Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier: pEqDIAivepOdZ24pYrhwQyos1yxFXaZsY8MztXnMSas=
Subject key identifier: 13:4A:AA:39:63:45:44:EB:C1:1D:DC:E5:15:45:0A:54:3D:D7:EC:CE
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial: 0197748920A4E01A09C9528E739FBDF0D074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number: 12D7
Signing time: Sun 15 Jun 2025 17:00:33 +0000
Manifest this update: Sun 15 Jun 2025 17:00:33 +0000
Manifest next update: Mon 16 Jun 2025 17:00:33 +0000
Files and hashes: 1: 4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa (hash: sDrnXJKsdAbmdaesDlUsR31uPE7GfMdA3txIVC37ks4=)
2: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: K8Q0tW8h0TQUIhGZnzb3i40MlpOAXy9XCnZzFvqLJJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:20:a4:e0:1a:09:c9:52:8e:73:9f:bd:f0:d0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Validity
Not Before: Jun 15 17:00:33 2025 GMT
Not After : Jun 16 17:00:33 2025 GMT
Subject: CN=134aaa39634544ebc11ddce515450a543dd7ecce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:7b:9d:8a:2b:a3:3d:81:59:a9:95:65:6a:
6a:b1:18:ef:b2:95:d4:74:18:e1:68:10:18:52:d7:
6b:29:be:4b:80:01:91:f0:a5:d8:10:2c:d2:0e:85:
60:be:56:83:2b:01:90:41:d6:07:ab:80:e6:c0:39:
8c:85:b5:a4:d3:c1:ee:9c:19:a6:63:0e:dc:3c:62:
e7:09:8e:4b:8e:b4:aa:79:9b:6c:86:ca:74:8e:19:
1d:3f:a9:91:4e:09:8c:33:7c:12:61:fd:7d:e4:3a:
fc:0e:0e:17:f5:19:7e:14:15:b8:2c:37:9a:bf:98:
d7:5e:52:8a:e8:c6:05:f8:3e:6d:35:97:f7:ad:94:
ef:ab:a8:50:04:96:0a:a1:c7:fa:18:8f:d2:94:90:
d9:f1:13:ed:39:24:9b:d5:f1:4f:08:40:d1:6c:2b:
0e:da:da:75:4b:9f:f5:69:3a:97:37:41:58:5f:43:
bb:46:29:b0:72:88:19:df:34:24:c5:14:13:85:3c:
87:49:20:7c:04:db:6a:d1:da:94:50:c2:0a:d5:0f:
73:18:4f:58:c8:00:01:c0:fc:56:dd:c2:55:6b:a8:
15:eb:8d:69:3d:55:9b:58:08:ff:20:d6:31:d4:dd:
ab:09:8d:02:6c:24:59:c9:bc:12:dc:cb:9c:d9:6c:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4A:AA:39:63:45:44:EB:C1:1D:DC:E5:15:45:0A:54:3D:D7:EC:CE
X509v3 Authority Key Identifier:
keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:92:00:ab:49:d0:db:78:1b:f0:bb:6b:d8:dc:2e:17:25:ec:
96:ae:1f:76:14:48:21:24:ec:4d:e6:50:d3:33:18:57:aa:40:
3c:8c:5e:b9:03:29:8d:17:3e:81:c7:59:e9:f7:6e:fa:74:5d:
01:4f:ca:67:7f:d0:a4:25:e4:7a:61:da:02:d1:c1:b5:cf:ed:
b7:da:7d:7e:f9:b9:7c:c2:e2:43:be:51:ae:a2:ec:40:aa:5c:
9b:cd:bb:d6:3c:a2:da:a3:8a:3b:07:6f:1e:31:64:c3:6d:cc:
07:33:23:99:ad:c1:ef:c7:06:88:15:f8:22:df:1b:0b:60:51:
4b:82:96:b1:0f:7d:76:e0:71:8c:b9:8d:90:c8:a3:14:97:d4:
dc:32:b4:9a:ed:4f:0b:c1:d0:36:69:5b:df:45:79:20:26:a2:
ea:2a:0f:30:21:fb:04:68:96:57:f4:13:63:b1:e6:96:24:2a:
ef:98:de:25:96:57:7d:0d:60:4e:6f:1e:06:0f:0d:95:4f:45:
10:d6:53:e6:f0:4d:9c:82:30:36:21:b7:fc:4f:f9:43:d9:6b:
4b:c5:2e:04:9d:b3:b8:d8:82:45:7a:8b:75:d1:7a:61:35:ce:
c6:2d:88:00:93:dc:de:fb:3c:c8:88:9e:0b:73:5b:48:57:f4:
f5:5b:55:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0iSCk4BoJyVKOc5+98NB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDAyNGFkZTVlNDgwMmMwYTJmNjFlNmY4MGY0ZDIyZGMx
NTQ4NTMwHhcNMjUwNjE1MTcwMDMzWhcNMjUwNjE2MTcwMDMzWjAzMTEwLwYDVQQD
EygxMzRhYWEzOTYzNDU0NGViYzExZGRjZTUxNTQ1MGE1NDNkZDdlY2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBt7nYoroz2BWamVZWpqsRjvspXU
dBjhaBAYUtdrKb5LgAGR8KXYECzSDoVgvlaDKwGQQdYHq4DmwDmMhbWk08HunBmm
Yw7cPGLnCY5LjrSqeZtshsp0jhkdP6mRTgmMM3wSYf195Dr8Dg4X9Rl+FBW4LDea
v5jXXlKK6MYF+D5tNZf3rZTvq6hQBJYKocf6GI/SlJDZ8RPtOSSb1fFPCEDRbCsO
2tp1S5/1aTqXN0FYX0O7RimwcogZ3zQkxRQThTyHSSB8BNtq0dqUUMIK1Q9zGE9Y
yAABwPxW3cJVa6gV641pPVWbWAj/INYx1N2rCY0CbCRZybwS3Muc2WwByQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNKqjljRUTrwR3c5RVFClQ91+zOMB8GA1UdIwQY
MBaAFPRAJK3l5IAsCi9h5vgPTSLcFUhTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVBa3JlWGtnQ3dLTDJIbS1BOU5JdHdWU0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82NzliNGQtZmEzZC00OTkzLWExOGEt
NjNjOWM4NGVjNzRmLzEvOUVBa3JlWGtnQ3dLTDJIbS1BOU5JdHdWU0ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82NzliNGQtZmEzZC00OTkzLWExOGEtNjNjOWM4NGVjNzRm
LzEvOUVBa3JlWGtnQ3dLTDJIbS1BOU5JdHdWU0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZIAq0nQ
23gb8Ltr2NwuFyXslq4fdhRIISTsTeZQ0zMYV6pAPIxeuQMpjRc+gcdZ6fdu+nRd
AU/KZ3/QpCXkemHaAtHBtc/tt9p9fvm5fMLiQ75RrqLsQKpcm8271jyi2qOKOwdv
HjFkw23MBzMjma3B78cGiBX4It8bC2BRS4KWsQ99duBxjLmNkMijFJfU3DK0mu1P
C8HQNmlb30V5ICai6ioPMCH7BGiWV/QTY7HmliQq75jeJZZXfQ1gTm8eBg8NlU9F
ENZT5vBNnIIwNiG3/E/5Q9lrS8UuBJ2zuNiCRXqLddF6YTXOxi2IAJPc3vs8yIie
C3NbSFf09VtV5w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:27:29 2025 by rpki-client