Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: lETcZQczgQbJxOIBytAc5I9NzQIIhXavg7AueoyHzbI=
Subject key identifier: FC:0E:51:DE:30:14:E4:25:E7:CE:59:09:69:E9:C7:99:7F:F2:6B:14
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 0197722D01DA552AFFF577153F3DEA42A584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 03EA
Signing time: Sun 15 Jun 2025 06:00:41 +0000
Manifest this update: Sun 15 Jun 2025 06:00:41 +0000
Manifest next update: Mon 16 Jun 2025 06:00:41 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: IcSGEE+mJ2StEPO+7Uy7VIC5Odc29JdJDS/O6NTQlHM=)
2: iJSQx0f1nTa0-CmNbadm7Gos7IA.roa (hash: LXabEDWzH1fx8QmFW8g5Pa/8Oh8pnxFijMUOQc1WwTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:01:da:55:2a:ff:f5:77:15:3f:3d:ea:42:a5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Jun 15 06:00:41 2025 GMT
Not After : Jun 16 06:00:41 2025 GMT
Subject: CN=fc0e51de3014e425e7ce590969e9c7997ff26b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5f:6c:91:af:0f:33:de:f6:32:ea:97:00:dc:
f4:c9:62:d0:c9:0f:76:2d:0a:22:05:a5:f4:45:2c:
e0:ee:30:d8:45:48:22:da:c8:c7:55:2e:a6:5a:4f:
e7:17:40:b9:23:27:98:ea:5e:2c:09:4e:b6:9a:8a:
af:72:4f:0a:59:dd:69:ee:4f:c3:c8:b3:ce:96:96:
8b:32:4d:bf:92:f4:99:20:e5:31:1b:a1:57:63:ae:
4b:10:b1:b6:fa:7b:1b:d2:ea:34:4e:12:35:0c:46:
ad:ea:fa:36:96:3c:61:39:05:ca:18:5c:1b:2f:aa:
e5:d1:47:5a:7a:0f:23:6b:4e:b0:bd:dc:45:98:74:
74:92:c0:1c:b8:bb:13:28:47:cf:9d:3d:fc:f7:22:
38:9f:ba:27:e3:79:87:59:f6:88:69:1d:f2:2a:c8:
c9:13:e6:89:98:90:0a:c5:ab:ff:c4:8b:28:9a:fa:
22:73:77:0f:bc:42:25:2d:6e:bb:6d:bd:ee:8d:75:
cc:76:a6:8e:dc:a7:90:24:20:37:46:b0:17:52:03:
f5:06:5f:bc:a8:e7:73:68:2e:d0:ed:aa:71:82:5a:
85:c6:54:ba:68:8d:f0:d9:54:8c:54:33:de:74:2a:
72:75:55:aa:c1:b5:16:78:30:d9:af:0c:36:97:7b:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0E:51:DE:30:14:E4:25:E7:CE:59:09:69:E9:C7:99:7F:F2:6B:14
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:03:93:fb:b1:63:29:f1:f1:d8:a2:c8:ea:98:72:03:e6:e7:
5a:9c:2b:d4:f3:e9:eb:53:a8:c3:16:1e:79:8e:c8:08:cc:c2:
57:7b:ae:fc:62:d7:d3:5e:1a:20:32:37:e3:ca:91:e1:0e:9a:
76:d8:4e:28:77:c5:fc:65:07:4b:98:4d:75:0b:81:fc:f0:20:
f4:e0:14:30:d1:c2:fe:00:f2:3b:f4:57:0f:49:c4:05:4c:76:
7b:c7:5b:9e:18:97:5d:9c:b5:33:c9:ae:6d:ec:e5:fa:87:47:
58:19:03:24:3f:c8:4c:6f:8b:d2:d1:86:8e:e6:43:94:52:17:
e2:95:8a:1f:7d:27:c3:f5:1c:fb:8d:8d:ab:83:b7:6c:5f:1e:
56:84:73:1b:0b:98:4d:16:29:a6:2b:ed:63:d9:8a:a2:0f:75:
cd:3e:e2:5c:62:61:d2:18:7a:44:07:e4:34:80:c5:52:04:90:
aa:30:3a:0a:e2:29:35:fd:75:7d:a9:09:65:63:8c:04:61:72:
0c:1f:3e:f0:62:95:b5:0f:b5:89:d7:c2:97:da:cf:1c:31:c2:
58:88:65:4a:15:1a:55:7b:2d:6b:84:2f:6a:4e:41:5e:71:ef:
e0:86:08:c0:fb:f5:11:12:8b:c6:df:76:cf:3f:ec:d3:99:a1:
c9:b4:2a:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLQHaVSr/9XcVPz3qQqWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMWY2ZDkyNGQ2ZjZjYzBlOTQwODM3ZDkzMDFmY2U3MzIw
NjU3NzEwHhcNMjUwNjE1MDYwMDQxWhcNMjUwNjE2MDYwMDQxWjAzMTEwLwYDVQQD
EyhmYzBlNTFkZTMwMTRlNDI1ZTdjZTU5MDk2OWU5Yzc5OTdmZjI2YjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F9ska8PM972MuqXANz0yWLQyQ92
LQoiBaX0RSzg7jDYRUgi2sjHVS6mWk/nF0C5IyeY6l4sCU62moqvck8KWd1p7k/D
yLPOlpaLMk2/kvSZIOUxG6FXY65LELG2+nsb0uo0ThI1DEat6vo2ljxhOQXKGFwb
L6rl0Udaeg8ja06wvdxFmHR0ksAcuLsTKEfPnT389yI4n7on43mHWfaIaR3yKsjJ
E+aJmJAKxav/xIsomvoic3cPvEIlLW67bb3ujXXMdqaO3KeQJCA3RrAXUgP1Bl+8
qOdzaC7Q7apxglqFxlS6aI3w2VSMVDPedCpydVWqwbUWeDDZrww2l3sm+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwOUd4wFOQl585ZCWnpx5l/8msUMB8GA1UdIwQY
MBaAFNEfbZJNb2zA6UCDfZMB/OcyBldxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgt
OWVkOTcxMGQ2ZWEyLzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgtOWVkOTcxMGQ2ZWEy
LzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQOT+7Fj
KfHx2KLI6phyA+bnWpwr1PPp61OowxYeeY7ICMzCV3uu/GLX014aIDI348qR4Q6a
dthOKHfF/GUHS5hNdQuB/PAg9OAUMNHC/gDyO/RXD0nEBUx2e8dbnhiXXZy1M8mu
bezl+odHWBkDJD/ITG+L0tGGjuZDlFIX4pWKH30nw/Uc+42Nq4O3bF8eVoRzGwuY
TRYppivtY9mKog91zT7iXGJh0hh6RAfkNIDFUgSQqjA6CuIpNf11fakJZWOMBGFy
DB8+8GKVtQ+1idfCl9rPHDHCWIhlShUaVXsta4Qvak5BXnHv4IYIwPv1ERKLxt92
zz/s05mhybQqjw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:31:36 2025 by rpki-client