Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: TdWVM916ThA2W18pPdvwC7rQhXDXAIbxvFm1hKDBIQI=
Subject key identifier: 5B:F1:33:31:6C:BC:4C:88:E4:0D:25:71:E4:48:94:8C:E4:7E:4F:00
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 019768BC36C11DCA47DE9ED67433F208DF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 10:00:54 +0000
Manifest this update: Fri 13 Jun 2025 10:00:54 +0000
Manifest next update: Sat 14 Jun 2025 10:00:54 +0000
Files and hashes: 1: 3gQqwuDknMD1by1_10QyLFjqTSQ.roa (hash: 7rS6ATpFIQATm/1nB63KRTZ9v2IEBgVrsScfZWZHuYo=)
2: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: 6hpf4giy3pHFJ8CmZhrV7t23kNFW4+VXSkOpdfLzHec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:36:c1:1d:ca:47:de:9e:d6:74:33:f2:08:df:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Jun 13 10:00:54 2025 GMT
Not After : Jun 14 10:00:54 2025 GMT
Subject: CN=5bf133316cbc4c88e40d2571e448948ce47e4f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:46:d3:cc:81:cc:07:ea:51:37:b8:6a:bd:
12:05:1a:99:26:5a:7e:aa:ba:d5:b3:bc:5f:62:8f:
37:71:3e:33:9f:24:96:fd:64:35:0e:0e:91:00:8b:
c1:69:31:14:27:92:18:c2:97:17:d1:3e:be:ac:89:
79:34:8f:ad:b1:7a:fd:b2:e6:dd:7c:44:48:ec:13:
65:5f:95:7d:4c:12:69:5c:f6:4f:82:95:17:ef:71:
b0:8a:c0:08:d0:cf:e8:cf:bb:8b:f4:9b:99:f5:3a:
ec:76:08:7b:e0:78:6b:dd:a4:0c:09:a3:52:ff:7e:
11:14:c4:15:53:a9:04:b7:a2:87:71:ae:13:56:72:
97:5f:71:23:bc:32:5f:41:25:3b:c3:ae:e5:f1:c6:
ae:51:be:24:3c:e1:92:8d:91:05:2b:b9:8d:19:ec:
5c:44:63:88:0b:36:0d:a4:2d:14:0e:c9:c5:78:a3:
a1:bc:73:61:9c:12:af:52:0c:25:19:56:b0:2a:f0:
da:2b:ca:f2:de:9c:b4:1c:4d:f7:bf:1d:97:9d:c0:
1d:87:d3:cc:3e:f3:0f:2b:91:0f:32:eb:6f:76:5a:
69:b5:fc:5b:9e:a7:f0:22:18:98:c4:79:6f:be:70:
19:c4:d0:6e:f3:94:5d:86:24:70:7c:46:14:f7:3a:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F1:33:31:6C:BC:4C:88:E4:0D:25:71:E4:48:94:8C:E4:7E:4F:00
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:87:0f:e4:40:17:77:72:58:78:67:c3:50:92:ae:a9:0a:8d:
ee:00:fd:56:fe:c1:93:f6:71:c2:9a:35:27:1d:a5:b9:06:19:
ad:78:b8:52:96:e9:36:c5:91:a5:1a:58:2f:12:c1:f8:c9:c8:
f9:ed:b5:8a:9c:3f:c3:f4:6c:8f:3f:64:35:90:25:74:83:da:
7c:a1:f7:e1:67:93:e7:5c:59:21:a4:1e:a6:0a:4a:b2:d5:f0:
81:17:74:9c:18:4f:e2:4a:0c:f1:8c:51:ee:3f:b7:f5:db:a0:
ad:d0:48:74:a9:08:3b:49:d9:63:68:9c:f8:7c:aa:53:ff:b6:
88:65:4a:6d:8e:88:7a:ae:13:39:5f:66:57:e1:bc:43:7f:db:
d3:dc:f5:2b:45:af:67:8b:ae:6c:59:94:c2:a1:c6:5a:81:43:
bd:85:4b:a7:ff:4c:15:60:2c:7c:70:ed:4e:85:80:62:45:a4:
7e:1a:9b:54:31:9a:60:d2:04:48:b3:48:93:a7:b5:c4:f8:8c:
8d:39:e2:d2:6e:34:9e:7b:54:04:64:c7:73:4a:87:95:28:9f:
27:9e:83:37:82:b9:a5:5e:fb:ee:03:00:aa:25:37:81:5a:40:
d1:fd:59:32:5b:f6:58:cc:75:43:02:f7:35:e6:d8:76:b6:c2:
22:11:9b:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovDbBHcpH3p7WdDPyCN+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YTE3MjJlOGJhZGRjMzU4YTE1ODc0MjY1YjQ2Njc0M2U3
MDM2NTYwHhcNMjUwNjEzMTAwMDU0WhcNMjUwNjE0MTAwMDU0WjAzMTEwLwYDVQQD
Eyg1YmYxMzMzMTZjYmM0Yzg4ZTQwZDI1NzFlNDQ4OTQ4Y2U0N2U0ZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmFG08yBzAfqUTe4ar0SBRqZJlp+
qrrVs7xfYo83cT4znySW/WQ1Dg6RAIvBaTEUJ5IYwpcX0T6+rIl5NI+tsXr9subd
fERI7BNlX5V9TBJpXPZPgpUX73GwisAI0M/oz7uL9JuZ9Trsdgh74Hhr3aQMCaNS
/34RFMQVU6kEt6KHca4TVnKXX3EjvDJfQSU7w67l8cauUb4kPOGSjZEFK7mNGexc
RGOICzYNpC0UDsnFeKOhvHNhnBKvUgwlGVawKvDaK8ry3py0HE33vx2XncAdh9PM
PvMPK5EPMutvdlpptfxbnqfwIhiYxHlvvnAZxNBu85RdhiRwfEYU9zoQNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvxMzFsvEyI5A0lceRIlIzkfk8AMB8GA1UdIwQY
MBaAFPahci6Lrdw1ihWHQmW0ZnQ+cDZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85Y2NmNzItZjJkZi00NWI2LTkzN2It
NmUwNzkwNjliNjViLzEvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy85Y2NmNzItZjJkZi00NWI2LTkzN2ItNmUwNzkwNjliNjVi
LzEvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIcP5EAX
d3JYeGfDUJKuqQqN7gD9Vv7Bk/Zxwpo1Jx2luQYZrXi4UpbpNsWRpRpYLxLB+MnI
+e21ipw/w/Rsjz9kNZAldIPafKH34WeT51xZIaQepgpKstXwgRd0nBhP4koM8YxR
7j+39dugrdBIdKkIO0nZY2ic+HyqU/+2iGVKbY6Ieq4TOV9mV+G8Q3/b09z1K0Wv
Z4uubFmUwqHGWoFDvYVLp/9MFWAsfHDtToWAYkWkfhqbVDGaYNIESLNIk6e1xPiM
jTni0m40nntUBGTHc0qHlSifJ56DN4K5pV777gMAqiU3gVpA0f1ZMlv2WMx1QwL3
NebYdrbCIhGblw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:54 2025 by rpki-client