Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: P3n20ZeAsYH0lsOYK9M50/lHAl6Bk80vsamDo3XYja8=
Subject key identifier: 71:BF:3C:F7:5E:FC:70:91:DB:D2:46:4C:B3:45:30:35:A2:F8:02:25
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 019881687F9C5BCC5D5379A1874D1AB48061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 0682
Signing time: Wed 06 Aug 2025 22:02:45 +0000
Manifest this update: Wed 06 Aug 2025 22:02:45 +0000
Manifest next update: Thu 07 Aug 2025 22:02:45 +0000
Files and hashes: 1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: EGmUAYYCtHluie2hhUTaNNq3h+FaI7sxnHsdb5NCZY8=)
2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:7f:9c:5b:cc:5d:53:79:a1:87:4d:1a:b4:80:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Aug 6 22:02:45 2025 GMT
Not After : Aug 7 22:02:45 2025 GMT
Subject: CN=71bf3cf75efc7091dbd2464cb3453035a2f80225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:d8:78:0d:35:88:c3:b8:b4:7e:2b:51:3f:
42:ca:b6:58:15:be:ad:cc:97:b5:2b:57:c5:c3:80:
3a:37:12:55:c5:9e:6f:e5:bd:18:04:4b:d8:70:53:
b2:95:86:1e:5a:52:a5:04:31:f3:ca:e9:08:ee:55:
dd:a5:82:32:fa:92:bb:ec:d8:83:4f:50:4c:ce:1d:
ac:47:14:c3:24:5e:7a:b6:eb:57:e8:22:0a:6e:e5:
4f:57:6f:ab:b2:a7:ae:5f:98:e9:2f:1e:ea:db:3d:
97:ae:a0:fb:17:b5:68:a4:78:73:a4:bb:72:d8:75:
27:b3:6c:0b:94:15:80:03:a9:2f:20:7f:79:ac:04:
d6:8f:31:72:bb:b8:fb:e6:c4:c0:b6:4a:c1:d5:b3:
f1:99:50:72:df:61:d3:68:c7:3a:c0:10:11:66:20:
6b:62:2d:cf:07:4c:5f:f8:42:a1:3d:4b:e0:c9:e4:
bd:f1:b4:c2:fd:f8:a6:22:b3:7e:e9:02:96:07:d2:
57:d6:08:cf:d5:0f:56:c4:d8:4f:24:f1:7c:2b:34:
29:39:b9:e7:10:cb:2a:9d:bf:87:7c:6e:b1:85:ce:
56:e2:63:af:51:9a:b4:19:0f:35:78:69:8c:a4:6c:
4a:76:99:fc:d9:54:46:e8:58:ce:5d:16:fe:fe:16:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BF:3C:F7:5E:FC:70:91:DB:D2:46:4C:B3:45:30:35:A2:F8:02:25
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cd:f4:41:08:1f:e2:18:9d:84:cc:bc:be:3c:7c:25:c4:d8:
fd:ee:f6:a8:59:10:88:11:c3:0e:88:79:3f:59:44:8f:7e:10:
ea:80:2a:0d:4e:b8:5f:d7:00:e5:f8:81:2a:7d:41:7d:e1:46:
0a:44:93:30:2b:9b:27:a0:46:0a:78:5e:d8:22:da:9c:eb:3f:
d8:a3:e9:c1:fa:fc:33:b5:0e:ff:64:0e:05:ab:ce:2f:4d:42:
9b:00:7a:50:55:18:72:51:cc:bf:3d:db:8b:b0:01:bc:f6:69:
25:4f:82:a5:d1:07:a0:00:0a:29:43:8b:d4:59:ef:46:f1:1c:
2c:a5:7d:6c:37:fa:92:73:ef:59:7e:b8:ca:79:c1:47:91:64:
6f:d2:8e:02:e3:0f:3c:e3:64:92:d9:62:d6:b8:c2:d0:cc:cf:
73:8b:66:a4:83:07:01:79:b8:b4:62:93:b5:be:cf:31:ad:56:
09:6d:f3:f2:b0:c9:83:32:90:87:3e:48:85:06:b6:11:c6:9e:
01:f7:1e:b6:a1:0d:b4:4b:f0:fe:e2:a1:cb:6b:7a:a9:d0:b9:
c0:34:7c:22:06:46:24:17:dc:56:30:be:89:04:7b:dd:2a:2a:
cd:28:b1:97:d5:47:03:35:89:9c:88:7d:99:cb:d2:0e:34:77:
cd:f7:3b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaH+cW8xdU3mhh00atIBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MmU5YTA0M2YzMTI4MzM2ZTNjOTdjMjU0MjU3NGM4YWQ5
MjlhYzkwHhcNMjUwODA2MjIwMjQ1WhcNMjUwODA3MjIwMjQ1WjAzMTEwLwYDVQQD
Eyg3MWJmM2NmNzVlZmM3MDkxZGJkMjQ2NGNiMzQ1MzAzNWEyZjgwMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA373YeA01iMO4tH4rUT9CyrZYFb6t
zJe1K1fFw4A6NxJVxZ5v5b0YBEvYcFOylYYeWlKlBDHzyukI7lXdpYIy+pK77NiD
T1BMzh2sRxTDJF56tutX6CIKbuVPV2+rsqeuX5jpLx7q2z2XrqD7F7VopHhzpLty
2HUns2wLlBWAA6kvIH95rATWjzFyu7j75sTAtkrB1bPxmVBy32HTaMc6wBARZiBr
Yi3PB0xf+EKhPUvgyeS98bTC/fimIrN+6QKWB9JX1gjP1Q9WxNhPJPF8KzQpObnn
EMsqnb+HfG6xhc5W4mOvUZq0GQ81eGmMpGxKdpn82VRG6FjOXRb+/hb8FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHG/PPde/HCR29JGTLNFMDWi+AIlMB8GA1UdIwQY
MBaAFPUumgQ/MSgzbjyXwlQldMitkprJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTkt
ZWZmOGI5NWQyMGM1LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTktZWZmOGI5NWQyMGM1
LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEM30QQgf
4hidhMy8vjx8JcTY/e72qFkQiBHDDoh5P1lEj34Q6oAqDU64X9cA5fiBKn1BfeFG
CkSTMCubJ6BGCnhe2CLanOs/2KPpwfr8M7UO/2QOBavOL01CmwB6UFUYclHMvz3b
i7ABvPZpJU+CpdEHoAAKKUOL1FnvRvEcLKV9bDf6knPvWX64ynnBR5Fkb9KOAuMP
PONkktli1rjC0MzPc4tmpIMHAXm4tGKTtb7PMa1WCW3z8rDJgzKQhz5IhQa2Ecae
AfcetqENtEvw/uKhy2t6qdC5wDR8IgZGJBfcVjC+iQR73SoqzSixl9VHAzWJnIh9
mcvSDjR3zfc7Fg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:23 2025 by rpki-client