Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
File: 9rLInTH2F1Fqhgp4IrumgkinaaA.mft (raw, json)
Hash identifier: GMhnhzfTKNyMJq2osrhFvwRWDVXjf9gFWdLLH+XGjDc=
Subject key identifier: 64:A8:A7:01:F1:D2:C8:B4:ED:4A:A4:F3:49:33:7C:4F:B1:94:1C:EA
Authority key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
Certificate issuer: /CN=f6b2c89d31f617516a860a7822bba68248a769a0
Certificate serial: 01987F78F4227ECCBC7F0B5092C2B7913ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
Manifest number: 080B
Signing time: Wed 06 Aug 2025 13:01:29 +0000
Manifest this update: Wed 06 Aug 2025 13:01:29 +0000
Manifest next update: Thu 07 Aug 2025 13:01:29 +0000
Files and hashes: 1: 0iYjHA4kyW6qTATWGW_TDJUOsEk.roa (hash: EaJ38giyluinl93rwFdYFKbOjiJmuj1tUHU09V9bmYM=)
2: 9rLInTH2F1Fqhgp4IrumgkinaaA.crl (hash: JLQqgFjTs/xfb5z4++BJMsV11/3urCdDEijtJmPsrz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:f4:22:7e:cc:bc:7f:0b:50:92:c2:b7:91:3a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b2c89d31f617516a860a7822bba68248a769a0
Validity
Not Before: Aug 6 13:01:29 2025 GMT
Not After : Aug 7 13:01:29 2025 GMT
Subject: CN=64a8a701f1d2c8b4ed4aa4f349337c4fb1941cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:3e:6f:3c:b4:50:17:f9:6f:db:00:a7:7a:
93:a3:c5:dd:d0:bc:37:1b:ba:0a:df:0a:22:98:d6:
3e:8d:e9:07:fa:38:90:ee:b1:d2:e7:eb:c7:24:80:
58:3b:91:21:30:c3:d2:43:55:4e:8a:e6:4a:4a:93:
5d:71:09:5e:2d:dc:82:20:3b:30:70:5c:f5:52:c2:
7c:b2:03:18:c2:de:57:af:c9:d3:8f:83:d4:d3:ad:
3d:9a:1b:dc:f0:14:1a:7c:16:92:21:d9:68:bc:30:
11:6b:28:af:3d:a7:ab:62:f0:f9:24:f2:e9:08:b8:
53:f7:6b:60:26:99:9f:0a:7c:be:58:32:56:a5:fd:
bc:29:a9:f3:67:92:2a:3b:0d:8f:ee:f5:c4:4e:1c:
ff:81:e6:ca:af:e8:27:54:69:46:74:37:3b:2b:3b:
f6:f6:db:b2:28:24:1f:a5:76:0f:d2:08:09:2c:e5:
09:10:69:3f:40:b1:98:d4:f7:07:19:1d:a1:f1:01:
e5:a7:10:94:f3:ff:83:28:38:d9:31:52:45:1b:f8:
2a:8e:c3:3f:1e:1f:41:10:d1:12:f0:14:e1:2d:b2:
eb:b1:78:cc:ee:5a:e7:d5:0a:5a:da:c2:28:29:d7:
6b:d7:c8:59:71:ab:10:22:f1:01:a2:8d:f9:33:ad:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A8:A7:01:F1:D2:C8:B4:ED:4A:A4:F3:49:33:7C:4F:B1:94:1C:EA
X509v3 Authority Key Identifier:
keyid:F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:4c:f8:35:aa:6e:00:6b:00:5a:3a:fd:2d:12:61:a5:2c:c8:
7e:3d:a1:84:ba:fb:e7:1d:3e:c4:d5:c8:45:55:17:98:0a:22:
