Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: ETX9LQowWrX+ntM008bxmZDsPDYl8Ql8R9OtjJuxU30=
Subject key identifier: 6C:4D:FD:BE:FE:5D:34:11:83:03:10:09:5E:4F:AA:26:78:4B:4B:40
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 01976F9A34298237AA888509367E4A5BDE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 044A
Signing time: Sat 14 Jun 2025 18:01:06 +0000
Manifest this update: Sat 14 Jun 2025 18:01:06 +0000
Manifest next update: Sun 15 Jun 2025 18:01:06 +0000
Files and hashes: 1: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: lLjOmQ0D9Pc5IewUbaetNf5rijE2knyUc2vvH1sodFM=)
2: ovmdpHkmxMF66EEddKGFlc2H0gg.roa (hash: EUcHFqazaZZxE+4WNuY1RVtJshsow0Yiv/MTq1HtYWE=)
3: r-plRi1ZpgmWnu-urPIdYNrFFFU.roa (hash: DxecFcu5t+xZ0qqmbJOm2zril/rb62HI5wbo3Djm3yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:34:29:82:37:aa:88:85:09:36:7e:4a:5b:de:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Jun 14 18:01:06 2025 GMT
Not After : Jun 15 18:01:06 2025 GMT
Subject: CN=6c4dfdbefe5d3411830310095e4faa26784b4b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:ef:19:24:d2:f6:6e:0d:a9:c7:91:af:c4:
41:db:34:bb:49:9f:d6:78:48:b4:2f:3c:c5:50:ec:
8b:fb:a3:6c:92:d7:74:25:00:b4:9f:07:70:cc:0c:
9a:8c:26:d7:bf:c6:e4:af:70:c4:7e:b7:1a:cb:5f:
8d:de:19:04:2e:00:32:ec:95:64:a2:34:c9:de:79:
f4:9f:60:ad:7f:6e:da:a0:ea:b3:c9:5f:cc:d7:1b:
71:4d:51:a1:ef:54:dd:5a:ac:c3:de:12:4e:23:41:
e9:a9:32:29:c9:ba:60:a0:e0:af:b0:02:67:86:53:
c0:0b:c8:c0:f5:94:23:6a:6f:c9:6a:b1:b5:fe:a6:
24:40:36:bd:82:22:b6:cf:78:96:9c:4d:d4:eb:d3:
5f:e5:35:e6:6d:55:f6:0c:f1:a1:37:ec:dc:b3:c4:
d9:84:1f:92:17:a4:db:c2:7c:16:b6:58:65:65:b6:
86:22:80:e5:08:06:ff:d6:64:73:25:be:e5:0c:69:
8e:bf:3e:15:f0:90:74:14:c1:ce:25:97:77:cd:c6:
a5:03:76:ad:7a:36:03:ed:f9:07:a9:36:9c:c7:53:
ff:69:3d:80:12:cf:64:c0:9b:94:32:8a:1e:6b:0a:
10:ef:aa:ee:ca:e2:83:7a:cf:e3:38:29:dc:d3:01:
c8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4D:FD:BE:FE:5D:34:11:83:03:10:09:5E:4F:AA:26:78:4B:4B:40
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:06:70:75:e6:03:33:56:9c:6f:ae:26:cf:c9:98:4d:67:3b:
6f:6b:5b:b6:ed:08:b1:da:97:50:b8:32:69:3a:85:a0:b0:e2:
66:e9:ae:a9:d2:a8:78:00:9c:89:f8:5b:9a:90:5b:f6:6a:ee:
d2:fa:f1:74:42:33:77:22:f8:6d:41:92:58:33:5e:a2:ee:1d:
05:8f:cc:f6:aa:3a:f3:8b:c7:88:d5:b6:4f:08:e3:11:dc:ee:
f3:fc:6b:9b:52:55:59:7b:56:d9:e0:24:40:9c:d1:5d:70:9d:
6b:f4:92:63:7d:43:5a:aa:8d:da:6b:6b:08:2f:23:19:1d:92:
d8:f0:dd:70:6a:68:d3:86:7c:87:ce:bc:ce:a2:08:ff:5f:f6:
ca:fb:09:58:12:0b:38:a0:ec:e4:7f:9e:e8:3c:3f:6e:61:28:
f8:b7:2e:21:e9:03:2e:27:54:45:4f:90:e8:3c:91:24:2f:ee:
2d:3c:10:7a:2b:db:3a:df:cd:ba:bd:8c:9d:9a:f6:dd:02:c7:
d3:3d:2b:5d:e1:f8:23:28:ec:da:95:8d:c0:8f:ea:b5:98:08:
aa:e0:52:d3:3b:df:7c:44:b1:e2:8b:3f:d3:64:ed:44:c5:02:
60:02:5b:97:8e:40:9b:18:9e:42:65:5c:19:cd:3b:c2:07:89:
f9:2b:06:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmjQpgjeqiIUJNn5KW96LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZDZjZGM2ZmQzMzJkODhiZTJhYjA5MWVjZTc0ZDc2MjRk
MzU5ZjEwHhcNMjUwNjE0MTgwMTA2WhcNMjUwNjE1MTgwMTA2WjAzMTEwLwYDVQQD
Eyg2YzRkZmRiZWZlNWQzNDExODMwMzEwMDk1ZTRmYWEyNjc4NGI0YjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKvvGSTS9m4NqceRr8RB2zS7SZ/W
eEi0LzzFUOyL+6Nsktd0JQC0nwdwzAyajCbXv8bkr3DEfrcay1+N3hkELgAy7JVk
ojTJ3nn0n2Ctf27aoOqzyV/M1xtxTVGh71TdWqzD3hJOI0HpqTIpybpgoOCvsAJn
hlPAC8jA9ZQjam/JarG1/qYkQDa9giK2z3iWnE3U69Nf5TXmbVX2DPGhN+zcs8TZ
hB+SF6TbwnwWtlhlZbaGIoDlCAb/1mRzJb7lDGmOvz4V8JB0FMHOJZd3zcalA3at
ejYD7fkHqTacx1P/aT2AEs9kwJuUMooeawoQ76ruyuKDes/jOCnc0wHIZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxN/b7+XTQRgwMQCV5PqiZ4S0tAMB8GA1UdIwQY
MBaAFHvWzcb9My2IviqwkeznTXYk01nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTliTnh2MHpMWWktS3JDUjdPZE5kaVRUV2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8yOWYzODYtNDI0Ny00ZTZhLTliZjEt
NjFjNGEyNTZmOWFkLzEvZTliTnh2MHpMWWktS3JDUjdPZE5kaVRUV2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8yOWYzODYtNDI0Ny00ZTZhLTliZjEtNjFjNGEyNTZmOWFk
LzEvZTliTnh2MHpMWWktS3JDUjdPZE5kaVRUV2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgZwdeYD
M1acb64mz8mYTWc7b2tbtu0IsdqXULgyaTqFoLDiZumuqdKoeACcifhbmpBb9mru
0vrxdEIzdyL4bUGSWDNeou4dBY/M9qo684vHiNW2TwjjEdzu8/xrm1JVWXtW2eAk
QJzRXXCda/SSY31DWqqN2mtrCC8jGR2S2PDdcGpo04Z8h868zqII/1/2yvsJWBIL
OKDs5H+e6Dw/bmEo+LcuIekDLidURU+Q6DyRJC/uLTwQeivbOt/Nur2MnZr23QLH
0z0rXeH4Iyjs2pWNwI/qtZgIquBS0zvffESx4os/02TtRMUCYAJbl45AmxieQmVc
Gc07wgeJ+SsGuw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:45:11 2025 by rpki-client