Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier: EvOPmBEuvaaVB6O/JOM1pyF2yLeWbizCMDAlAzNywbE=
Subject key identifier: EF:00:E4:C4:24:66:AB:BD:F8:F6:27:48:BB:31:3A:1D:D6:69:BD:5E
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial: 0198917EA02729039DCBF4F7F5F1A10AA054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number: 112D
Signing time: Sun 10 Aug 2025 01:00:51 +0000
Manifest this update: Sun 10 Aug 2025 01:00:51 +0000
Manifest next update: Mon 11 Aug 2025 01:00:51 +0000
Files and hashes: 1: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: 6wu70HO08NjnzzO/YdRE87x/qlz6GLvp7//S4vPv+dY=)
2: DaSMaWZYfnj6ceinzYPrOhJJgQA.roa (hash: tLMLMu2mXxzV//rWf7p3b0LjE6TE93dgy9UoXP39ok8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:a0:27:29:03:9d:cb:f4:f7:f5:f1:a1:0a:a0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Validity
Not Before: Aug 10 01:00:51 2025 GMT
Not After : Aug 11 01:00:51 2025 GMT
Subject: CN=ef00e4c42466abbdf8f62748bb313a1dd669bd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:db:77:73:56:d6:4b:1d:ea:a9:2d:d5:c7:32:
10:21:00:33:5e:0e:9d:c3:e4:bf:17:08:a9:56:b4:
09:69:e5:51:2c:3a:a2:aa:3b:4c:b0:e5:45:6b:8b:
41:18:30:b1:74:36:ba:bd:d1:54:75:82:45:d2:71:
c4:bc:1c:59:8f:e0:e7:85:b4:c0:e1:15:b9:74:c6:
03:2a:4c:34:6a:75:03:8f:36:34:ce:55:5b:a9:26:
5d:22:69:b7:13:6d:5a:6e:f0:1d:5c:6d:db:ab:10:
9c:6b:e7:ce:83:8a:64:11:b8:df:ca:98:e6:98:f7:
84:88:25:cf:12:94:d3:f5:9d:90:f8:23:a2:63:c6:
6a:83:88:aa:fb:4d:2c:66:47:1d:ea:df:ff:e5:ca:
87:27:4f:e4:98:29:ba:8b:3f:ef:88:38:cd:e3:83:
4d:46:c8:e4:28:5d:2a:7c:0e:2e:83:23:b7:cf:75:
fe:12:4b:4c:34:9e:1b:f4:c1:e4:5b:87:06:3e:06:
98:ea:97:b9:cf:cd:d3:30:d6:d4:fb:08:ce:37:60:
8f:cb:41:a5:bb:1e:3d:e9:84:0e:39:27:c5:3a:ec:
e2:06:80:e5:c1:3a:48:42:b1:93:f8:78:9f:4c:92:
5c:5b:4d:2f:0c:28:cc:56:8c:e5:60:bd:3b:4d:91:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:00:E4:C4:24:66:AB:BD:F8:F6:27:48:BB:31:3A:1D:D6:69:BD:5E
X509v3 Authority Key Identifier:
keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:48:34:1f:02:17:2a:20:b1:58:68:22:db:15:ef:33:2e:2b:
23:71:2e:0b:6e:f0:d5:78:0c:71:86:d5:68:5f:bb:8d:fa:2f:
e3:42:73:26:00:c3:44:98:d9:46:0f:8f:77:48:12:78:97:c6:
59:f3:8b:18:55:d5:e0:21:f7:31:71:36:2a:ac:98:a2:39:9c:
da:0b:19:e3:30:28:f4:b1:f2:84:97:b9:d6:99:4c:99:cb:91:
9c:98:70:ba:ba:b1:91:8f:e8:24:0f:86:54:bd:c5:54:c8:81:
f5:a3:9a:41:03:6d:18:40:ab:51:bc:ad:b7:42:27:da:68:1c:
dd:0a:7c:4a:17:9f:4e:d5:39:76:5e:37:83:52:e4:47:26:e8:
71:7e:b6:f4:94:86:b2:b9:0b:fc:93:be:4f:8a:01:f6:c1:6d:
32:40:fe:40:9e:f2:71:a9:47:9a:7d:83:3c:1d:24:c3:e0:4d:
91:4d:12:c6:b9:c2:b6:7e:50:32:33:a8:4a:75:ca:f6:2b:78:
3e:fc:be:f8:f6:56:ce:f6:d5:5c:9c:9b:3f:0b:73:9b:d5:e7:
51:9b:b8:9a:9d:b8:24:1e:50:5a:96:d1:db:39:65:1a:48:e4:
b7:12:f1:f1:07:d8:47:c6:7f:4d:99:58:47:e7:e3:6e:d1:2c:
da:b5:05:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRfqAnKQOdy/T39fGhCqBUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YWM5OWQ3N2E3YTFjODRkZDQ3ZjQzYmI3MjA1MWFhNzNi
MWFhZDYwHhcNMjUwODEwMDEwMDUxWhcNMjUwODExMDEwMDUxWjAzMTEwLwYDVQQD
EyhlZjAwZTRjNDI0NjZhYmJkZjhmNjI3NDhiYjMxM2ExZGQ2NjliZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tt3c1bWSx3qqS3VxzIQIQAzXg6d
w+S/FwipVrQJaeVRLDqiqjtMsOVFa4tBGDCxdDa6vdFUdYJF0nHEvBxZj+DnhbTA
4RW5dMYDKkw0anUDjzY0zlVbqSZdImm3E21abvAdXG3bqxCca+fOg4pkEbjfypjm
mPeEiCXPEpTT9Z2Q+COiY8Zqg4iq+00sZkcd6t//5cqHJ0/kmCm6iz/viDjN44NN
RsjkKF0qfA4ugyO3z3X+EktMNJ4b9MHkW4cGPgaY6pe5z83TMNbU+wjON2CPy0Gl
ux496YQOOSfFOuziBoDlwTpIQrGT+HifTJJcW00vDCjMVozlYL07TZEo7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8A5MQkZqu9+PYnSLsxOh3Wab1eMB8GA1UdIwQY
MBaAFPSsmdd6ehyE3Uf0O7cgUapzsarWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgt
NjZjY2E4MWU2YzA3LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgtNjZjY2E4MWU2YzA3
LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakg0HwIX
KiCxWGgi2xXvMy4rI3EuC27w1XgMcYbVaF+7jfov40JzJgDDRJjZRg+Pd0gSeJfG
WfOLGFXV4CH3MXE2KqyYojmc2gsZ4zAo9LHyhJe51plMmcuRnJhwurqxkY/oJA+G
VL3FVMiB9aOaQQNtGECrUbytt0In2mgc3Qp8ShefTtU5dl43g1LkRybocX629JSG
srkL/JO+T4oB9sFtMkD+QJ7ycalHmn2DPB0kw+BNkU0SxrnCtn5QMjOoSnXK9it4
Pvy++PZWzvbVXJybPwtzm9XnUZu4mp24JB5QWpbR2zllGkjktxLx8QfYR8Z/TZlY
R+fjbtEs2rUFsA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:45:19 2025 by rpki-client