Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: kTjnakajj34khTwEhEvprSHXY6dVV8TidDGNcVVcJ0I=
Subject key identifier: 6B:F2:22:94:00:23:6F:40:8A:D4:D6:F1:30:AE:02:9F:03:23:F8:06
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 019896A53E5D8393A01FA2BFAF00059DC579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 1625
Signing time: Mon 11 Aug 2025 01:01:08 +0000
Manifest this update: Mon 11 Aug 2025 01:01:08 +0000
Manifest next update: Tue 12 Aug 2025 01:01:08 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: 2Zc/pB4mVzd8qTOmzWJ0+bA9I+bihc/fiwj6qohQeY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:3e:5d:83:93:a0:1f:a2:bf:af:00:05:9d:c5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Aug 11 01:01:08 2025 GMT
Not After : Aug 12 01:01:08 2025 GMT
Subject: CN=6bf2229400236f408ad4d6f130ae029f0323f806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3b:26:3f:2e:d9:c4:db:1d:69:8a:58:3e:8e:
63:c1:63:a3:35:af:9e:de:cc:54:02:63:ce:67:dc:
e5:57:07:d8:b4:35:e5:42:05:5f:85:c2:1c:89:ec:
43:ff:3e:f3:06:aa:f5:a4:d6:0d:1a:87:78:80:94:
ab:16:16:10:12:2b:d8:99:fa:09:5a:f3:4d:7a:09:
94:de:d5:f6:15:47:0b:c9:fc:bb:67:d6:5b:64:55:
9b:6a:94:24:d7:be:47:94:a4:d1:f5:e1:f0:1e:2c:
8e:87:2e:f2:fd:56:e6:62:e0:6a:ba:d5:0c:ec:ec:
c8:89:98:7a:f5:5e:ce:d7:8a:06:9f:6d:3d:60:cb:
46:76:03:38:56:8c:60:31:56:81:c7:c1:28:be:4d:
d5:c5:61:b9:93:66:0d:a6:7e:c9:53:5b:6a:91:84:
cd:64:ab:09:c6:79:a1:7c:7e:30:12:b2:9e:53:38:
4e:ee:d1:bc:6c:9b:48:35:fd:1b:37:07:4e:b4:92:
81:c5:62:d0:67:47:92:e7:ff:88:02:1b:0d:37:07:
a4:35:f9:d8:0d:ed:0e:69:ff:2f:34:a7:bd:4b:ae:
f0:d5:b7:32:c0:a3:a0:74:91:2a:99:d2:6e:8f:e8:
71:93:2e:f1:51:5c:9a:82:af:eb:b8:fe:03:df:47:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F2:22:94:00:23:6F:40:8A:D4:D6:F1:30:AE:02:9F:03:23:F8:06
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a4:21:a0:a5:17:b9:ec:7f:0c:c4:dc:3c:9d:c5:69:ce:fa:
ee:a4:b2:7a:63:c0:40:4c:dc:d0:79:ab:69:c5:d5:23:9d:bc:
03:4e:44:ce:b2:f5:35:9c:39:00:39:d6:0c:58:15:8e:8f:25:
cf:9b:28:ea:9d:d1:6f:ff:00:36:60:b3:0c:0e:8e:ab:4b:79:
53:88:96:07:30:9f:bc:91:bb:8f:ea:2e:d9:7d:ed:18:48:2d:
fa:6c:e8:11:a0:cb:d7:04:11:e0:55:34:a0:45:25:c8:22:cc:
0d:31:3a:fb:16:16:25:39:e7:87:58:df:01:2d:ea:42:7c:8d:
43:e2:7b:74:f1:b6:99:21:69:87:50:d0:68:d5:04:95:c3:88:
98:f4:fd:dc:8d:ac:b6:28:39:71:36:d2:e3:26:d6:37:67:51:
8c:36:22:73:7a:dc:96:af:eb:b7:bd:e5:96:86:11:74:af:f6:
86:d0:28:37:a2:1d:a0:df:f5:b8:6d:69:d6:f2:64:98:9b:91:
9a:bc:d8:a0:2e:e7:6b:24:33:c4:4f:0a:58:7c:58:29:f7:5c:
d2:89:70:89:7a:82:7f:f8:2f:84:4a:44:ab:b1:e4:02:b0:9d:
ee:37:5b:5e:a7:6e:0a:19:ce:c8:19:71:49:94:17:2c:cc:93:
4a:f6:6f:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpT5dg5OgH6K/rwAFncV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmY0MTU5MTIwYWE1MWJiMWNkZjExNmQwNmE0ZmMwMjky
ZmY5NmMwHhcNMjUwODExMDEwMTA4WhcNMjUwODEyMDEwMTA4WjAzMTEwLwYDVQQD
Eyg2YmYyMjI5NDAwMjM2ZjQwOGFkNGQ2ZjEzMGFlMDI5ZjAzMjNmODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDsmPy7ZxNsdaYpYPo5jwWOjNa+e
3sxUAmPOZ9zlVwfYtDXlQgVfhcIciexD/z7zBqr1pNYNGod4gJSrFhYQEivYmfoJ
WvNNegmU3tX2FUcLyfy7Z9ZbZFWbapQk175HlKTR9eHwHiyOhy7y/VbmYuBqutUM
7OzIiZh69V7O14oGn209YMtGdgM4VoxgMVaBx8Eovk3VxWG5k2YNpn7JU1tqkYTN
ZKsJxnmhfH4wErKeUzhO7tG8bJtINf0bNwdOtJKBxWLQZ0eS5/+IAhsNNwekNfnY
De0Oaf8vNKe9S67w1bcywKOgdJEqmdJuj+hxky7xUVyagq/ruP4D30d2zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvyIpQAI29AitTW8TCuAp8DI/gGMB8GA1UdIwQY
MBaAFNEvQVkSCqUbsc3xFtBqT8ApL/lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYt
ZmM0YTZhYjc4OGFkLzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYtZmM0YTZhYjc4OGFk
LzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqQhoKUX
uex/DMTcPJ3Fac767qSyemPAQEzc0HmracXVI528A05EzrL1NZw5ADnWDFgVjo8l
z5so6p3Rb/8ANmCzDA6Oq0t5U4iWBzCfvJG7j+ou2X3tGEgt+mzoEaDL1wQR4FU0
oEUlyCLMDTE6+xYWJTnnh1jfAS3qQnyNQ+J7dPG2mSFph1DQaNUElcOImPT93I2s
tig5cTbS4ybWN2dRjDYic3rclq/rt73lloYRdK/2htAoN6IdoN/1uG1p1vJkmJuR
mrzYoC7nayQzxE8KWHxYKfdc0olwiXqCf/gvhEpEq7HkArCd7jdbXqduChnOyBlx
SZQXLMyTSvZv5Q==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:19 2025 by rpki-client