
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier: CAVZt0ZDzGOr2+eZdf5BB1+UvCj5OFJB0ibHQaZIbeY=
Subject key identifier: 81:D3:92:38:86:3C:16:E7:D2:01:8F:C2:C4:E1:6A:59:DE:78:ED:20
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 01988A334F1BC6240D9059B36D1A01361F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number: 08ED
Signing time: Fri 08 Aug 2025 15:01:14 +0000
Manifest this update: Fri 08 Aug 2025 15:01:14 +0000
Manifest next update: Sat 09 Aug 2025 15:01:14 +0000
Files and hashes: 1: 1--aJOHbG2HarYQRIFHME9kGdrI8.roa (hash: e0PFqEIF1I8KQrFh+AG+JLWzJuU3cKKiEgrK5TdCBkw=)
2: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: 56dByQtnXCQY4Lt/7jQD60l43aZQXwM9cUf1OoXkDrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:4f:1b:c6:24:0d:90:59:b3:6d:1a:01:36:1f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Aug 8 15:01:14 2025 GMT
Not After : Aug 9 15:01:14 2025 GMT
Subject: CN=81d39238863c16e7d2018fc2c4e16a59de78ed20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:e2:a5:30:32:1c:e0:ef:52:98:21:87:ea:
e8:09:74:e7:b9:60:18:23:6f:8b:6d:d0:32:c4:27:
cd:f4:46:36:1f:7c:b7:b2:35:54:c2:2d:67:68:6c:
12:a4:a2:19:6a:ef:cd:9c:10:69:e8:7f:4a:ec:b7:
59:3d:87:0b:d0:5c:01:47:2d:50:9a:24:7f:8b:a4:
d3:9c:81:45:9e:35:10:60:2b:5a:90:64:8a:15:78:
52:03:d7:5f:a6:2e:3e:a0:5d:25:2f:c0:9c:f4:07:
20:6f:23:a8:d3:f5:6b:72:47:18:88:f5:62:69:d8:
da:15:6e:c8:77:88:02:ec:6c:b4:20:f2:81:7b:75:
b3:b0:22:4a:51:c9:40:67:fa:45:a2:cb:50:20:3d:
c5:9d:e0:8e:4f:93:0a:25:a8:de:e4:80:92:fc:c4:
b7:70:ca:aa:b2:c3:a3:82:20:63:63:fc:97:ba:c4:
95:cd:a3:1e:25:80:85:e0:72:60:0f:b4:89:03:03:
03:4b:66:70:95:b3:66:2d:02:56:83:53:70:ed:1b:
c4:12:63:2d:78:56:b3:82:2c:ac:c1:70:0e:66:a6:
32:ed:0e:6f:7e:6c:23:8b:56:62:3d:34:85:da:f6:
43:66:e0:35:1d:47:fc:f4:d2:85:8b:d9:45:e1:94:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D3:92:38:86:3C:16:E7:D2:01:8F:C2:C4:E1:6A:59:DE:78:ED:20
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:02:5d:8e:0c:d4:24:42:72:9f:c0:c0:4f:ad:a7:a0:59:cd:
08:57:b5:ef:9d:78:d2:65:f7:a4:ee:0d:29:34:e5:51:cd:f2:
87:51:08:31:2f:58:b0:80:55:a5:fe:1a:b4:28:41:75:20:40:
c2:a0:1a:78:e6:54:54:4e:4c:b3:02:7c:f1:71:b9:e9:52:3e:
48:40:8f:ca:e2:53:60:7f:5a:6d:62:27:ba:43:26:2e:69:e9:
43:8a:ea:1e:f1:ac:7e:c6:3b:c8:5f:4f:3e:cf:7e:c6:13:51:
32:7a:a2:2a:77:16:5e:89:b5:c2:35:86:48:00:c3:c6:f9:71:
d7:58:ce:84:c6:d4:bf:ff:56:2f:64:08:77:6c:05:28:6b:5f:
14:65:66:ee:3f:7d:5b:fc:4f:3c:79:ba:5b:4c:c3:aa:cb:5d:
6b:4d:35:8a:2c:2c:de:6f:63:95:6c:ea:49:d7:ce:35:66:f7:
20:41:b9:61:f6:a5:5f:c0:9c:82:bb:b2:67:1b:b5:b0:6c:3a:
25:32:e4:ff:49:4e:a7:42:16:a4:26:05:78:34:81:e2:f7:49:
34:b3:ba:9f:fb:d5:bc:5e:15:da:57:5f:44:fc:07:0b:28:79:
63:1f:9c:ff:50:f2:4f:08:a5:db:dc:2e:1f:bc:ed:3f:13:1d:
d2:60:48:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:14 2025 by rpki-client