Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: MUigfQsVh4syHEPpg+8dkek6uIf5g1olK7vgzOcB7ww=
Subject key identifier: E2:31:8D:76:5B:87:1E:B4:E7:F0:4A:4A:34:CA:47:77:3C:F3:68:96
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 01988CFD3CE039AD288E3A13C18E99C235FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 068B
Signing time: Sat 09 Aug 2025 04:01:02 +0000
Manifest this update: Sat 09 Aug 2025 04:01:02 +0000
Manifest next update: Sun 10 Aug 2025 04:01:02 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: UvvkL5nBOfQBne0wC4bzwtrKWGPs9G5NjYDSJ7jCeko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:3c:e0:39:ad:28:8e:3a:13:c1:8e:99:c2:35:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Aug 9 04:01:02 2025 GMT
Not After : Aug 10 04:01:02 2025 GMT
Subject: CN=e2318d765b871eb4e7f04a4a34ca47773cf36896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:80:56:4f:55:ae:11:b1:22:60:ca:2a:ea:
c8:d5:c0:9c:d7:6e:2a:90:ba:4b:ba:5a:69:d0:16:
80:06:2a:01:d1:c9:d9:ef:76:df:9b:e5:25:dd:51:
99:dd:39:d7:e6:3f:51:ed:3a:17:c6:81:f8:5d:e6:
b6:c2:ed:d9:6a:f9:07:3b:5e:93:bc:0b:99:d2:07:
5e:24:3d:f2:e5:53:ad:45:ea:f7:8a:c2:44:67:c2:
be:89:81:8b:ac:55:70:42:8a:64:97:76:74:57:76:
e7:60:f0:e0:7c:d1:65:56:4f:20:15:de:85:34:2f:
e9:dd:ac:c4:9b:f5:a5:0c:a8:0c:ae:f3:24:5d:0b:
1d:a0:65:81:5c:d8:b1:f2:a1:ab:1f:2b:4d:f1:5b:
9f:94:67:b0:64:05:fe:aa:a1:37:48:2f:a4:88:e9:
3b:2a:44:0b:c1:28:64:24:78:2f:b5:89:1a:83:26:
64:66:c0:d5:51:11:fd:49:21:49:19:d9:b7:55:4d:
12:f3:c8:8e:ec:93:7a:ac:e1:14:3c:31:a8:3d:86:
76:66:a3:bf:ee:db:fa:e2:50:a2:c1:ca:95:a6:53:
94:fe:b3:90:7f:63:12:c8:4b:d6:28:af:55:0e:e3:
aa:ef:ac:47:86:0a:b0:24:c7:86:67:1d:a7:ed:1a:
fc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:31:8D:76:5B:87:1E:B4:E7:F0:4A:4A:34:CA:47:77:3C:F3:68:96
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0b:ad:65:46:31:73:3e:22:ad:3f:ce:b8:e1:40:f0:ac:7a:
ce:26:52:e2:79:39:f6:6d:6b:4e:1b:99:38:c9:6c:c9:cb:b1:
d9:c0:0e:1c:8a:6b:7c:fe:d0:64:fa:aa:f5:ec:73:e7:18:2d:
10:c5:8e:91:1c:b5:58:d1:c5:86:87:23:e5:70:59:5d:bf:8e:
c4:ac:f4:d2:42:44:e5:55:5e:a6:a2:9f:9d:e3:05:5f:df:9e:
99:f2:44:11:45:87:0f:dd:57:11:98:bf:0a:93:0a:70:ef:e2:
fc:07:ed:86:72:97:14:3b:9c:71:36:78:9a:7e:89:fd:c4:b5:
16:f7:1f:63:14:e0:35:df:10:41:e5:15:82:3c:c8:9f:64:a2:
87:e0:9b:ef:5d:f3:42:a5:84:73:d0:bf:73:ae:f6:f1:37:21:
a4:23:f1:fc:44:1d:c6:78:6b:57:ee:ba:57:3b:3a:f8:ab:3f:
60:2e:96:03:44:23:3a:c6:f4:d1:49:53:39:63:dd:1a:7b:b2:
62:22:0d:a2:70:ba:f9:af:e4:b1:b7:28:23:d9:34:14:0b:6a:
f4:79:d8:df:30:a1:ed:a9:45:20:1e:cb:56:5d:a1:ed:3d:ca:
74:a5:54:cb:0d:5b:50:9d:ad:d3:13:ff:b4:e8:81:45:89:a7:
73:de:eb:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/TzgOa0ojjoTwY6ZwjX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YmY0YzE4ZjdhY2RlZTRjN2YzNThkZDRiYWU1ZTgwMDk4
NWU3MGMwHhcNMjUwODA5MDQwMTAyWhcNMjUwODEwMDQwMTAyWjAzMTEwLwYDVQQD
EyhlMjMxOGQ3NjViODcxZWI0ZTdmMDRhNGEzNGNhNDc3NzNjZjM2ODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtaAVk9VrhGxImDKKurI1cCc124q
kLpLulpp0BaABioB0cnZ73bfm+Ul3VGZ3TnX5j9R7ToXxoH4Xea2wu3ZavkHO16T
vAuZ0gdeJD3y5VOtRer3isJEZ8K+iYGLrFVwQopkl3Z0V3bnYPDgfNFlVk8gFd6F
NC/p3azEm/WlDKgMrvMkXQsdoGWBXNix8qGrHytN8VuflGewZAX+qqE3SC+kiOk7
KkQLwShkJHgvtYkagyZkZsDVURH9SSFJGdm3VU0S88iO7JN6rOEUPDGoPYZ2ZqO/
7tv64lCiwcqVplOU/rOQf2MSyEvWKK9VDuOq76xHhgqwJMeGZx2n7Rr8zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIxjXZbhx605/BKSjTKR3c882iWMB8GA1UdIwQY
MBaAFPW/TBj3rN7kx/NY3UuuXoAJhecMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMt
ZDJhYmQzYTkxYzkwLzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMtZDJhYmQzYTkxYzkw
LzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgutZUYx
cz4irT/OuOFA8Kx6ziZS4nk59m1rThuZOMlsycux2cAOHIprfP7QZPqq9exz5xgt
EMWOkRy1WNHFhocj5XBZXb+OxKz00kJE5VVepqKfneMFX9+emfJEEUWHD91XEZi/
CpMKcO/i/AfthnKXFDuccTZ4mn6J/cS1FvcfYxTgNd8QQeUVgjzIn2Sih+Cb713z
QqWEc9C/c6728TchpCPx/EQdxnhrV+66Vzs6+Ks/YC6WA0QjOsb00UlTOWPdGnuy
YiINonC6+a/ksbcoI9k0FAtq9HnY3zCh7alFIB7LVl2h7T3KdKVUyw1bUJ2t0xP/
tOiBRYmnc97r1A==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:41 2025 by rpki-client