Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
File: 9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json)
Hash identifier: chbhp4cHo+vl6Kj9mGn4gsn88jvrGXQqPV1S4xOy91c=
Subject key identifier: 4B:E3:4F:B2:19:E5:A2:89:A6:8B:C5:DC:14:E6:3C:A2:A5:24:0B:A4
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019874504580F1E7635EE5C6085FC7FF61BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
Manifest number: 1624
Signing time: Mon 04 Aug 2025 09:01:14 +0000
Manifest this update: Mon 04 Aug 2025 09:01:14 +0000
Manifest next update: Tue 05 Aug 2025 09:01:14 +0000
Files and hashes: 1: 094z1xKhD-fPImqcpq7FnS51L8I.roa (hash: QqZNaYuOPYVYXA7nnxP+E5LxcHL1hX5seeAAPJtn8rE=)
2: 5yZgLWjoqGWoHcvTB_31BRphqMg.roa (hash: mnmZiTADtsjplvnjg1DlrvtKGrz4jtZ2ePTtEqRNIiA=)
3: 98--VYzYQvmDhok_sN0s894_jjs.roa (hash: JLE5UUw9XB1alxl+jXRMMgX9sI3zDXH5yt96C0J6SNk=)
4: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: XkSk+LaZbg/3FFcxrj04HnaWWO0ofLBg1QdubbOFrBo=)
5: S1r5hqr0H_eG0pYFEYET1oPJyrU.roa (hash: AL2mRYe3QSk0eHBtZxwwGn0QyvUm0r2qBAzoPe+jc5Y=)
6: tDQppW28D00yJpPN76o5br9V4uc.roa (hash: QeZm1TlTQEFmZaDRdvYJJMWOrlvPWUXQvrMdVOrCdWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:45:80:f1:e7:63:5e:e5:c6:08:5f:c7:ff:61:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Aug 4 09:01:14 2025 GMT
Not After : Aug 5 09:01:14 2025 GMT
Subject: CN=4be34fb219e5a289a68bc5dc14e63ca2a5240ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:eb:7f:58:89:28:c7:21:aa:43:69:6a:92:
24:ae:7d:01:4b:56:c3:3b:72:dd:76:e7:0b:fb:06:
3d:2f:36:4e:0a:1e:6f:d1:ad:66:d1:29:bf:1f:97:
e8:37:cd:9f:f6:18:49:47:28:b1:be:6f:89:f5:c0:
ed:97:f2:c2:38:ee:21:f3:68:8c:a5:13:11:58:73:
d1:81:bc:d9:b6:ea:b4:32:df:39:ad:01:65:42:be:
4a:fb:4c:f3:47:4c:ef:b7:3d:87:75:9b:90:5d:00:
8c:92:d7:39:f5:e9:52:34:0d:98:95:f7:76:42:8f:
3c:90:60:5f:bb:d5:0c:63:35:d8:51:b0:a2:f7:3e:
64:1d:df:88:f2:56:17:37:87:6e:d8:36:22:bc:2a:
84:0b:40:f6:5e:ca:f0:fa:75:64:f2:51:72:ee:26:
c5:ed:e0:71:53:f5:d9:3e:4a:c9:a3:8a:78:5c:40:
a9:26:8a:04:62:e1:5d:95:bb:0f:98:c4:fc:06:34:
38:aa:9b:52:fd:60:6a:0e:b3:da:ce:f2:20:da:f3:
3c:c2:a5:cb:8b:23:3b:62:94:cf:a7:ba:cf:f3:c9:
d8:e0:2f:90:be:89:f2:ae:33:c4:0f:8e:d5:4f:4d:
d1:5f:1d:0f:2f:34:4e:ab:02:5e:fd:63:78:25:0a:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E3:4F:B2:19:E5:A2:89:A6:8B:C5:DC:14:E6:3C:A2:A5:24:0B:A4
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e4:d3:ae:11:f3:85:8d:85:04:e3:1e:b1:34:4f:01:b9:86:
48:ea:f6:1d:da:e8:14:ea:52:33:93:a4:8e:45:9b:c7:a4:14:
84:8f:10:f7:b0:15:25:a4:ae:86:21:b6:32:e7:93:21:3c:d9:
89:8c:cc:8b:19:50:fd:09:ac:dd:66:64:26:53:5d:bb:1b:ee:
a0:df:64:ac:31:db:be:62:d0:24:8e:7a:33:c4:2b:f8:c6:23:
53:13:0f:88:a4:26:f9:41:f4:23:b2:72:54:78:7f:f5:fd:6f:
f2:24:d0:db:13:05:d9:60:c7:35:4e:9c:a0:24:02:f2:a2:29:
e5:ea:d0:8a:4c:c1:59:ed:89:c1:46:88:fb:bc:56:d7:d8:97:
21:1e:96:ca:80:fe:5c:01:88:c3:5f:60:a8:09:9d:98:e7:52:
1a:1e:31:d1:4d:28:55:2e:42:df:c2:9f:5c:30:c9:8f:2d:fb:
ca:60:f0:5a:88:6d:80:78:7e:56:fc:67:1b:53:90:21:d6:c2:
16:57:da:8b:8f:d2:1e:de:57:f7:e6:b0:5a:e1:1b:1b:6f:63:
cd:08:ac:d5:6c:7b:4e:11:f8:9f:8d:ad:78:f9:e5:7c:fd:e4:
de:a1:09:6c:2f:f2:50:a5:da:02:86:b9:ac:12:fb:63:97:d3:
40:cf:82:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:19:52 2025 by rpki-client