Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json)
Hash identifier: aOd2ZEK0d3I7gNXVaXnFTuD8nPFcnBo9rqRzjB92C8I=
Subject key identifier: 64:78:65:4A:28:69:50:EB:3D:CE:B2:C4:3B:D6:AE:D7:12:32:41:95
Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Certificate serial: 01976C98F4C49E593283474FE54656122C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
Manifest number: 128E
Signing time: Sat 14 Jun 2025 04:00:52 +0000
Manifest this update: Sat 14 Jun 2025 04:00:52 +0000
Manifest next update: Sun 15 Jun 2025 04:00:52 +0000
Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: RvXE3omREkav1HoATl9/DFOp5i7lv6T+ZXgkObYAjAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:f4:c4:9e:59:32:83:47:4f:e5:46:56:12:2c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Validity
Not Before: Jun 14 04:00:52 2025 GMT
Not After : Jun 15 04:00:52 2025 GMT
Subject: CN=6478654a286950eb3dceb2c43bd6aed712324195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ca:b1:fe:d6:9c:3f:eb:7f:72:f2:f9:77:57:
1a:20:fb:a5:63:a4:b7:a7:a6:12:40:90:85:cf:95:
b4:f3:92:d4:7c:83:36:18:18:90:7e:00:27:73:b5:
b0:e9:23:2b:33:5e:ca:17:81:7d:bd:21:9b:a0:c7:
1c:a8:f3:d7:8e:05:2f:f0:f7:cf:d1:db:21:97:f9:
9d:56:d7:05:6c:b8:b8:fc:8a:7e:ad:ec:0f:55:04:
40:dd:19:ef:55:94:7a:07:72:0a:0c:46:7a:e7:8f:
53:5c:9d:ab:2e:8a:56:40:e0:54:47:89:03:af:8c:
4f:89:29:89:8f:10:0c:d7:90:47:ef:19:b2:76:b1:
0d:8a:cd:a3:a7:61:01:67:d8:c8:e4:77:fc:d6:91:
74:bf:9c:0d:57:5a:85:e3:04:a7:2a:2a:70:26:26:
1c:9e:9b:d2:21:b2:c0:bb:73:4c:45:9a:ea:ac:b2:
e1:4f:a9:14:21:4a:9d:dd:02:75:df:e4:9e:aa:3c:
20:c3:08:af:b6:e6:d3:ee:d6:84:11:58:ef:e8:07:
1b:e2:f2:ab:cb:9b:48:38:cb:57:38:f2:a9:f5:d6:
24:c5:8c:53:a4:7f:a9:5e:9c:62:23:7f:9c:61:d3:
36:47:1f:2b:b0:cb:96:34:7c:1e:d5:9b:a8:94:47:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:78:65:4A:28:69:50:EB:3D:CE:B2:C4:3B:D6:AE:D7:12:32:41:95
X509v3 Authority Key Identifier:
keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:65:b2:af:d2:06:c0:e6:09:35:c9:d8:ec:59:56:f5:6b:f9:
9b:66:07:2e:cd:fc:4f:ab:29:bf:2f:c3:ff:6f:df:9c:5e:12:
70:2e:f9:65:53:dc:a8:c5:ec:4a:54:e5:b6:b5:92:5a:38:25:
a4:84:5d:10:cd:9c:29:84:1a:af:e0:e4:aa:dd:b3:13:1d:b1:
83:5b:e8:ce:87:28:7d:21:87:34:4b:fc:f6:08:53:ba:a1:ea:
fd:30:bb:19:7e:60:f8:8d:3e:c4:9e:dd:c8:73:07:6c:34:4d:
84:23:82:e2:a7:38:31:03:0c:b6:7f:72:8f:c9:00:c9:d5:e6:
a6:28:cf:82:68:88:9d:29:c4:fb:cb:16:24:9a:e1:14:12:36:
29:7f:b0:28:05:b5:7f:1e:76:c1:21:ce:c2:34:7b:76:32:c3:
0b:16:6d:9b:0e:fb:cf:67:c3:52:01:81:31:36:00:77:be:e6:
c6:8c:46:12:42:15:e9:75:7b:eb:a2:f7:6b:e4:ec:61:00:77:
61:0a:34:39:1f:52:55:54:c7:5d:78:7f:1c:2e:6c:f9:db:41:
fb:4f:bb:fe:c7:00:54:63:b8:40:d1:c9:59:bd:68:03:d4:47:
54:34:50:9d:4d:ff:f3:14:a2:58:06:cc:ca:85:73:67:dc:a8:
1d:a9:d9:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmPTEnlkyg0dP5UZWEixIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzE4NzMzYWFkNDNlZjZhOTliZDhkOTUwNGEyMGRkODkw
MjJlOGYwHhcNMjUwNjE0MDQwMDUyWhcNMjUwNjE1MDQwMDUyWjAzMTEwLwYDVQQD
Eyg2NDc4NjU0YTI4Njk1MGViM2RjZWIyYzQzYmQ2YWVkNzEyMzI0MTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sqx/tacP+t/cvL5d1caIPulY6S3
p6YSQJCFz5W085LUfIM2GBiQfgAnc7Ww6SMrM17KF4F9vSGboMccqPPXjgUv8PfP
0dshl/mdVtcFbLi4/Ip+rewPVQRA3RnvVZR6B3IKDEZ6549TXJ2rLopWQOBUR4kD
r4xPiSmJjxAM15BH7xmydrENis2jp2EBZ9jI5Hf81pF0v5wNV1qF4wSnKipwJiYc
npvSIbLAu3NMRZrqrLLhT6kUIUqd3QJ13+SeqjwgwwivtubT7taEEVjv6Acb4vKr
y5tIOMtXOPKp9dYkxYxTpH+pXpxiI3+cYdM2Rx8rsMuWNHwe1ZuolEdgqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGR4ZUooaVDrPc6yxDvWrtcSMkGVMB8GA1UdIwQY
MBaAFPVxhzOq1D72qZvY2VBKIN2JAi6PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzMzN2MtMzc1OC00MGI2LWE5Yzgt
ZDcyNWZhNjczMmI2LzEvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMzMzN2MtMzc1OC00MGI2LWE5YzgtZDcyNWZhNjczMmI2
LzEvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmWyr9IG
wOYJNcnY7FlW9Wv5m2YHLs38T6spvy/D/2/fnF4ScC75ZVPcqMXsSlTltrWSWjgl
pIRdEM2cKYQar+Dkqt2zEx2xg1vozocofSGHNEv89ghTuqHq/TC7GX5g+I0+xJ7d
yHMHbDRNhCOC4qc4MQMMtn9yj8kAydXmpijPgmiInSnE+8sWJJrhFBI2KX+wKAW1
fx52wSHOwjR7djLDCxZtmw77z2fDUgGBMTYAd77mxoxGEkIV6XV766L3a+TsYQB3
YQo0OR9SVVTHXXh/HC5s+dtB+0+7/scAVGO4QNHJWb1oA9RHVDRQnU3/8xSiWAbM
yoVzZ9yoHanZNg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:58:09 2025 by rpki-client