Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: aj13dECXdHi06+c9vo6wPm2nb6L2WUNluSrkdODrPVY=
Subject key identifier: 7A:C5:F4:BE:FD:81:E0:FD:1B:65:8F:E0:5D:C6:FC:A1:C9:62:4E:92
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 01978545F9A80A09113221768B332ED668F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0CA9
Signing time: Wed 18 Jun 2025 23:00:44 +0000
Manifest this update: Wed 18 Jun 2025 23:00:44 +0000
Manifest next update: Thu 19 Jun 2025 23:00:44 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: kfyJycq6TpUPCPzp9FXzoZJywpAGXZkSIJxllwSJBP8=)
2: B8bTTGpK1L-pMyO-WGFk_7H-LC8.roa (hash: r0JNxuBgg4on067YK5COQPlyCkk+tp458uDvr2IE4z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:45:f9:a8:0a:09:11:32:21:76:8b:33:2e:d6:68:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Jun 18 23:00:44 2025 GMT
Not After : Jun 19 23:00:44 2025 GMT
Subject: CN=7ac5f4befd81e0fd1b658fe05dc6fca1c9624e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:32:bd:09:3a:0b:f3:5c:f2:60:2c:1b:de:
92:9d:04:3b:63:24:10:f7:27:c0:22:95:8c:2e:f6:
00:d1:13:bb:62:08:c9:9d:14:0b:34:fc:a7:b1:8a:
79:18:f7:48:8a:83:84:51:29:84:f1:05:13:3b:75:
05:b6:13:11:63:e4:ec:6f:66:5f:ef:12:20:72:8b:
7f:13:84:99:be:df:5b:fd:9d:30:a9:ed:a7:ca:ae:
d5:12:c5:6f:a4:67:50:bd:80:a6:d8:be:9c:3b:7c:
70:5c:e1:64:e6:ac:62:43:e3:d9:41:10:a1:7b:53:
71:b8:b3:a2:d5:fb:2f:7f:b6:81:c1:df:5f:1f:1f:
49:ce:40:d6:75:fc:0b:93:18:59:e0:06:4f:af:5b:
7b:17:19:9c:64:3c:df:51:4d:d9:06:c2:55:df:30:
ac:d6:c7:0c:76:d0:ae:e8:2d:21:af:03:b2:a6:ad:
3e:ea:15:e1:43:93:bf:0f:af:ef:e5:d8:95:55:c9:
2e:64:4e:05:88:d7:87:00:6c:33:7d:d5:0a:51:e2:
71:e8:f2:5d:81:10:5e:46:e8:a5:c8:a6:75:8f:17:
26:66:3a:53:c6:d6:6c:f5:5b:63:b4:c8:00:57:3a:
ec:af:91:14:80:3f:63:ed:d2:c4:6d:9d:4a:66:c0:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C5:F4:BE:FD:81:E0:FD:1B:65:8F:E0:5D:C6:FC:A1:C9:62:4E:92
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c7:3a:cb:21:4d:e6:1b:17:48:2a:96:d3:0b:8f:cf:40:91:
c9:be:dd:81:ae:f2:e5:c9:cc:3a:97:34:c9:14:c9:e8:17:bc:
11:9e:16:14:d7:7f:43:11:a9:66:ad:7f:93:62:50:6c:b0:50:
ee:4e:cd:3f:58:4f:ce:3d:27:9d:34:b2:04:ac:4f:44:9e:5c:
73:b0:a1:d2:5c:83:84:c7:55:81:38:77:5b:b3:39:6b:fc:c6:
0b:39:de:7b:c3:cb:d7:f0:44:cb:e0:dc:b9:f2:cc:06:95:cc:
d9:07:aa:67:ee:1f:d2:39:4d:e2:e1:9e:dd:54:d1:5f:a3:94:
1d:b5:b4:43:0c:52:38:d4:19:f3:c8:64:e4:f6:d1:69:b5:b2:
61:82:99:91:02:3d:29:74:37:07:91:46:de:83:5a:94:ca:fe:
e1:f6:ca:d5:5e:82:28:6c:00:2b:25:95:d0:9b:9b:ae:70:f4:
b0:87:5c:83:5c:a6:9a:68:a3:03:99:bb:44:3f:68:7e:8c:44:
86:f9:32:1c:24:5b:21:ca:d1:db:29:07:6d:24:55:68:a7:b3:
5f:eb:ce:c7:47:7c:2a:47:73:e5:4c:42:c3:91:ba:ee:3e:2a:
8a:3e:d2:a3:bf:28:d3:c0:fd:7d:87:a6:60:43:80:36:b1:54:
22:e7:c7:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeFRfmoCgkRMiF2izMu1mj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OWFkYjAyMDhhMmQyYTcxOGQzMDY0YjQ2MTNmZGM0MzIw
ZDI4ZjkwHhcNMjUwNjE4MjMwMDQ0WhcNMjUwNjE5MjMwMDQ0WjAzMTEwLwYDVQQD
Eyg3YWM1ZjRiZWZkODFlMGZkMWI2NThmZTA1ZGM2ZmNhMWM5NjI0ZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk8yvQk6C/Nc8mAsG96SnQQ7YyQQ
9yfAIpWMLvYA0RO7YgjJnRQLNPynsYp5GPdIioOEUSmE8QUTO3UFthMRY+Tsb2Zf
7xIgcot/E4SZvt9b/Z0wqe2nyq7VEsVvpGdQvYCm2L6cO3xwXOFk5qxiQ+PZQRCh
e1NxuLOi1fsvf7aBwd9fHx9JzkDWdfwLkxhZ4AZPr1t7FxmcZDzfUU3ZBsJV3zCs
1scMdtCu6C0hrwOypq0+6hXhQ5O/D6/v5diVVckuZE4FiNeHAGwzfdUKUeJx6PJd
gRBeRuilyKZ1jxcmZjpTxtZs9VtjtMgAVzrsr5EUgD9j7dLEbZ1KZsCnEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrF9L79geD9G2WP4F3G/KHJYk6SMB8GA1UdIwQY
MBaAFPWa2wIIotKnGNMGS0YT/cQyDSj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jMGZlZjktYWZmZi00OWRlLTgwOGEt
ZTQ0NzhjNTUzMDhhLzEvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jMGZlZjktYWZmZi00OWRlLTgwOGEtZTQ0NzhjNTUzMDhh
LzEvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsc6yyFN
5hsXSCqW0wuPz0CRyb7dga7y5cnMOpc0yRTJ6Be8EZ4WFNd/QxGpZq1/k2JQbLBQ
7k7NP1hPzj0nnTSyBKxPRJ5cc7Ch0lyDhMdVgTh3W7M5a/zGCznee8PL1/BEy+Dc
ufLMBpXM2QeqZ+4f0jlN4uGe3VTRX6OUHbW0QwxSONQZ88hk5PbRabWyYYKZkQI9
KXQ3B5FG3oNalMr+4fbK1V6CKGwAKyWV0JubrnD0sIdcg1ymmmijA5m7RD9ofoxE
hvkyHCRbIcrR2ykHbSRVaKezX+vOx0d8Kkdz5UxCw5G67j4qij7So78o08D9fYem
YEOANrFUIufHRw==
-----END CERTIFICATE-----
Generated at Thu Jun 19 08:39:44 2025 by rpki-client