e1:57:45:44:80:23:7d:3f:8b:c9:d6:bd:d6:7b:53:8e:cb:7c:
ad:44:e5:73:19:13:60:a0:99:ec:63:1a:b9:95:7c:bf:bf:82:
23:81:43:f8:09:88:67:0c:f8:7e:d5:31:22:43:ff:f8:25:fe:
54:82:03:f5:48:71:83:1e:a1:ac:01:2b:e7:0d:4d:3d:c7:3c:
b7:10:c9:49:dc:28:62:d9:45:6a:1a:d4:de:96:62:49:73:99:
95:3b:18:66:e9:e9:23:f8:d6:1f:b8:7a:8b:9c:c6:3b:49:f0:
82:f4:86:59:3d:95:c6:4f:70:38:91:cf:aa:2b:3d:ff:ff:57:
f3:57:7a:52:5b:b3:b3:0f:ce:54:b3:76:a1:fe:ce:7e:31:62:
79:03:c6:62:5c:1b:97:6b:0b:a2:57:37:b0:d7:ec:ec:ff:30:
03:8b:1d:7c:e4:8d:a9:1b:72:fa:53:b1:dc:4d:94:4f:5c:50:
a2:4f:ba:4d:12:f1:d1:e6:0a:be:ba:10:5d:e3:5e:9e:f7:06:
88:8b:57:2f:62:de:2c:bd:4e:ff:f0:00:20:c0:4a:82:cb:45:
d7:a8:cf:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/ePQifsy8fwtQksK3kTq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjJjODlkMzFmNjE3NTE2YTg2MGE3ODIyYmJhNjgyNDhh
NzY5YTAwHhcNMjUwODA2MTMwMTI5WhcNMjUwODA3MTMwMTI5WjAzMTEwLwYDVQQD
Eyg2NGE4YTcwMWYxZDJjOGI0ZWQ0YWE0ZjM0OTMzN2M0ZmIxOTQxY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAQ+bzy0UBf5b9sAp3qTo8Xd0Lw3
G7oK3woimNY+jekH+jiQ7rHS5+vHJIBYO5EhMMPSQ1VOiuZKSpNdcQleLdyCIDsw
cFz1UsJ8sgMYwt5Xr8nTj4PU0609mhvc8BQafBaSIdlovDARayivPaerYvD5JPLp
CLhT92tgJpmfCny+WDJWpf28KanzZ5IqOw2P7vXEThz/gebKr+gnVGlGdDc7Kzv2
9tuyKCQfpXYP0ggJLOUJEGk/QLGY1PcHGR2h8QHlpxCU8/+DKDjZMVJFG/gqjsM/
Hh9BENES8BThLbLrsXjM7lrn1Qpa2sIoKddr18hZcasQIvEBoo35M60yTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSopwHx0si07Uqk80kzfE+xlBzqMB8GA1UdIwQY
MBaAFPayyJ0x9hdRaoYKeCK7poJIp2mgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJMSW5USDJGMUZxaGdwNElydW1na2luYWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MTdiZDYtOGJkMy00YzI4LTgyNWYt
MTQ3NWQyMmRjMTYyLzEvOXJMSW5USDJGMUZxaGdwNElydW1na2luYWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85MTdiZDYtOGJkMy00YzI4LTgyNWYtMTQ3NWQyMmRjMTYy
LzEvOXJMSW5USDJGMUZxaGdwNElydW1na2luYWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUz4Napu
AGsAWjr9LRJhpSzIfj2hhLr75x0+xNXIRVUXmAoi4VdFRIAjfT+Lyda91ntTjst8
rUTlcxkTYKCZ7GMauZV8v7+CI4FD+AmIZwz4ftUxIkP/+CX+VIID9Uhxgx6hrAEr
5w1NPcc8txDJSdwoYtlFahrU3pZiSXOZlTsYZunpI/jWH7h6i5zGO0nwgvSGWT2V
xk9wOJHPqis9//9X81d6Uluzsw/OVLN2of7OfjFieQPGYlwbl2sLolc3sNfs7P8w
A4sdfOSNqRty+lOx3E2UT1xQok+6TRLx0eYKvroQXeNenvcGiItXL2LeLL1O//AA
IMBKgstF16jPIQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:24:24 2025 by rpki-client