Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: QNrOjgBE6OKtb3uedLGl60LPF986x/kPYqGn7uoXu38=
Subject key identifier: 3F:70:75:0E:6D:C2:89:08:71:82:D9:39:E7:A9:B1:DC:4A:FE:0C:99
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 0198808AEC332AF99D7C823CC40DF9800F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0A47
Signing time: Wed 06 Aug 2025 18:00:44 +0000
Manifest this update: Wed 06 Aug 2025 18:00:44 +0000
Manifest next update: Thu 07 Aug 2025 18:00:44 +0000
Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=)
2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: o8lQEu3tINSGjPnFBQlgQYXeHAO0rkEWPxSp2QRqR1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8a:ec:33:2a:f9:9d:7c:82:3c:c4:0d:f9:80:0f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Aug 6 18:00:44 2025 GMT
Not After : Aug 7 18:00:44 2025 GMT
Subject: CN=3f70750e6dc289087182d939e7a9b1dc4afe0c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:1c:5a:cf:80:66:fd:6c:fd:c9:19:0d:43:
8d:e0:2f:ac:3c:78:c3:41:e2:85:77:79:d3:31:64:
d9:7a:9a:d5:9a:6b:8d:0d:d7:1e:64:16:15:3a:80:
58:21:de:4e:46:96:2e:3b:97:57:08:9d:04:b8:8d:
27:9e:98:3e:aa:4d:82:b6:90:ac:9d:c1:52:d6:5e:
c0:79:2c:23:50:5f:0f:e2:4a:cf:bd:b6:5b:da:9f:
66:a0:ff:69:a3:dc:e4:3a:27:4b:db:6c:57:f9:ed:
fb:ef:7f:3c:aa:63:69:4a:ad:5f:28:0e:5d:75:5e:
c8:08:9f:b1:b1:65:ce:03:11:a0:12:cc:30:7b:73:
85:fb:22:cc:90:38:8e:1f:77:b1:4b:de:ec:12:22:
21:ae:a1:49:88:37:7f:39:a0:c2:8b:35:b5:72:86:
fe:cd:dc:01:1a:8d:50:7f:1e:15:f3:97:64:d3:1d:
c1:a9:84:50:5a:6e:a1:f3:68:d9:78:c3:0f:6e:05:
c0:f6:79:f6:9b:58:7b:c2:68:1e:7b:3a:60:7a:61:
f7:b9:b8:a8:f1:02:c3:b7:32:1f:79:b1:05:71:40:
06:6a:51:1e:9f:6a:7d:55:24:17:af:18:58:a0:7c:
6b:22:57:8c:f3:dd:06:f1:0d:3e:99:4a:61:55:33:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:70:75:0E:6D:C2:89:08:71:82:D9:39:E7:A9:B1:DC:4A:FE:0C:99
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8d:83:ac:d3:3a:28:da:98:24:b1:21:1a:11:6e:92:b7:23:
19:a6:0a:28:f0:ba:03:99:ff:fe:cf:20:9d:67:8e:60:ce:6e:
a7:e6:30:3d:7a:ab:80:cb:2c:d4:ff:66:57:d8:9a:8e:ef:a1:
29:c3:52:c6:19:be:46:f8:c0:da:91:2b:f4:9a:9f:ca:20:30:
ee:0f:b1:29:ae:49:e4:83:37:9e:2c:cf:aa:62:9b:e3:21:e7:
10:fc:8a:d0:e4:59:19:f7:32:13:09:1c:2c:95:0c:de:58:ba:
c7:b4:19:5c:39:33:71:49:60:6a:24:f7:79:f2:2b:aa:5c:26:
68:55:8e:5a:83:e5:da:04:ab:7d:61:f6:95:89:55:35:ee:3c:
3c:0a:b0:3b:a3:d8:f1:f2:08:d4:fd:f4:05:26:2a:65:30:c5:
d7:0c:74:e5:91:db:9e:08:63:c7:cd:c3:b7:44:cd:14:99:b5:
f6:4d:d0:a6:38:b5:2d:65:85:ec:b0:81:b4:4d:00:95:8f:45:
d0:1d:cc:92:50:b8:c0:04:67:68:36:16:b5:07:06:19:6e:4d:
ef:b5:e0:ba:ab:dc:74:9c:7b:e8:7c:f7:68:60:6a:3d:ef:45:
46:02:6d:67:a0:d7:62:3c:57:15:53:72:09:15:31:b2:9a:c5:
68:b4:48:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:04 2025 by rpki-client