Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
File: 9aKrEck1CB9eSaaFyDl49vc9TaE.mft (raw, json)
Hash identifier: /NIi+aJnYXq93vqSVnP8FVrO/2zzfjsJsV8E35nvOpc=
Subject key identifier: 47:3B:53:1D:68:B4:ED:1B:E8:26:48:AE:FD:2A:FA:64:C8:35:83:99
Authority key identifier: F5:A2:AB:11:C9:35:08:1F:5E:49:A6:85:C8:39:78:F6:F7:3D:4D:A1
Certificate issuer: /CN=f5a2ab11c935081f5e49a685c83978f6f73d4da1
Certificate serial: 0197786600B053EB9DC1419D562111DEBD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
Manifest number: 02E2
Signing time: Mon 16 Jun 2025 11:00:40 +0000
Manifest this update: Mon 16 Jun 2025 11:00:40 +0000
Manifest next update: Tue 17 Jun 2025 11:00:40 +0000
Files and hashes: 1: 9aKrEck1CB9eSaaFyDl49vc9TaE.crl (hash: HW5AYYQBzjN17g2cz2eAxA5V+tZrlULKNlPLgeW7G4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:00:b0:53:eb:9d:c1:41:9d:56:21:11:de:bd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a2ab11c935081f5e49a685c83978f6f73d4da1
Validity
Not Before: Jun 16 11:00:40 2025 GMT
Not After : Jun 17 11:00:40 2025 GMT
Subject: CN=473b531d68b4ed1be82648aefd2afa64c8358399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:e3:42:37:18:21:5c:1c:98:7e:8d:0c:67:
6d:86:7e:ed:b6:1c:1e:c2:99:e1:2c:a0:83:b5:8e:
67:fe:bb:fd:5f:30:23:c0:ad:66:cc:27:a7:a8:50:
84:46:f2:c2:f4:62:c4:bb:27:99:31:54:61:fa:61:
91:3c:0f:5d:ee:5c:3c:3a:7b:79:0a:3a:80:52:8e:
51:6f:82:32:8c:65:d5:14:77:85:3e:c8:d8:67:cd:
52:33:36:5e:0a:b2:b5:4f:25:c6:27:c3:38:29:a9:
30:e6:3e:6c:22:55:72:00:7f:b4:41:79:a6:2b:79:
f4:13:8c:4c:c3:98:09:d5:e1:1f:5d:46:14:f1:91:
75:a7:b7:9a:0f:46:0b:2d:f9:7b:fd:00:f8:dc:f8:
4d:74:df:8d:4c:ba:8a:ba:89:54:f4:74:cb:bf:0d:
2b:44:e1:80:d7:67:84:e3:58:37:0a:d6:eb:d3:77:
e7:58:cf:ab:9e:58:a7:68:14:cc:43:68:fc:bf:94:
98:24:21:b5:b6:09:60:c3:15:39:8f:18:ab:d1:cc:
64:27:f1:1a:2d:95:ce:b1:0f:96:63:07:6e:dc:4d:
24:c0:97:5d:e4:cd:03:d2:25:b8:e4:71:51:b0:95:
e6:89:e7:3c:d5:8f:88:14:b9:1e:16:6e:4e:39:25:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3B:53:1D:68:B4:ED:1B:E8:26:48:AE:FD:2A:FA:64:C8:35:83:99
X509v3 Authority Key Identifier:
keyid:F5:A2:AB:11:C9:35:08:1F:5E:49:A6:85:C8:39:78:F6:F7:3D:4D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKrEck1CB9eSaaFyDl49vc9TaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d78bb4-568a-4545-b210-53ab86595fc0/1/9aKrEck1CB9eSaaFyDl49vc9TaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4d:01:c5:74:9e:3a:14:b8:4f:8a:24:4e:06:6e:64:78:49:
