Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
File: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json)
Hash identifier: uXBO0pGFE1wh+5yywu81oF4vGP7/aet8cEJ1jPO58Cs=
Subject key identifier: 3A:28:42:48:15:CE:39:B9:02:71:D5:5C:43:58:8D:DF:F8:39:01:B7
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Certificate issuer: /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial: 0198730649C20909C6DB629A7BD04D1BC5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
Manifest number: 1304
Signing time: Mon 04 Aug 2025 03:00:48 +0000
Manifest this update: Mon 04 Aug 2025 03:00:48 +0000
Manifest next update: Tue 05 Aug 2025 03:00:48 +0000
Files and hashes: 1: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: JGEyDUHZAZMrkfdckFPrHHylWJo5oLSmJ6V9DTPru0Q=)
2: FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa (hash: ld2MBpkdINa/HpitEI9hE8KrLNtvxY4fg+rJ1pVUK1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:49:c2:09:09:c6:db:62:9a:7b:d0:4d:1b:c5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Validity
Not Before: Aug 4 03:00:48 2025 GMT
Not After : Aug 5 03:00:48 2025 GMT
Subject: CN=3a28424815ce39b90271d55c43588ddff83901b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e3:b4:22:bd:f8:da:eb:40:9c:9e:9f:cc:45:
aa:48:87:c3:75:88:00:42:4f:f9:d5:0f:d0:7a:b7:
1c:07:dd:a2:a3:e6:db:d3:3b:07:6c:1a:c6:7b:53:
32:b9:d0:be:4f:e5:a3:6c:e6:fe:5d:13:5f:10:f0:
88:76:18:01:30:66:92:c7:1d:e4:e9:31:48:94:11:
c8:46:be:43:04:cf:32:64:81:14:4c:dc:e1:00:2c:
f4:3c:db:60:3b:ee:f8:08:d2:cf:3e:a0:a3:49:65:
f5:de:9c:f7:de:0e:4f:8b:de:00:19:66:c4:36:59:
42:6b:0f:77:96:51:24:80:6a:cd:5a:e3:5c:cf:3c:
a0:f3:b3:93:6e:95:79:78:d0:96:38:3a:09:72:e1:
af:03:88:c5:0d:be:f0:e1:70:a2:ec:c8:5f:49:d1:
0a:11:2c:1e:6b:13:d7:04:00:2b:c0:b0:61:46:19:
48:4a:e1:f6:8f:a8:24:69:96:ab:ec:d6:4d:cf:0a:
f2:5c:ca:39:c9:44:84:22:48:59:3c:66:e4:97:ac:
cd:5c:90:38:dc:57:71:86:31:25:0b:0d:c5:c2:31:
f8:f7:ec:df:93:ad:71:b2:4d:00:50:7b:94:28:ab:
76:01:cb:1e:fd:64:f3:91:a0:18:f1:33:14:a4:62:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:28:42:48:15:CE:39:B9:02:71:D5:5C:43:58:8D:DF:F8:39:01:B7
X509v3 Authority Key Identifier:
keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:be:4e:31:49:9a:db:91:4b:de:d0:69:64:44:07:76:33:14:
7a:e5:69:37:a5:30:93:11:a9:7d:20:b0:3d:ed:3a:65:7a:ed:
12:f6:e0:e2:7d:b9:c8:c3:c1:b1:d0:bb:f9:1d:cd:45:bf:22:
f0:87:04:cc:28:ac:8a:56:de:b3:a0:8a:d8:a7:a0:f1:c2:25:
36:18:ac:e3:93:4d:60:44:bd:65:bd:8e:9c:ab:30:d7:94:15:
49:d9:46:70:7b:7f:c0:ae:3d:50:fd:a4:98:e3:d6:3c:d3:c1:
96:96:48:df:dd:1e:d5:92:a9:08:a2:f6:29:c7:de:81:0c:d6:
33:29:5e:21:bd:dc:c9:78:01:a6:71:92:8b:ae:e4:23:c2:ac:
d0:a3:47:23:30:5d:55:ed:cf:7f:c2:88:b8:39:e4:d4:6f:e9:
5f:33:51:b5:5b:ad:35:e9:22:b8:c5:83:3f:4c:4a:1e:1f:28:
57:72:1b:8e:43:6a:86:ea:f7:ac:09:13:77:46:34:12:24:7d:
5a:45:60:58:4e:18:d3:dd:52:da:1e:92:8a:82:68:bd:dc:36:
19:59:e7:d5:93:93:a5:43:8a:b7:53:18:2b:b1:59:d4:60:64:
81:95:5b:03:36:71:9e:76:f8:b5:29:27:10:b1:89:8c:56:2c:
9d:d1:3d:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBknCCQnG22Kae9BNG8XjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzliYWE0NDI5ZGE3ODY1OTFiNzI1MjU4NTJlNmQ5N2Iz
MmMxZTgwHhcNMjUwODA0MDMwMDQ4WhcNMjUwODA1MDMwMDQ4WjAzMTEwLwYDVQQD
EygzYTI4NDI0ODE1Y2UzOWI5MDI3MWQ1NWM0MzU4OGRkZmY4MzkwMWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+O0Ir342utAnJ6fzEWqSIfDdYgA
Qk/51Q/QerccB92io+bb0zsHbBrGe1MyudC+T+WjbOb+XRNfEPCIdhgBMGaSxx3k
6TFIlBHIRr5DBM8yZIEUTNzhACz0PNtgO+74CNLPPqCjSWX13pz33g5Pi94AGWbE
NllCaw93llEkgGrNWuNczzyg87OTbpV5eNCWODoJcuGvA4jFDb7w4XCi7MhfSdEK
ESweaxPXBAArwLBhRhlISuH2j6gkaZar7NZNzwryXMo5yUSEIkhZPGbkl6zNXJA4
3FdxhjElCw3FwjH49+zfk61xsk0AUHuUKKt2Acse/WTzkaAY8TMUpGK7owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDooQkgVzjm5AnHVXENYjd/4OQG3MB8GA1UdIwQY
MBaAFPTJuqRCnaeGWRtyUlhS5tl7MsHoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzIt
YWY3ZGEyYjZlZGM1LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzItYWY3ZGEyYjZlZGM1
LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALb5OMUma
25FL3tBpZEQHdjMUeuVpN6UwkxGpfSCwPe06ZXrtEvbg4n25yMPBsdC7+R3NRb8i
8IcEzCisilbes6CK2Keg8cIlNhis45NNYES9Zb2OnKsw15QVSdlGcHt/wK49UP2k
mOPWPNPBlpZI390e1ZKpCKL2KcfegQzWMyleIb3cyXgBpnGSi67kI8Ks0KNHIzBd
Ve3Pf8KIuDnk1G/pXzNRtVutNekiuMWDP0xKHh8oV3IbjkNqhur3rAkTd0Y0EiR9
WkVgWE4Y091S2h6SioJovdw2GVnn1ZOTpUOKt1MYK7FZ1GBkgZVbAzZxnnb4tSkn
ELGJjFYsndE9jA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:15 2025 by rpki-client