Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: VR2llqE919fNrZVVsnXEl8GuotodMyqoQqahCMxyINc=
Subject key identifier: 6A:77:5F:11:75:B1:90:64:D3:C3:FF:56:CE:CD:FF:6D:BD:86:CF:0C
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 019873E1B82B2CAAB88334BEC43D728E3E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:00:29 +0000
Manifest this update: Mon 04 Aug 2025 07:00:29 +0000
Manifest next update: Tue 05 Aug 2025 07:00:29 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: cOGXhR3Lm0EGLCXorzkZzMbev0mcnZy/MG1T4mHfljg=)
2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:b8:2b:2c:aa:b8:83:34:be:c4:3d:72:8e:3e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Aug 4 07:00:29 2025 GMT
Not After : Aug 5 07:00:29 2025 GMT
Subject: CN=6a775f1175b19064d3c3ff56cecdff6dbd86cf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:77:46:24:4f:96:44:94:e1:51:c0:a2:9c:
b6:60:48:19:3c:46:67:8a:5e:99:57:a8:14:12:df:
39:c9:60:0c:ef:27:95:58:7b:d5:cf:d1:9e:52:41:
d0:6f:31:62:7a:5e:10:8f:31:5a:54:72:3e:4f:77:
b7:1e:bf:2b:5e:61:2a:f6:57:5c:91:a7:5e:00:9c:
65:6b:45:27:bd:fe:7a:02:3b:e6:91:ab:63:50:07:
23:2f:1b:d4:7c:47:4a:ea:e9:1a:21:a7:59:a1:91:
6c:cf:1e:60:7f:b1:6e:74:a2:55:81:e2:3c:6a:6d:
2a:85:ed:ca:b8:6a:05:be:2d:13:2a:96:98:5c:d7:
a2:b5:c6:b5:b7:2e:2d:2f:2c:09:0f:c6:07:1c:b6:
2a:40:91:ba:ea:fb:5f:b0:c1:64:3f:5c:51:ca:a1:
b2:7a:f2:9a:0a:83:83:10:d5:d1:26:8b:96:3f:db:
fc:f5:7b:76:17:c2:b2:ae:75:8a:f6:e9:d9:31:f4:
79:57:03:fa:54:9b:ff:d2:21:35:19:5e:2a:ab:11:
7b:ab:63:40:db:21:f8:29:91:f8:b3:dd:ac:c9:59:
be:29:6b:4b:59:82:fb:21:c6:b6:42:27:d1:92:a9:
ce:74:73:ca:f7:6c:bc:b1:23:67:2c:f1:ad:bd:5f:
a3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:77:5F:11:75:B1:90:64:D3:C3:FF:56:CE:CD:FF:6D:BD:86:CF:0C
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7b:d2:63:51:5c:63:6d:d8:76:a3:1a:36:58:ac:9a:c7:79:
9f:83:87:bd:7c:d8:76:52:fc:fd:dd:1c:f7:a5:81:92:bd:d0:
9c:39:85:01:50:74:15:1b:cf:7c:e6:eb:3e:d1:f5:d3:b0:e1:
c8:cb:b0:30:61:7c:3c:ea:70:9b:0a:e3:59:79:5a:09:6b:b0:
7b:fc:4d:10:51:a1:f9:fe:f9:9c:7d:b2:cc:78:01:8a:2b:3d:
6e:71:4c:21:f2:fa:b1:b4:05:77:7c:c3:34:6f:5b:36:4a:16:
40:63:8e:33:ae:63:de:dd:ce:95:08:5b:50:4b:3a:f9:7d:3c:
75:1e:c0:87:71:a1:92:20:a1:37:8c:d1:14:c5:7c:1f:6c:5f:
08:21:ea:15:e7:22:9b:67:8a:e0:8c:df:5a:ef:8d:e6:a0:e6:
e5:25:12:e8:dd:f0:87:58:e9:c1:46:30:95:64:fd:eb:1e:85:
8d:65:f9:db:5d:7e:8f:ab:33:a4:0f:be:1f:e7:b9:6f:a1:c0:
23:92:73:4d:e5:2e:7f:dd:15:f7:a4:ff:fb:80:b2:21:ba:aa:
be:b1:a0:1e:c9:44:dd:d9:57:e5:3d:6a:76:30:00:1f:39:19:
33:d8:e0:0f:37:e7:7e:fe:5c:55:5d:69:0c:c5:fd:69:d2:49:
55:d3:aa:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4bgrLKq4gzS+xD1yjj4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWEwYTVkMWU4ZDU0MjQ4ZTg3NjY3ZTk4ODNjOTAyZjE3
NWUyZTcwHhcNMjUwODA0MDcwMDI5WhcNMjUwODA1MDcwMDI5WjAzMTEwLwYDVQQD
Eyg2YTc3NWYxMTc1YjE5MDY0ZDNjM2ZmNTZjZWNkZmY2ZGJkODZjZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2J3RiRPlkSU4VHAopy2YEgZPEZn
il6ZV6gUEt85yWAM7yeVWHvVz9GeUkHQbzFiel4QjzFaVHI+T3e3Hr8rXmEq9ldc
kadeAJxla0Unvf56AjvmkatjUAcjLxvUfEdK6ukaIadZoZFszx5gf7FudKJVgeI8
am0qhe3KuGoFvi0TKpaYXNeitca1ty4tLywJD8YHHLYqQJG66vtfsMFkP1xRyqGy
evKaCoODENXRJouWP9v89Xt2F8KyrnWK9unZMfR5VwP6VJv/0iE1GV4qqxF7q2NA
2yH4KZH4s92syVm+KWtLWYL7Ica2QifRkqnOdHPK92y8sSNnLPGtvV+jIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGp3XxF1sZBk08P/Vs7N/229hs8MMB8GA1UdIwQY
MBaAFPaaCl0ejVQkjodmfpiDyQLxdeLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEt
ZTk5ZjIyNzcyNjI0LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEtZTk5ZjIyNzcyNjI0
LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXvSY1Fc
Y23YdqMaNlismsd5n4OHvXzYdlL8/d0c96WBkr3QnDmFAVB0FRvPfObrPtH107Dh
yMuwMGF8POpwmwrjWXlaCWuwe/xNEFGh+f75nH2yzHgBiis9bnFMIfL6sbQFd3zD
NG9bNkoWQGOOM65j3t3OlQhbUEs6+X08dR7Ah3GhkiChN4zRFMV8H2xfCCHqFeci
m2eK4IzfWu+N5qDm5SUS6N3wh1jpwUYwlWT96x6FjWX5211+j6szpA++H+e5b6HA
I5JzTeUuf90V96T/+4CyIbqqvrGgHslE3dlX5T1qdjAAHzkZM9jgDzfnfv5cVV1p
DMX9adJJVdOqXQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:53 2025 by rpki-client