Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
File: 9U47eX9Lo36_cYmkwU8FINfPMNc.mft (raw, json)
Hash identifier: lJi8DF9+qL6oG3oMgiPzMs5dz0Qgkj973041vUdiNUI=
Subject key identifier: 0A:BC:9F:B8:4E:A7:2A:F8:09:B4:71:5E:B1:01:61:2E:CC:60:A2:3B
Authority key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Certificate issuer: /CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Certificate serial: 01988BB383255F95F141C355BE620D613746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
Manifest number: 033C
Signing time: Fri 08 Aug 2025 22:00:54 +0000
Manifest this update: Fri 08 Aug 2025 22:00:54 +0000
Manifest next update: Sat 09 Aug 2025 22:00:54 +0000
Files and hashes: 1: 9U47eX9Lo36_cYmkwU8FINfPMNc.crl (hash: RqeFMBJzDZlfIsj4uiieNjcu2GZCYaImFZGVgmpDY9w=)
2: UmpOhRez3moOZWrjBKIN45JkCE8.roa (hash: rPkye9amYErKpRGECf5NJc6OYwjs4QcPoervOMLXjak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:83:25:5f:95:f1:41:c3:55:be:62:0d:61:37:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Validity
Not Before: Aug 8 22:00:54 2025 GMT
Not After : Aug 9 22:00:54 2025 GMT
Subject: CN=0abc9fb84ea72af809b4715eb101612ecc60a23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:76:b3:98:31:cf:15:fa:cb:51:a2:48:cd:
2d:ee:54:85:29:6c:b1:84:87:be:a8:11:81:34:66:
c5:3c:cd:7d:7c:1a:ba:84:a5:64:eb:27:76:d8:16:
33:fb:99:90:25:02:35:26:94:59:4f:2e:2d:a4:3c:
cf:69:66:73:0c:4c:b0:c0:32:27:16:d6:29:6e:e5:
e0:19:0e:3d:99:3a:98:ed:4b:56:d5:42:64:26:50:
43:23:a1:f3:b5:69:16:05:ea:54:07:37:5b:cf:ee:
23:f0:9d:7f:61:a0:b0:f5:f3:a5:35:f1:91:56:15:
bc:d9:9a:22:de:02:e9:fb:6c:83:0c:e3:65:1a:52:
55:6e:b1:dd:44:9b:ee:93:b2:bc:20:75:a6:19:50:
e5:ed:d3:0a:75:ac:cd:73:b3:4f:20:23:39:48:d2:
54:ee:6b:5f:cd:57:28:ab:a2:3f:23:08:8a:05:c5:
f5:85:99:ef:ca:d1:84:ee:d7:8e:33:89:93:71:40:
e4:09:8d:dd:2d:2e:da:bf:a4:e2:7a:76:b6:21:d8:
0b:b7:75:65:2c:1a:e8:72:94:7c:1d:6b:b3:a0:eb:
16:7d:9c:e3:85:7c:aa:2f:fb:e2:93:1d:a0:96:f7:
06:d9:fc:a7:ea:49:db:50:a6:b8:14:8e:49:d2:be:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BC:9F:B8:4E:A7:2A:F8:09:B4:71:5E:B1:01:61:2E:CC:60:A2:3B
X509v3 Authority Key Identifier:
keyid:F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:31:e4:6c:7b:8b:cf:56:92:35:7a:ed:61:58:35:4a:02:8f:
17:c4:3a:0e:41:8d:91:18:d1:6a:46:13:a7:32:4f:a3:2e:d5:
