
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: D3pK42VPr6kSyC0hElnwlmQy8E0knuaTh4+af41mNRI=
Subject key identifier: A3:07:A6:2D:34:FC:4B:4A:9D:17:1E:8D:4A:23:CF:54:36:3D:78:F4
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 0197722D05DDB42F16F2BBB5649226B859AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 143F
Signing time: Sun 15 Jun 2025 06:00:42 +0000
Manifest this update: Sun 15 Jun 2025 06:00:42 +0000
Manifest next update: Mon 16 Jun 2025 06:00:42 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: d04NVaRv2HMVmgpcxV84DwnYbwIkdEBu1dYzn2p6F7Q=)
2: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (hash: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:05:dd:b4:2f:16:f2:bb:b5:64:92:26:b8:59:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Jun 15 06:00:42 2025 GMT
Not After : Jun 16 06:00:42 2025 GMT
Subject: CN=a307a62d34fc4b4a9d171e8d4a23cf54363d78f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:04:07:1e:45:05:01:ab:42:be:aa:cd:01:
9a:8b:94:7f:8a:73:2d:bd:d3:39:48:ef:6a:ef:3f:
9e:1d:ad:d3:8f:cf:ef:d8:3a:47:aa:42:5e:b7:43:
21:be:5c:8e:37:a6:c1:ae:c6:01:f6:75:84:72:68:
79:1d:80:29:3f:b8:7c:8d:5f:28:45:d3:33:8b:7f:
79:13:23:83:d2:23:89:c1:2b:d1:ee:ff:91:a2:7e:
be:ac:47:f5:16:48:eb:8d:28:c9:06:b6:7d:65:9a:
e6:91:cc:55:a0:8f:a8:63:52:48:22:a4:5c:be:dd:
b7:81:2f:f9:79:db:77:03:56:49:f1:61:6e:7d:1a:
2e:72:b1:80:0a:7c:d6:4e:05:da:26:69:6a:12:ff:
08:9a:d1:81:69:e5:ab:7e:3f:ac:2f:6a:ab:83:e5:
8d:9a:bf:6e:77:29:f8:e6:50:89:76:19:e5:1b:f5:
c8:0b:00:18:d9:70:ce:c9:45:03:32:89:fe:3b:72:
95:71:63:34:6c:66:81:a3:2a:62:08:64:dd:97:7f:
6c:5d:8d:97:aa:c1:76:17:ee:17:62:fc:5a:bc:55:
d1:d8:4c:78:3e:58:a6:02:db:6d:4c:7b:62:0e:b5:
ef:44:75:87:a6:86:de:55:9c:a0:86:68:bf:49:1f:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:07:A6:2D:34:FC:4B:4A:9D:17:1E:8D:4A:23:CF:54:36:3D:78:F4
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c8:0d:bc:51:ec:41:f4:0c:8e:5a:29:36:60:bd:5a:7f:ac:
d7:ca:fe:46:53:d8:a1:4b:6e:5d:a5:77:d2:c5:49:0b:28:b4:
d1:bd:fa:6c:b2:71:6d:c1:79:d6:4e:1e:d2:79:dc:ac:0f:a4:
f5:7f:d2:38:21:9f:6c:96:fd:77:f6:91:85:9d:2f:f5:d6:6b:
32:d0:86:84:47:76:1c:61:fa:8b:07:b2:ad:87:a1:59:15:dc:
5c:7d:82:ed:5b:bb:f1:bf:36:9c:8f:0d:7c:2f:f4:f3:b9:4e:
88:51:85:14:cc:5d:92:35:62:0d:34:b4:bf:7d:4a:72:46:93:
74:e1:0b:a4:eb:6d:bc:93:f7:4d:2b:9d:81:d3:ee:53:13:6e:
41:55:36:cc:59:ef:13:86:31:66:21:33:47:ff:ff:7d:b0:12:
66:38:37:4a:b8:de:7d:48:a2:e1:c1:c9:ca:d7:68:7c:6a:b3:
a1:1c:fb:9c:39:e6:d3:4d:6b:51:01:d8:e2:cc:71:60:4a:37:
c2:96:81:df:47:f9:8e:38:45:a8:61:55:a4:e8:5e:bd:68:6a:
55:6e:d6:7c:1b:e5:24:4f:04:f0:6d:6d:fd:ea:1f:81:56:f0:
16:31:2b:52:ea:6a:a8:23:e9:a3:c3:84:04:6f:66:48:ec:ef:
ca:00:a4:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLQXdtC8W8ru1ZJImuFmuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NGFkNDVkMjJiNWYzY2YyZTcxY2UwYWMwMTA3NGI3Y2Qy
MWFjNTcwHhcNMjUwNjE1MDYwMDQyWhcNMjUwNjE2MDYwMDQyWjAzMTEwLwYDVQQD
EyhhMzA3YTYyZDM0ZmM0YjRhOWQxNzFlOGQ0YTIzY2Y1NDM2M2Q3OGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot0EBx5FBQGrQr6qzQGai5R/inMt
vdM5SO9q7z+eHa3Tj8/v2DpHqkJet0MhvlyON6bBrsYB9nWEcmh5HYApP7h8jV8o
RdMzi395EyOD0iOJwSvR7v+Ron6+rEf1FkjrjSjJBrZ9ZZrmkcxVoI+oY1JIIqRc
vt23gS/5edt3A1ZJ8WFufRoucrGACnzWTgXaJmlqEv8ImtGBaeWrfj+sL2qrg+WN
mr9udyn45lCJdhnlG/XICwAY2XDOyUUDMon+O3KVcWM0bGaBoypiCGTdl39sXY2X
qsF2F+4XYvxavFXR2Ex4PlimAtttTHtiDrXvRHWHpobeVZyghmi/SR+S5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMHpi00/EtKnRcejUojz1Q2PXj0MB8GA1UdIwQY
MBaAFPZK1F0itfPPLnHOCsAQdLfNIaxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2Qt
Njk5YjIzNGZjNzhjLzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2QtNjk5YjIzNGZjNzhj
LzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisgNvFHs
QfQMjlopNmC9Wn+s18r+RlPYoUtuXaV30sVJCyi00b36bLJxbcF51k4e0nncrA+k
9X/SOCGfbJb9d/aRhZ0v9dZrMtCGhEd2HGH6iweyrYehWRXcXH2C7Vu78b82nI8N
fC/087lOiFGFFMxdkjViDTS0v31KckaTdOELpOttvJP3TSudgdPuUxNuQVU2zFnv
E4YxZiEzR///fbASZjg3SrjefUii4cHJytdofGqzoRz7nDnm001rUQHY4sxxYEo3
wpaB30f5jjhFqGFVpOhevWhqVW7WfBvlJE8E8G1t/eofgVbwFjErUupqqCPpo8OE
BG9mSOzvygCkYA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:20:28 2025 by rpki-client