f0:2d:e5:63:e3:fb:9a:5b:47:dd:f1:6d:69:f2:7d:bb:ae:54:
20:ca:72:4b:a3:33:a2:7b:56:00:82:2d:be:de:94:e0:5a:be:
2c:4d:17:b7:52:b5:c1:9f:35:22:c9:34:21:9c:22:8d:cf:d6:
11:39:87:8d:a8:3c:10:cb:b2:b7:fc:fc:3d:9a:5f:10:82:b2:
89:7e:9d:86:b4:32:e2:9b:dd:d9:e1:18:85:d1:f4:f2:31:0e:
c8:4e:43:16:25:ac:cc:8e:02:f6:f1:b7:53:46:44:01:03:a9:
fe:d0:29:35:df:c6:64:31:d1:e5:17:76:40:31:31:b2:00:30:
3d:13:56:d6:3e:1a:5a:39:e7:19:81:14:ef:77:a6:ae:35:4f:
05:37:ed:53:a8:4e:25:cd:9b:b6:bb:a2:25:4b:ae:1b:53:19:
49:74:e3:6c:da:61:fc:85:ac:56:cf:21:31:c3:d4:17:d5:5a:
ac:64:10:9b:14:bd:b0:1d:d0:b4:af:a0:c8:fe:e7:18:c3:68:
26:9a:b3:47:ed:6e:c4:8a:60:32:58:25:c0:78:64:18:91:0b:
51:d0:6e:a3:f7:d3:fd:7a:15:3f:65:c1:be:3e:26:ab:5a:f9:
5d:c4:07:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd4ZgCwU+udwUGdViER3r1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YTJhYjExYzkzNTA4MWY1ZTQ5YTY4NWM4Mzk3OGY2Zjcz
ZDRkYTEwHhcNMjUwNjE2MTEwMDQwWhcNMjUwNjE3MTEwMDQwWjAzMTEwLwYDVQQD
Eyg0NzNiNTMxZDY4YjRlZDFiZTgyNjQ4YWVmZDJhZmE2NGM4MzU4Mzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4LjQjcYIVwcmH6NDGdthn7tthwe
wpnhLKCDtY5n/rv9XzAjwK1mzCenqFCERvLC9GLEuyeZMVRh+mGRPA9d7lw8Ont5
CjqAUo5Rb4IyjGXVFHeFPsjYZ81SMzZeCrK1TyXGJ8M4Kakw5j5sIlVyAH+0QXmm
K3n0E4xMw5gJ1eEfXUYU8ZF1p7eaD0YLLfl7/QD43PhNdN+NTLqKuolU9HTLvw0r
ROGA12eE41g3Ctbr03fnWM+rnlinaBTMQ2j8v5SYJCG1tglgwxU5jxir0cxkJ/Ea
LZXOsQ+WYwdu3E0kwJdd5M0D0iW45HFRsJXmiec81Y+IFLkeFm5OOSUOZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEc7Ux1otO0b6CZIrv0q+mTINYOZMB8GA1UdIwQY
MBaAFPWiqxHJNQgfXkmmhcg5ePb3PU2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWFLckVjazFDQjllU2FhRnlEbDQ5dmM5VGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kNzhiYjQtNTY4YS00NTQ1LWIyMTAt
NTNhYjg2NTk1ZmMwLzEvOWFLckVjazFDQjllU2FhRnlEbDQ5dmM5VGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kNzhiYjQtNTY4YS00NTQ1LWIyMTAtNTNhYjg2NTk1ZmMw
LzEvOWFLckVjazFDQjllU2FhRnlEbDQ5dmM5VGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQE0BxXSe
OhS4T4okTgZuZHhJ8C3lY+P7mltH3fFtafJ9u65UIMpyS6MzontWAIItvt6U4Fq+
LE0Xt1K1wZ81Isk0IZwijc/WETmHjag8EMuyt/z8PZpfEIKyiX6dhrQy4pvd2eEY
hdH08jEOyE5DFiWszI4C9vG3U0ZEAQOp/tApNd/GZDHR5Rd2QDExsgAwPRNW1j4a
WjnnGYEU73emrjVPBTftU6hOJc2btruiJUuuG1MZSXTjbNph/IWsVs8hMcPUF9Va
rGQQmxS9sB3QtK+gyP7nGMNoJpqzR+1uxIpgMlglwHhkGJELUdBuo/fT/XoVP2XB
vj4mq1r5XcQH3g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:40:59 2025 by rpki-client