:5b:e0:9a:06:45:a1:bf:4b:ab:6b:47:f6:
b5:60:72:c2:dc:de:39:34:74:58:7c:89:a8:77:83:75:01:c9:
e7:09:d4:13:7b:e1:84:47:f8:06:68:e4:79:be:82:d0:16:35:
eb:2e:77:5e:dd:e8:d0:9a:f1:86:c8:4f:9b:e9:59:90:82:0b:
70:6c:6e:cd:b2:70:95:fb:6a:e2:b4:bb:8c:ee:04:ae:2c:ca:
6c:74:7e:e7:84:e3:6f:7f:0f:55:f4:e8:57:8c:bd:cc:3a:ff:
38:3d:5a:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeMI/HZObdNYwArffuRfNOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZDQzZDQ5OTg2ODA5MWJiZGM0N2Q5NWFlZTFjOTA5OWYw
MDU2MjAwHhcNMjUwNjIwMDcwMDU1WhcNMjUwNjIxMDcwMDU1WjAzMTEwLwYDVQQD
EygzYzZhYTZmZTNkOWIyYzdkY2Y5ODFlOThmMzU5OGMyZjY1NTI5ZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN0ORx04pTg5xv/TCb2utwosyDP/
VIqvbrQX1+lwkuwbsEzj+Syc8wPOXz+IWfBRnzhR+ZP98V9dO5EVZf8OCHB6Y1SX
2BlZ8hziLW4WEwSZIGKTzvBT8R76wFYjNeFCICzvhTm7ij3XfDt7u1Hr+AYX50tm
7zUnr4zyOSU5BZCupFKOqVVwOBuW5QkzoVmXOsRHshb3bRkaNHBuwuI8BSJif6RT
t/DFsW4UGlEcb1wlzPFl4jrDSJkmO3ZNRAvVdDCvPBlQrhJDVHhfg/FfnNHV5aUP
/rz47BiMBXbAaCswsaQaMn4WjMJs/7HGBIDw4UG8ZQS8rUsVZPIc5nCwWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxqpv49myx9z5gemPNZjC9lUp1yMB8GA1UdIwQY
MBaAFJPUPUmYaAkbvcR9la7hyQmfAFYgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82YjA4YzItNWMzYS00Mjg4LTg0NGIt
N2ZlNDJmZjRkY2Q4LzEvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82YjA4YzItNWMzYS00Mjg4LTg0NGItN2ZlNDJmZjRkY2Q4
LzEvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEncd+FJ
Cj806AxGIQ9kB42yOQh88TIZe71WPUcv+vW1xuEpo4zhtq++KypwtqbKV+e6W1iK
IrqekOH+4HGLcEjxpGAt0ifafCbA2uqkcXf9sfN88RY+I/3CrfmWG0heKlnTodyt
kjV/fNIYZmAklO7bBo8Epb1yqTTja6f2OsojhWiURUyxTVLjqBWJgFbGtstLKnpO
W+CaBkWhv0ura0f2tWBywtzeOTR0WHyJqHeDdQHJ5wnUE3vhhEf4Bmjkeb6C0BY1
6y53Xt3o0JrxhshPm+lZkIILcGxuzbJwlftq4rS7jO4ErizKbHR+54Tjb38PVfTo
V4y9zDr/OD1aqA==
-----END CERTIFICATE-----
Generated at Fri Jun 20 08:55:57 2025 by rpki-client