Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: AoQRkUvwF14No9TAVT/kqhRRaUiBZUT+ScqMOI9qAyI=
Subject key identifier: E7:34:1D:7B:E8:E3:42:5F:B6:2D:5F:47:9E:75:3B:1F:8E:F3:91:29
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 01976C98982B84571AF8AA33B679EFB2A10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 0E51
Signing time: Sat 14 Jun 2025 04:00:29 +0000
Manifest this update: Sat 14 Jun 2025 04:00:29 +0000
Manifest next update: Sun 15 Jun 2025 04:00:29 +0000
Files and hashes: 1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: zU4/5AGNTRcuf5hvrajJ6LOZ0xNcWRxA4pwT2pPOJM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:98:2b:84:57:1a:f8:aa:33:b6:79:ef:b2:a1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Jun 14 04:00:29 2025 GMT
Not After : Jun 15 04:00:29 2025 GMT
Subject: CN=e7341d7be8e3425fb62d5f479e753b1f8ef39129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:75:50:e1:a7:b8:ea:05:33:87:83:2d:14:
58:c0:62:fa:6f:73:25:36:8f:ec:1e:1d:fa:b9:ca:
dc:47:b8:31:75:c5:1b:55:09:be:a6:b6:8d:7f:31:
93:d2:b8:55:8e:db:1a:0d:65:4d:15:25:54:31:07:
58:40:9e:60:4c:33:dc:13:b5:0c:66:77:49:f6:b0:
36:d2:d9:9f:4b:86:49:d7:cc:f3:0c:72:38:2d:21:
62:3e:7f:4f:b5:64:14:da:f1:a4:f2:1b:34:b7:aa:
c3:02:c3:f4:27:c7:8c:8d:e4:4e:e5:ca:61:58:34:
d1:5c:9b:cb:88:6d:95:39:c0:69:0b:e3:40:49:8c:
31:58:70:c6:bc:d3:7d:a5:bb:29:08:82:00:f2:e5:
f5:44:f7:0a:fe:74:a6:a2:00:5b:c0:09:5c:a7:c2:
41:2e:6a:50:89:48:7f:01:e5:1b:b4:4f:f0:ca:99:
0a:51:b1:71:84:1b:16:85:16:00:97:e1:de:de:03:
63:f0:e6:38:f7:5f:8f:86:94:06:42:6d:b0:1b:6d:
91:db:06:65:3f:d8:7c:bf:c9:23:ac:65:57:39:4f:
8f:58:71:dc:74:a6:b1:9a:cf:4b:64:48:a8:5d:3b:
c0:b9:70:04:24:85:a2:82:2b:60:84:a4:7c:37:20:
b9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:34:1D:7B:E8:E3:42:5F:B6:2D:5F:47:9E:75:3B:1F:8E:F3:91:29
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:aa:47:ce:b6:80:15:df:c8:84:bf:f8:dd:23:02:6f:40:63:
8e:21:4b:91:de:2c:ad:56:1f:b7:94:1f:69:68:29:74:b4:2f:
fe:3f:15:7c:42:cd:ef:95:05:44:a1:a8:ff:24:96:25:06:da:
c7:b1:86:a4:9a:26:01:ad:21:f6:fc:3b:93:93:a4:9f:af:a1:
b0:20:f5:d4:04:72:2e:0a:c4:be:33:69:9f:bf:d2:b5:80:2f:
2a:69:5a:5a:e8:44:35:1f:5b:c1:99:df:f9:21:c6:33:a7:20:
3b:f7:af:e8:e8:ef:af:2f:9b:fb:e5:c7:93:12:f5:3a:36:3a:
8e:96:8b:00:f4:8f:e2:e5:ff:0d:43:7f:b7:36:08:15:95:25:
e4:22:60:d8:19:16:b5:a6:07:c9:8a:4c:6c:d9:e2:b3:39:a6:
9a:16:54:38:28:39:9e:1a:aa:24:70:2f:cd:57:f2:5a:db:ba:
53:f2:69:f4:45:86:a8:b9:97:b5:cc:5f:14:8c:33:e7:6d:e4:
9c:a9:fd:ac:cd:4f:dd:30:da:bb:86:26:c0:04:8a:d0:70:a1:
76:58:40:fc:a9:0f:8e:b4:76:3b:37:e3:96:fa:07:70:3f:68:
07:3b:a0:58:23:fa:74:8f:09:fb:0e:72:3c:55:a9:21:fa:5e:
6a:d8:1e:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmJgrhFca+KoztnnvsqEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZDRjNGFkNzMxZTQ1ZWQzMjBhMmYzOGFiNzBiN2E3YmZm
N2VhNzkwHhcNMjUwNjE0MDQwMDI5WhcNMjUwNjE1MDQwMDI5WjAzMTEwLwYDVQQD
EyhlNzM0MWQ3YmU4ZTM0MjVmYjYyZDVmNDc5ZTc1M2IxZjhlZjM5MTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI11UOGnuOoFM4eDLRRYwGL6b3Ml
No/sHh36ucrcR7gxdcUbVQm+praNfzGT0rhVjtsaDWVNFSVUMQdYQJ5gTDPcE7UM
ZndJ9rA20tmfS4ZJ18zzDHI4LSFiPn9PtWQU2vGk8hs0t6rDAsP0J8eMjeRO5cph
WDTRXJvLiG2VOcBpC+NASYwxWHDGvNN9pbspCIIA8uX1RPcK/nSmogBbwAlcp8JB
LmpQiUh/AeUbtE/wypkKUbFxhBsWhRYAl+He3gNj8OY491+PhpQGQm2wG22R2wZl
P9h8v8kjrGVXOU+PWHHcdKaxms9LZEioXTvAuXAEJIWigitghKR8NyC5hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOc0HXvo40Jfti1fR551Ox+O85EpMB8GA1UdIwQY
MBaAFJPUxK1zHkXtMgovOKtwt6e/9+p5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lZTA1MzgtMzljOS00NDUwLTk2NDct
YWJhNTVlMjQyNGQyLzEvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lZTA1MzgtMzljOS00NDUwLTk2NDctYWJhNTVlMjQyNGQy
LzEvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFapHzraA
Fd/IhL/43SMCb0BjjiFLkd4srVYft5QfaWgpdLQv/j8VfELN75UFRKGo/ySWJQba
x7GGpJomAa0h9vw7k5Okn6+hsCD11ARyLgrEvjNpn7/StYAvKmlaWuhENR9bwZnf
+SHGM6cgO/ev6Ojvry+b++XHkxL1OjY6jpaLAPSP4uX/DUN/tzYIFZUl5CJg2BkW
taYHyYpMbNniszmmmhZUOCg5nhqqJHAvzVfyWtu6U/Jp9EWGqLmXtcxfFIwz523k
nKn9rM1P3TDau4YmwASK0HChdlhA/KkPjrR2OzfjlvoHcD9oBzugWCP6dI8J+w5y
PFWpIfpeatgeTA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:21:44 2025 by rpki-client