Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File: 9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier: l4h1LcHwPLi1NEvcUIBH3zC4Qet/QXe6SfpAR6KOhHs=
Subject key identifier: A7:67:D9:69:6E:DC:A4:BE:BA:52:95:50:F2:89:C7:05:D8:0A:F9:82
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 01976DABDD19EBDB28E60A4AD08D6C4172F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 09:01:09 +0000
Manifest this update: Sat 14 Jun 2025 09:01:09 +0000
Manifest next update: Sun 15 Jun 2025 09:01:09 +0000
Files and hashes: 1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: 5irjQt3rg/1PM2d4ZV3eE5RhI+w8bqwv4ts3TFrvkJM=)
2: KPjydIOJaGq7MrGDIyks0pG8OMc.roa (hash: EbMrbtdHkpWfjQpY4PIBNTo9mg3b+j3TofouOP6XhE4=)
3: j-eMIttscanFAqtICoI80Cr1JzI.roa (hash: 9wKinY0pxocac6rpiGpVi4F+dA87gof09Z9RuDhbY0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:dd:19:eb:db:28:e6:0a:4a:d0:8d:6c:41:72:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: Jun 14 09:01:09 2025 GMT
Not After : Jun 15 09:01:09 2025 GMT
Subject: CN=a767d9696edca4beba529550f289c705d80af982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e7:a5:d2:8d:6b:5c:bb:62:de:b7:77:ac:f8:
e0:2d:d5:1c:0d:42:25:73:16:e2:07:9c:8a:38:3d:
4e:f3:c7:7d:f0:1a:b6:0c:9c:08:a6:2b:14:a7:30:
61:04:ab:76:2e:1a:6d:fe:c6:45:36:d1:8b:fb:be:
5f:6c:74:74:ef:9d:f2:90:30:99:98:fc:32:9f:2d:
00:59:69:90:cf:e3:33:17:e9:2a:15:7f:2d:b9:02:
59:39:19:5e:92:d0:e1:7b:89:ce:4b:92:c1:d2:72:
ea:d6:a4:c9:3d:ae:f8:3b:8d:63:66:b4:20:1e:df:
c4:ae:42:7e:d3:a5:1b:3b:79:e3:da:9e:a6:c4:20:
57:a4:c5:32:0f:5b:7a:61:33:4f:5e:9e:f3:eb:d1:
99:26:dd:bd:05:81:1d:2d:3d:f1:8a:68:a4:32:37:
46:28:9f:36:e2:1b:0d:b0:13:29:bd:0c:01:0c:d1:
11:ab:2a:ae:4f:30:fd:61:96:d4:e3:71:2f:11:72:
64:f6:cd:b8:9e:2f:a7:ae:12:1f:0c:5f:2b:18:64:
92:52:ed:49:65:1b:0a:dd:cc:b0:89:00:8b:54:95:
e2:5c:11:fd:db:1a:09:ba:6c:d4:b7:d5:3f:37:a7:
93:96:af:35:3f:08:8e:af:ac:f3:54:c0:01:e8:d8:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:67:D9:69:6E:DC:A4:BE:BA:52:95:50:F2:89:C7:05:D8:0A:F9:82
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0f:c6:75:ff:ec:97:1b:c4:9c:82:2d:45:98:c7:43:b0:6d:
d8:19:83:0f:21:51:6d:11:ff:f2:b1:75:1b:3f:bb:0f:2f:7f:
8b:50:4a:f5:02:30:1d:f8:b5:ef:09:0d:96:41:a2:b0:99:98:
11:b0:1e:04:8b:88:92:37:d8:f6:50:48:58:74:8e:f7:14:c4:
54:2a:a2:02:57:d7:88:9b:5e:5b:33:51:d0:09:7a:e8:67:55:
cf:93:21:3a:14:c3:84:00:39:a9:c8:42:2e:a4:1f:23:af:ca:
ae:ee:27:a4:6e:85:ee:21:3a:ca:6a:fd:10:c6:6e:45:19:87:
ba:1a:f4:66:be:6e:bf:03:84:fb:2b:4c:ac:8d:92:b9:70:a5:
05:67:e8:93:bf:c9:0f:d9:0f:af:1b:8c:08:cf:0d:69:4e:1b:
56:a8:25:a1:61:85:0f:d0:ab:c0:b6:74:53:06:33:57:55:b9:
78:60:88:e7:b5:f2:20:9d:0d:86:74:60:b2:6f:ad:d7:bd:a9:
ef:b0:b7:dd:92:be:b4:a1:cd:08:34:b1:e3:a1:d2:0f:91:5d:
48:99:87:d0:92:0c:aa:1b:f8:fb:93:67:23:d6:be:dd:35:f8:
4c:28:e7:bb:60:98:3c:ef:ef:ac:61:6b:7a:23:e2:b1:c7:ac:
7a:e9:d6:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq90Z69so5gpK0I1sQXL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MzM1M2YzNjhkZDgwMWNkNjEwMjIzMmRmYTFjZWE2OWRk
OGNiNmMwHhcNMjUwNjE0MDkwMTA5WhcNMjUwNjE1MDkwMTA5WjAzMTEwLwYDVQQD
EyhhNzY3ZDk2OTZlZGNhNGJlYmE1Mjk1NTBmMjg5YzcwNWQ4MGFmOTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Oel0o1rXLti3rd3rPjgLdUcDUIl
cxbiB5yKOD1O88d98Bq2DJwIpisUpzBhBKt2Lhpt/sZFNtGL+75fbHR0753ykDCZ
mPwyny0AWWmQz+MzF+kqFX8tuQJZORlektDhe4nOS5LB0nLq1qTJPa74O41jZrQg
Ht/ErkJ+06UbO3nj2p6mxCBXpMUyD1t6YTNPXp7z69GZJt29BYEdLT3ximikMjdG
KJ824hsNsBMpvQwBDNERqyquTzD9YZbU43EvEXJk9s24ni+nrhIfDF8rGGSSUu1J
ZRsK3cywiQCLVJXiXBH92xoJumzUt9U/N6eTlq81PwiOr6zzVMAB6Ng90QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdn2Wlu3KS+ulKVUPKJxwXYCvmCMB8GA1UdIwQY
MBaAFPUzU/No3YAc1hAiMt+hzqad2MtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEt
MGVjN2VjYjI1MDMwLzEvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEtMGVjN2VjYjI1MDMw
LzEvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmw/Gdf/s
lxvEnIItRZjHQ7Bt2BmDDyFRbRH/8rF1Gz+7Dy9/i1BK9QIwHfi17wkNlkGisJmY
EbAeBIuIkjfY9lBIWHSO9xTEVCqiAlfXiJteWzNR0Al66GdVz5MhOhTDhAA5qchC
LqQfI6/Kru4npG6F7iE6ymr9EMZuRRmHuhr0Zr5uvwOE+ytMrI2SuXClBWfok7/J
D9kPrxuMCM8NaU4bVqgloWGFD9CrwLZ0UwYzV1W5eGCI57XyIJ0NhnRgsm+t172p
77C33ZK+tKHNCDSx46HSD5FdSJmH0JIMqhv4+5NnI9a+3TX4TCjnu2CYPO/vrGFr
eiPisceseunWrg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:38 2025 by rpki-client