Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: /ThT1pKyNXv0TQODI/qReQldsboardLtjkW1i/n+s7M=
Subject key identifier: 15:37:64:8E:2C:E6:A7:70:65:D8:D3:A9:2A:18:48:33:89:C9:F9:B2
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 01988DA23CD700CF9EBA92D1F73C2E8C3A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 07:01:16 +0000
Manifest this update: Sat 09 Aug 2025 07:01:16 +0000
Manifest next update: Sun 10 Aug 2025 07:01:16 +0000
Files and hashes: 1: jQsHaj5ydFI2fziM46K4sV8khMM.roa (hash: /VZu49ELcVRt0AgBq70u1HUIw5xDpnWHzAN7Dc2pulg=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: VEQ1DQVxUQM1RRrnhEBVdGv+SnJ/cH2i2L9wfzBA8uc=)
3: tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa (hash: lo7qT/3mV2HNXlaDbWGrnZSKU8gfCipkct2DwMPEdOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:3c:d7:00:cf:9e:ba:92:d1:f7:3c:2e:8c:3a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Aug 9 07:01:16 2025 GMT
Not After : Aug 10 07:01:16 2025 GMT
Subject: CN=1537648e2ce6a77065d8d3a92a18483389c9f9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:2d:9c:f1:85:a7:47:ab:c0:93:87:75:5b:
53:3d:49:12:6a:5e:a8:8d:5c:9b:d1:80:8e:91:35:
08:49:80:9a:f0:dc:e7:83:e8:35:ce:ca:53:4f:a1:
8d:1f:4b:d0:43:27:24:02:73:e3:66:5b:bd:8d:7e:
6c:86:a7:56:e2:69:5b:2b:1f:6f:34:eb:bf:0b:64:
06:19:be:af:e4:64:56:a2:b9:ca:d7:b9:e4:b1:64:
72:5c:6f:e2:a3:ce:bb:55:3f:ec:bf:3b:a1:ab:f5:
5b:7b:68:f1:cf:b6:3e:68:67:67:a5:e2:fe:ed:20:
08:f3:10:0d:21:44:2c:f0:05:8d:2e:a5:ea:75:ef:
43:2f:7f:b0:6e:a7:b2:c3:56:f5:d4:02:a4:91:d2:
c2:d2:0f:82:41:d8:7f:72:b9:98:06:57:18:2e:50:
4c:13:6f:36:41:a0:1c:1e:9b:65:5e:2f:5e:0d:15:
c7:cf:66:14:6c:44:63:87:c6:06:83:b8:81:2b:4e:
96:0a:9b:60:eb:81:63:dd:72:74:91:f5:51:71:dd:
61:05:b3:7e:be:e2:65:29:38:b8:18:93:22:06:e9:
75:3b:e6:74:b6:7a:60:cf:2b:e1:49:88:59:17:35:
e9:05:9e:7b:fb:1f:31:3d:fe:e4:52:6b:25:ba:6f:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:37:64:8E:2C:E6:A7:70:65:D8:D3:A9:2A:18:48:33:89:C9:F9:B2
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:18:b6:6b:34:20:af:bd:c3:06:21:d9:55:5e:3d:80:e0:50:
e5:ca:47:55:41:d1:11:66:27:83:aa:a8:f7:4f:83:0c:bf:63:
50:a0:66:76:a4:48:55:f4:14:0d:2a:44:55:9d:b6:1d:b2:cd:
01:c6:11:df:7f:cc:6c:18:a5:2d:14:44:e0:44:0e:02:66:37:
fc:09:0b:fa:18:09:56:ca:a4:d0:de:8a:0a:3e:6a:66:43:b3:
65:97:21:a6:8f:9f:d3:87:8e:6e:9e:eb:69:a0:85:af:fa:9b:
28:8e:5a:25:50:ad:f7:83:50:1f:17:2e:60:93:7c:c0:77:f7:
c1:3e:84:76:9c:e5:ca:f3:2f:6a:e9:60:a3:ef:91:5f:0d:fb:
3a:79:75:b5:41:7b:ca:c1:a1:94:0f:3b:6e:d7:65:eb:b9:0f:
49:bf:0b:45:16:f7:cf:a5:fb:b9:ea:39:14:7f:9a:39:d6:e4:
49:df:c2:89:d9:7c:31:50:9b:b1:e0:a2:10:ff:60:16:17:8c:
08:4d:52:55:21:6b:d7:92:88:0a:66:6d:cd:a4:ad:86:42:b9:
d3:67:12:7e:15:55:96:2e:d8:76:66:cc:20:71:64:1a:eb:85:
19:1c:de:84:3e:8d:35:35:82:4f:07:03:b0:be:df:59:4d:e6:
32:a8:04:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNojzXAM+eupLR9zwujDpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDE0Y2UxOGE4ZjFkMDVhNmEzNTM5MGFmNGFlYzhjZTZj
YzU2ZWMwHhcNMjUwODA5MDcwMTE2WhcNMjUwODEwMDcwMTE2WjAzMTEwLwYDVQQD
EygxNTM3NjQ4ZTJjZTZhNzcwNjVkOGQzYTkyYTE4NDgzMzg5YzlmOWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0MtnPGFp0erwJOHdVtTPUkSal6o
jVyb0YCOkTUISYCa8Nzng+g1zspTT6GNH0vQQyckAnPjZlu9jX5shqdW4mlbKx9v
NOu/C2QGGb6v5GRWornK17nksWRyXG/io867VT/svzuhq/Vbe2jxz7Y+aGdnpeL+
7SAI8xANIUQs8AWNLqXqde9DL3+wbqeyw1b11AKkkdLC0g+CQdh/crmYBlcYLlBM
E282QaAcHptlXi9eDRXHz2YUbERjh8YGg7iBK06WCptg64Fj3XJ0kfVRcd1hBbN+
vuJlKTi4GJMiBul1O+Z0tnpgzyvhSYhZFzXpBZ57+x8xPf7kUmslum/HQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBU3ZI4s5qdwZdjTqSoYSDOJyfmyMB8GA1UdIwQY
MBaAFLPRTOGKjx0FpqNTkK9K7IzmzFbsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEt
NTJjNjk5ZDM4NmNkLzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEtNTJjNjk5ZDM4NmNk
LzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhi2azQg
r73DBiHZVV49gOBQ5cpHVUHREWYng6qo90+DDL9jUKBmdqRIVfQUDSpEVZ22HbLN
AcYR33/MbBilLRRE4EQOAmY3/AkL+hgJVsqk0N6KCj5qZkOzZZchpo+f04eObp7r
aaCFr/qbKI5aJVCt94NQHxcuYJN8wHf3wT6EdpzlyvMvaulgo++RXw37Onl1tUF7
ysGhlA87btdl67kPSb8LRRb3z6X7ueo5FH+aOdbkSd/Cidl8MVCbseCiEP9gFheM
CE1SVSFr15KICmZtzaSthkK502cSfhVVli7YdmbMIHFkGuuFGRzehD6NNTWCTwcD
sL7fWU3mMqgEiA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:41:46 2025 by rpki-client