Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: 9gmqPoayIiyyZ48+yZvVBE7gRZXUQBFdpkG5uppmirU=
Subject key identifier: 87:A0:EC:22:D3:B8:39:BC:93:41:BB:8B:81:F4:26:09:87:99:E0:4A
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 0198936D0F7FC89402ED4E974B0343241B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 0768
Signing time: Sun 10 Aug 2025 10:00:54 +0000
Manifest this update: Sun 10 Aug 2025 10:00:54 +0000
Manifest next update: Mon 11 Aug 2025 10:00:54 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: EdOXxBaEfLkwc57ZTMRgLgNcAuDMOhBIot8ogV2AofM=)
2: uNPxSzoBaXvBOJFQn-2SS8eLdrE.roa (hash: aQ7mvpV3ivI5FkoVAB6sSeBflcpGk3YWeApRgwYyH1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:0f:7f:c8:94:02:ed:4e:97:4b:03:43:24:1b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Aug 10 10:00:54 2025 GMT
Not After : Aug 11 10:00:54 2025 GMT
Subject: CN=87a0ec22d3b839bc9341bb8b81f426098799e04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:ba:3e:32:27:a2:e6:3f:fa:49:50:50:0a:
34:8a:af:64:05:20:a8:d9:14:af:9f:69:92:19:89:
5d:57:8f:16:ec:ed:13:b7:e9:59:da:6a:24:36:d7:
fa:70:6a:3d:9b:55:48:b5:84:6b:7c:9b:00:17:22:
f0:88:4c:44:c7:95:20:ec:57:5b:a3:6d:e0:88:bb:
38:0f:5a:85:21:c1:cb:de:dc:c5:b7:0c:60:5b:9b:
fa:35:a0:5d:64:1b:a9:43:26:04:03:5c:6c:e7:98:
ee:ae:c7:c0:29:11:77:a9:20:d4:d1:7f:e5:82:78:
65:a3:86:04:4d:fa:45:ff:ca:d0:c0:7b:f6:f9:ef:
15:70:f7:ba:bb:13:6a:3b:a6:23:80:a1:e9:5a:74:
2b:8f:49:85:33:cc:64:53:8a:93:31:8a:31:92:eb:
09:6f:41:f4:57:81:3c:5c:83:d4:27:bd:8e:f5:3d:
3f:40:33:75:6c:d4:4c:43:05:f1:a1:3a:1c:c9:b0:
13:23:e9:ed:24:e5:2f:2e:59:c2:de:31:01:66:b4:
c3:55:71:3d:5a:97:dc:75:4e:4b:e1:82:b4:b3:c2:
d6:ba:e0:38:e1:1f:fd:ab:a3:47:58:ec:47:1a:e4:
4d:11:a2:32:19:ca:5d:0a:4c:58:a9:24:47:50:e4:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A0:EC:22:D3:B8:39:BC:93:41:BB:8B:81:F4:26:09:87:99:E0:4A
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:99:e1:b0:3b:80:a3:a7:f4:d8:a5:80:67:03:5a:e4:00:cf:
aa:e5:66:c4:37:a3:5a:07:f6:60:29:39:1d:66:e7:68:5c:ff:
8e:fb:17:f6:c5:ca:78:18:3c:4a:f9:4e:52:f2:d2:d7:48:25:
d9:e5:a5:87:63:fa:6a:62:f7:66:32:2c:3a:92:a6:05:dc:e3:
4e:2a:a7:db:44:4f:e6:12:1d:8d:66:e1:7e:2a:cc:f9:79:08:
99:e4:05:d3:d6:b3:b8:f2:1d:d4:0d:1e:be:ab:1a:c0:73:81:
36:8f:f3:1a:e6:a6:ee:3d:14:f1:69:67:72:f0:17:60:96:f7:
85:0d:89:72:66:ad:cc:1a:6e:6f:5a:45:bb:76:99:d8:c6:2a:
4f:2f:60:60:7f:57:63:e7:6e:67:cd:d9:f9:89:a4:f6:8b:c6:
1e:90:b7:03:e9:fb:21:26:b0:6d:f7:60:1d:02:5f:2c:24:73:
34:93:76:89:c9:f5:71:75:1d:90:d0:c4:fe:45:5f:80:c1:5c:
d3:0f:2f:2a:22:03:a2:45:08:fd:76:0a:0a:90:6b:00:35:bf:
d6:6d:66:98:be:0d:26:0f:dc:c7:c8:64:76:08:41:1d:0f:6c:
43:f0:fa:dd:34:d5:76:34:cd:7c:2b:ca:ef:48:f8:c4:99:ac:
2a:e9:29:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:38 2025 by rpki-client