Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: iAK2kmuzL4d+MyHHuqRAG3Y/dhZv3h9tf9mxml9k0F8=
Subject key identifier: FE:6B:BC:BE:0D:6A:20:42:F9:60:4E:AC:B7:EC:0D:9B:92:00:14:19
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 019769CE5090CFD2298BD127A86C20CDECE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 15:00:17 +0000
Manifest this update: Fri 13 Jun 2025 15:00:17 +0000
Manifest next update: Sat 14 Jun 2025 15:00:17 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: oJ/JJSVkmu+QMpKM7/9zhOE/XmV3JgETJ9LGVubpKxI=)
2: FNrF4gJ9GeSqn1QNR00c9Q4ygYg.roa (hash: 2ncm1gP0ao8l2RvVLkDskRllvyDwCE2AZXVvFGp+UKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:50:90:cf:d2:29:8b:d1:27:a8:6c:20:cd:ec:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Jun 13 15:00:17 2025 GMT
Not After : Jun 14 15:00:17 2025 GMT
Subject: CN=fe6bbcbe0d6a2042f9604eacb7ec0d9b92001419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c1:8b:5f:2e:a6:58:c1:ce:39:15:6f:11:58:
e3:50:6c:5e:f2:93:b5:42:ba:50:3f:4a:65:4a:ac:
47:30:ef:78:09:0f:9f:58:f8:e4:ea:34:c0:22:17:
8d:2b:93:0e:16:e7:16:b2:4a:bd:40:a0:3e:18:51:
b9:8c:0b:f2:97:eb:f4:db:d5:97:6c:24:91:07:7f:
2c:e6:bc:e6:db:90:49:56:1e:7c:2d:9e:df:43:9a:
ad:5a:a0:57:c6:af:2e:06:41:f6:16:fb:53:50:a1:
19:24:c2:7c:b1:64:08:3f:d5:7f:1a:3e:9b:76:45:
83:5d:bb:b1:d1:6a:7a:15:5f:9e:61:97:6b:15:90:
75:19:23:17:43:60:a0:33:c6:31:9d:7f:d0:df:6e:
fb:39:c6:e2:3e:71:05:6f:80:61:72:da:35:48:8d:
28:28:65:4f:34:aa:3c:dd:27:6b:5c:da:8e:1b:5d:
27:a3:92:1b:32:60:3e:b5:73:1e:ba:a6:87:8a:0d:
29:e2:d2:c5:39:4d:df:16:e0:99:97:d5:13:70:c9:
01:2f:bc:ab:00:7f:72:4e:6d:9c:b6:08:4d:83:6f:
11:0d:13:a3:a0:05:c8:e5:59:8d:f5:99:30:36:a6:
63:e6:42:5e:3d:37:bd:cb:ce:2a:4d:16:c6:54:d9:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6B:BC:BE:0D:6A:20:42:F9:60:4E:AC:B7:EC:0D:9B:92:00:14:19
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0a:bf:a1:d3:ae:fb:dd:76:eb:9d:da:10:14:d7:62:ee:a7:
cc:a2:b6:e3:6b:f8:4f:08:33:ee:6b:72:b7:02:21:5f:37:32:
69:b8:4b:93:2c:32:6f:85:15:e8:33:6a:c7:17:9e:88:d2:ae:
02:49:b6:d1:8f:77:e6:f1:2e:03:1e:14:5a:67:f4:f8:2a:bf:
23:03:7d:b9:c8:a5:97:80:a1:41:c5:2c:94:49:bb:50:62:31:
ef:fa:50:cc:39:3c:7e:6d:cd:93:92:99:c6:06:bb:b7:5a:d5:
bb:ab:88:aa:55:bc:74:56:37:f2:c2:22:10:9f:14:58:e3:7f:
4f:e9:d5:5d:37:25:24:de:33:03:08:35:2e:f0:16:f1:f4:e1:
b9:d5:d4:bf:33:ab:0b:e9:44:6d:c2:1c:aa:5b:4a:7b:b3:21:
74:ad:b0:2c:e0:9c:30:99:06:20:f6:8a:67:6c:79:d3:de:1b:
ae:0f:c9:21:1a:ca:36:01:ad:5f:93:a6:fe:df:2e:2b:4f:66:
36:65:24:48:93:14:58:4e:b5:16:8c:a9:c2:fd:9e:5d:0e:07:
ea:a6:49:f7:e3:c8:ce:c5:71:72:52:eb:b7:de:9a:63:10:ed:
b8:3b:41:fa:4f:10:5b:72:47:fc:3a:96:4e:71:a7:ec:6c:d8:
98:f5:1e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzlCQz9Ipi9EnqGwgzezkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDNlYTUyODcxNDg5ZDg2YWE5Y2E1Y2EwYzI5N2M4OGFi
ODJhYjYwHhcNMjUwNjEzMTUwMDE3WhcNMjUwNjE0MTUwMDE3WjAzMTEwLwYDVQQD
EyhmZTZiYmNiZTBkNmEyMDQyZjk2MDRlYWNiN2VjMGQ5YjkyMDAxNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28GLXy6mWMHOORVvEVjjUGxe8pO1
QrpQP0plSqxHMO94CQ+fWPjk6jTAIheNK5MOFucWskq9QKA+GFG5jAvyl+v029WX
bCSRB38s5rzm25BJVh58LZ7fQ5qtWqBXxq8uBkH2FvtTUKEZJMJ8sWQIP9V/Gj6b
dkWDXbux0Wp6FV+eYZdrFZB1GSMXQ2CgM8YxnX/Q3277OcbiPnEFb4Bhcto1SI0o
KGVPNKo83SdrXNqOG10no5IbMmA+tXMeuqaHig0p4tLFOU3fFuCZl9UTcMkBL7yr
AH9yTm2ctghNg28RDROjoAXI5VmN9ZkwNqZj5kJePTe9y84qTRbGVNlRDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5rvL4NaiBC+WBOrLfsDZuSABQZMB8GA1UdIwQY
MBaAFPVD6lKHFInYaqnKXKDCl8iKuCq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8xNmM0YjUtNmRkYS00YTM4LTg0OGYt
ZGZiYmVkYTIxNTk0LzEvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8xNmM0YjUtNmRkYS00YTM4LTg0OGYtZGZiYmVkYTIxNTk0
LzEvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQq/odOu
+912653aEBTXYu6nzKK242v4Twgz7mtytwIhXzcyabhLkywyb4UV6DNqxxeeiNKu
Akm20Y935vEuAx4UWmf0+Cq/IwN9ucill4ChQcUslEm7UGIx7/pQzDk8fm3Nk5KZ
xga7t1rVu6uIqlW8dFY38sIiEJ8UWON/T+nVXTclJN4zAwg1LvAW8fThudXUvzOr
C+lEbcIcqltKe7MhdK2wLOCcMJkGIPaKZ2x5094brg/JIRrKNgGtX5Om/t8uK09m
NmUkSJMUWE61Foypwv2eXQ4H6qZJ9+PIzsVxclLrt96aYxDtuDtB+k8QW3JH/DqW
TnGn7GzYmPUeQQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:06 2025 by rpki-client