Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier: kFzlNd0Oi+qs1Cpq8yJLHYnge4bGWO/zyWkdFHOkGSI=
Subject key identifier: 0E:B1:AD:47:81:3D:E6:59:BB:37:A6:71:F1:10:93:C2:71:E8:C7:B2
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 01987C4049F70116E7080F4FB4DBD37AC40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number: 1634
Signing time: Tue 05 Aug 2025 22:00:44 +0000
Manifest this update: Tue 05 Aug 2025 22:00:44 +0000
Manifest next update: Wed 06 Aug 2025 22:00:44 +0000
Files and hashes: 1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: VA6ofppGawQHAf//qjJgiMvx9E6ddB1B09NQ3AsNHb4=)
2: Rq5qhuZJL_f0RiemcCNo1CeBLZg.roa (hash: QjHh1mk02MSSyzdrymnZqYJyNlwN9P8BOUPtrzzXBu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:49:f7:01:16:e7:08:0f:4f:b4:db:d3:7a:c4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Aug 5 22:00:44 2025 GMT
Not After : Aug 6 22:00:44 2025 GMT
Subject: CN=0eb1ad47813de659bb37a671f11093c271e8c7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:79:3e:bb:18:83:7d:62:db:1a:ea:7e:e8:
07:90:55:2a:d2:51:ce:b8:92:34:10:83:ad:a2:6a:
4e:2e:72:bd:a1:34:9f:19:da:e9:c0:b4:94:37:e0:
43:4c:6a:cd:f1:4e:90:2c:25:d8:a9:71:87:74:40:
3b:31:67:a6:da:5d:48:22:cc:7e:9e:e3:95:10:11:
7d:95:25:44:2b:f4:db:af:a1:92:96:8d:1e:30:67:
da:4f:77:ae:75:a1:7e:1b:64:58:86:a2:65:de:32:
93:f2:29:54:15:42:5c:28:bc:e6:dd:3e:7c:6a:ed:
6e:99:b2:08:ea:31:85:13:6f:ce:89:9f:a3:91:a9:
02:88:a5:ee:3b:6b:4a:cb:9d:28:be:52:8f:55:b5:
1d:57:d3:7d:c5:55:f4:bd:6a:48:81:9b:72:76:31:
9c:58:82:6d:05:db:82:fc:56:ee:13:e4:cf:65:be:
16:c7:2b:07:a4:19:e0:3c:4d:1c:a4:ad:58:01:2f:
9c:02:28:f1:e0:d5:3d:51:5b:db:0c:98:e1:b3:a2:
bf:5e:70:58:ab:a6:87:0c:9b:f4:eb:23:73:01:ff:
ba:f5:00:8c:51:a8:51:97:78:ef:99:8a:d2:32:4d:
d3:11:dc:78:32:b7:90:ae:27:8c:3d:08:2e:ea:90:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B1:AD:47:81:3D:E6:59:BB:37:A6:71:F1:10:93:C2:71:E8:C7:B2
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:84:90:bd:78:ba:7a:9f:de:d4:6d:9d:f9:1d:fa:b5:5d:96:
10:8e:e8:87:08:cb:0c:c3:ce:98:61:8d:2f:5a:19:58:9c:b5:
00:53:2e:b5:e8:90:e0:fc:db:65:a8:56:d2:64:62:68:bf:91:
fb:06:e4:c3:7f:31:24:de:a7:fe:13:96:1d:62:63:1b:1d:c3:
53:e0:4e:87:21:9c:56:22:e4:cf:5c:2a:e2:6b:3e:06:14:ac:
3d:1f:2a:07:02:93:ac:18:f8:4e:ba:db:6e:ee:e9:b6:5a:48:
e4:e7:84:4e:c6:d0:a6:0b:2f:75:91:dc:e7:21:c2:4a:04:9b:
80:c6:33:98:70:80:3c:09:5e:9e:d8:97:59:09:f9:d8:75:70:
e3:f6:40:a1:26:8f:5b:60:e4:68:b2:1d:d3:9e:b8:24:35:25:
fc:71:c2:42:6c:90:fc:bb:43:03:80:b5:d0:17:f7:6f:2c:81:
77:7b:06:c9:5c:2e:25:22:4e:9c:20:9d:2b:49:e3:9a:75:b9:
7d:02:2d:e6:20:34:07:01:55:81:87:4d:82:e1:c1:e7:61:4a:
63:01:bd:1b:c4:d5:63:78:c7:f7:56:bc:c8:11:55:e7:40:55:
2a:ff:f8:1d:52:b1:27:62:b5:25:5d:e1:fc:c8:ca:a9:c5:3c:
e3:86:39:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:42:53 2025 by rpki-client