84:7c:c2:02:67:d0:15:ed:29:4d:f8:ec:57:4f:4c:51:57:23:
81:c4:75:86:ef:a4:02:89:ed:fe:2c:da:df:6a:63:13:e3:75:
f5:70:f6:e7:9f:e3:64:94:84:9f:63:b5:5c:16:4c:2a:d7:11:
ac:fe:61:cb:dd:bc:29:36:91:78:c7:b3:7b:12:f2:01:78:a6:
08:c8:68:a0:4a:03:03:d8:26:35:ee:3c:2a:6d:23:00:0a:ef:
49:f5:c5:fb:eb:d8:ed:ee:11:16:c9:2a:bd:c2:5e:d8:d4:04:
e4:6d:67:6b:46:4f:c0:8f:b0:8b:15:45:89:68:96:b3:d4:b4:
92:14:d7:8b:4c:ec:da:93:df:8d:b5:15:cd:29:d7:11:30:e9:
fa:d2:29:73:7f:01:c6:ea:03:3a:52:49:50:98:8d:bb:dd:7e:
12:91:72:6c:5d:7a:91:d8:4b:b0:db:67:a4:74:e1:5e:3e:27:
60:de:79:8e:65:f8:d8:ed:ec:a1:11:06:a6:52:7a:9e:08:67:
7a:5e:67:bf:cb:f9:a9:26:15:20:97:87:2c:22:fc:d4:7c:21:
ff:a1:b2:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs4MlX5XxQcNVvmINYTdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NGUzYjc5N2Y0YmEzN2ViZjcxODlhNGMxNGYwNTIwZDdj
ZjMwZDcwHhcNMjUwODA4MjIwMDU0WhcNMjUwODA5MjIwMDU0WjAzMTEwLwYDVQQD
EygwYWJjOWZiODRlYTcyYWY4MDliNDcxNWViMTAxNjEyZWNjNjBhMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYt2s5gxzxX6y1GiSM0t7lSFKWyx
hIe+qBGBNGbFPM19fBq6hKVk6yd22BYz+5mQJQI1JpRZTy4tpDzPaWZzDEywwDIn
FtYpbuXgGQ49mTqY7UtW1UJkJlBDI6HztWkWBepUBzdbz+4j8J1/YaCw9fOlNfGR
VhW82Zoi3gLp+2yDDONlGlJVbrHdRJvuk7K8IHWmGVDl7dMKdazNc7NPICM5SNJU
7mtfzVcoq6I/IwiKBcX1hZnvytGE7teOM4mTcUDkCY3dLS7av6Tiena2IdgLt3Vl
LBrocpR8HWuzoOsWfZzjhXyqL/vikx2glvcG2fyn6knbUKa4FI5J0r77fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAq8n7hOpyr4CbRxXrEBYS7MYKI7MB8GA1UdIwQY
MBaAFPVOO3l/S6N+v3GJpMFPBSDXzzDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVU0N2VYOUxvMzZfY1lta3dVOEZJTmZQTU5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yNTk4NzktN2IxZS00NTQ0LTgwMTMt
MTVlNDFjNDBhZWM5LzEvOVU0N2VYOUxvMzZfY1lta3dVOEZJTmZQTU5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8yNTk4NzktN2IxZS00NTQ0LTgwMTMtMTVlNDFjNDBhZWM5
LzEvOVU0N2VYOUxvMzZfY1lta3dVOEZJTmZQTU5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjHkbHuL
z1aSNXrtYVg1SgKPF8Q6DkGNkRjRakYTpzJPoy7VhHzCAmfQFe0pTfjsV09MUVcj
gcR1hu+kAont/iza32pjE+N19XD255/jZJSEn2O1XBZMKtcRrP5hy928KTaReMez
exLyAXimCMhooEoDA9gmNe48Km0jAArvSfXF++vY7e4RFskqvcJe2NQE5G1na0ZP
wI+wixVFiWiWs9S0khTXi0zs2pPfjbUVzSnXETDp+tIpc38BxuoDOlJJUJiNu91+
EpFybF16kdhLsNtnpHThXj4nYN55jmX42O3soREGplJ6nghnel5nv8v5qSYVIJeH
LCL81Hwh/6Gy5w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:45:51 2025 by rpki-client