Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier: UmeNQW/X57FQKAAOVTt78vvrtsqgMKMHL+d/+d1r9ig=
Subject key identifier: A6:05:E3:DC:50:6C:69:2B:A6:BE:D9:7F:61:97:32:D1:55:61:70:F4
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial: 01989E953173DD940F9B93CEDF671119082F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number: 0338
Signing time: Tue 12 Aug 2025 14:00:34 +0000
Manifest this update: Tue 12 Aug 2025 14:00:34 +0000
Manifest next update: Wed 13 Aug 2025 14:00:34 +0000
Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: c+FzuZ449f8WDmTbMUEW4izhffMTcWxqfbQ9AF3ehpg=)
2: jYwiLy6C8PrH1zmVRebb5xoCcHg.roa (hash: B/91TwKxBsOKKHQE6s1Ydkjq/nj0hd3T+71Ppy1e7kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:31:73:dd:94:0f:9b:93:ce:df:67:11:19:08:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
Validity
Not Before: Aug 12 14:00:34 2025 GMT
Not After : Aug 13 14:00:34 2025 GMT
Subject: CN=a605e3dc506c692ba6bed97f619732d1556170f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:7e:36:00:4e:70:40:63:80:7e:32:ad:10:
07:3c:e3:40:fc:83:f5:c7:8a:ed:5a:4a:6d:74:a8:
a2:44:12:35:80:65:3d:a1:65:fc:d4:23:c1:e3:fa:
2d:4c:fb:8f:49:2d:35:a6:4b:10:17:03:fb:e9:b6:
be:4b:3e:fb:30:29:af:87:06:a2:03:02:79:bd:20:
e0:d2:63:b0:02:67:34:fb:3f:5b:de:b2:67:ac:98:
85:98:49:7c:7c:2c:08:06:0a:2a:37:0b:3d:2b:24:
ae:db:61:fa:e8:05:d9:4d:29:f8:c2:d2:5c:f6:80:
24:91:38:d7:97:c2:cd:10:01:6b:1d:e8:d2:8b:c7:
40:d0:06:f5:ed:5f:b5:42:cb:5c:5c:e1:54:e2:0c:
68:f3:67:30:33:35:4c:f5:8f:23:8f:d9:0c:f8:55:
01:07:ba:64:65:7f:30:5a:19:26:7b:9a:e4:a1:37:
66:3e:95:ae:61:65:27:9a:f5:fb:02:12:1f:65:60:
08:73:c0:3d:c9:b1:fc:6e:2d:0f:ac:76:5b:93:5d:
d8:d6:e0:58:da:bc:b3:4b:d6:08:d7:d0:fb:44:7b:
27:22:50:4a:bc:73:15:28:c8:36:e8:16:84:f8:a1:
45:c6:df:1d:8b:9d:98:55:f6:6b:b7:99:19:35:db:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:05:E3:DC:50:6C:69:2B:A6:BE:D9:7F:61:97:32:D1:55:61:70:F4
X509v3 Authority Key Identifier:
keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:dd:f4:60:4f:0c:28:51:27:a0:92:a7:95:66:dc:14:2d:3f:
d7:5a:c0:2c:12:8e:c0:1f:c8:63:5a:cd:26:65:5a:ba:a3:b2:
b4:70:b5:09:d5:10:ef:eb:21:80:eb:00:e4:fe:ab:69:2a:f5:
cb:66:48:d3:f5:b0:c6:1f:db:fd:82:da:26:44:8a:b1:18:94:
b0:77:69:0f:8e:a4:ee:62:6c:94:1e:6a:31:0e:4f:7d:2b:06:
c9:b6:f0:f6:7e:20:cd:2a:13:fe:56:04:1a:a7:32:19:c1:32:
42:60:cb:8f:e2:75:0a:17:df:83:55:b3:7f:25:f2:fc:be:a8:
69:d4:f8:a4:c6:e8:9a:9e:28:a8:10:8d:4d:d8:4d:6d:55:80:
d2:4a:25:2e:ec:66:4b:06:f0:93:e3:3d:5e:c7:51:97:06:aa:
27:03:fb:2a:fe:df:72:be:72:e3:31:81:6f:ee:be:da:c2:90:
40:70:2f:0e:c4:7f:fe:e4:66:7a:5c:19:45:48:1b:6d:ff:94:
18:dc:c8:1c:9e:2f:89:b1:ff:3c:eb:d1:d4:cc:ae:bd:3a:69:
1d:20:57:26:09:8c:d9:33:d1:44:36:c9:b2:38:82:ff:1a:c1:
8b:72:86:21:09:5b:a2:da:0d:c2:26:bd:8a:63:05:53:7a:9a:
8b:d7:91:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZielTFz3ZQPm5PO32cRGQgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OWYwNzIxMGIyODg0YjRmZWE1MDdiZGUyMjc3OTViMjY0
MDYyZWQwHhcNMjUwODEyMTQwMDM0WhcNMjUwODEzMTQwMDM0WjAzMTEwLwYDVQQD
EyhhNjA1ZTNkYzUwNmM2OTJiYTZiZWQ5N2Y2MTk3MzJkMTU1NjE3MGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs31+NgBOcEBjgH4yrRAHPONA/IP1
x4rtWkptdKiiRBI1gGU9oWX81CPB4/otTPuPSS01pksQFwP76ba+Sz77MCmvhwai
AwJ5vSDg0mOwAmc0+z9b3rJnrJiFmEl8fCwIBgoqNws9KySu22H66AXZTSn4wtJc
9oAkkTjXl8LNEAFrHejSi8dA0Ab17V+1QstcXOFU4gxo82cwMzVM9Y8jj9kM+FUB
B7pkZX8wWhkme5rkoTdmPpWuYWUnmvX7AhIfZWAIc8A9ybH8bi0PrHZbk13Y1uBY
2ryzS9YI19D7RHsnIlBKvHMVKMg26BaE+KFFxt8di52YVfZrt5kZNdtQkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYF49xQbGkrpr7Zf2GXMtFVYXD0MB8GA1UdIwQY
MBaAFPafByELKIS0/qUHveIneVsmQGLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMt
NDVmNjBmNDE0ZmY3LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMtNDVmNjBmNDE0ZmY3
LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYt30YE8M
KFEnoJKnlWbcFC0/11rALBKOwB/IY1rNJmVauqOytHC1CdUQ7+shgOsA5P6raSr1
y2ZI0/Wwxh/b/YLaJkSKsRiUsHdpD46k7mJslB5qMQ5PfSsGybbw9n4gzSoT/lYE
GqcyGcEyQmDLj+J1Chffg1WzfyXy/L6oadT4pMbomp4oqBCNTdhNbVWA0kolLuxm
Swbwk+M9XsdRlwaqJwP7Kv7fcr5y4zGBb+6+2sKQQHAvDsR//uRmelwZRUgbbf+U
GNzIHJ4vibH/POvR1MyuvTppHSBXJgmM2TPRRDbJsjiC/xrBi3KGIQlbotoNwia9
imMFU3qai9eRng==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:03 2025 by rpki-client