Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier: 4mfhqeYuhjisltjnR/AoFl92IErc6y032IRnK6oZfO0=
Subject key identifier: 5E:77:19:2B:8B:C2:3A:5B:C6:EB:25:ED:44:3D:99:AF:6E:B8:3A:50
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial: 01988B455DE6E6B91FB92F47FDE205A5F9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 20:00:35 +0000
Manifest this update: Fri 08 Aug 2025 20:00:35 +0000
Manifest next update: Sat 09 Aug 2025 20:00:35 +0000
Files and hashes: 1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: kN+Oh4PZTezpP+5sr9ol72+pH0G32qd2JyWXI1FJayA=)
2: bRo1FpRQdGW3rrEgf9LP2ZyYMbs.roa (hash: ZwgslFPNqU25lgzTk3XOIv2Nozx6fjcmPWKTGmYvfPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:5d:e6:e6:b9:1f:b9:2f:47:fd:e2:05:a5:f9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Validity
Not Before: Aug 8 20:00:35 2025 GMT
Not After : Aug 9 20:00:35 2025 GMT
Subject: CN=5e77192b8bc23a5bc6eb25ed443d99af6eb83a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:7b:e3:d0:8e:13:07:55:8f:ab:fc:3f:e7:
de:e8:b3:32:23:e8:0f:77:84:d5:96:04:c4:00:3d:
ae:83:bf:9b:01:32:37:3b:6b:39:fe:ca:45:60:7a:
3a:8a:98:8b:bf:88:f2:e4:f5:4a:4d:c7:ad:0a:6a:
95:44:f3:8d:c8:25:2a:97:2b:ba:cd:9a:85:6a:b7:
5b:36:49:9b:47:03:a4:63:fc:1b:ca:c6:35:8c:37:
3b:22:8e:5f:3a:52:0b:35:55:61:fc:f8:74:17:c2:
73:46:04:ae:33:5f:15:e2:ae:f7:a7:30:ff:6c:f9:
15:e5:08:b7:5c:c5:b2:eb:a8:61:68:79:f9:8f:27:
5a:9c:e2:35:38:ac:d7:a2:38:cc:6c:c8:3b:6b:2b:
29:5c:9f:e1:4a:36:6d:93:d5:36:28:94:ae:1d:94:
db:e8:1d:8c:a3:67:6a:fd:4f:eb:6b:83:ec:d6:46:
63:e6:81:0a:57:df:b5:bb:ec:e8:e9:01:32:7b:24:
ea:74:3e:5c:5a:14:c0:80:2a:0b:4d:b9:df:c9:72:
cf:82:0d:ae:a8:00:a8:8e:5c:72:ba:e9:4b:a5:c0:
e6:ba:3f:ef:54:ff:95:6f:cc:c1:6c:8b:02:f6:a2:
1a:32:dd:8c:6e:f2:fb:fc:df:50:a8:4f:50:8c:fb:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:77:19:2B:8B:C2:3A:5B:C6:EB:25:ED:44:3D:99:AF:6E:B8:3A:50
X509v3 Authority Key Identifier:
keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:84:b8:42:bf:5e:9c:64:59:19:39:3b:9b:d7:02:38:81:13:
14:83:41:32:da:9f:91:76:56:b7:6e:71:86:0d:81:b6:72:4d:
ce:fa:dc:ef:ea:f6:7f:de:a3:57:97:f7:b0:3f:54:72:e5:0a:
62:f6:d6:77:0f:b9:a3:d3:ce:07:5b:8a:da:c6:fe:59:3b:f1:
09:b5:e7:b3:01:33:73:2d:f0:6b:8c:1f:f8:d2:38:f5:40:9d:
1e:b0:6a:ad:9f:e8:fb:4c:67:81:8f:34:02:5b:6c:c1:b3:d3:
3e:0a:69:02:eb:4e:f9:03:28:bf:c9:60:7f:7f:81:8d:dd:cb:
2e:c1:22:6e:57:ce:93:7b:b7:fe:90:e1:60:67:c1:2e:e3:1b:
97:58:e4:5f:cc:af:19:9b:9f:51:e7:e7:a8:51:a6:8d:05:8f:
f6:3c:ae:0a:e5:c9:21:2f:97:ed:30:b6:2a:7c:c4:72:3c:62:
82:a9:c2:30:ec:dc:7e:07:f4:7d:ab:39:78:7d:34:95:c2:9a:
fa:b5:db:c3:6c:b5:b5:ef:bc:35:03:62:5a:2d:32:43:f0:57:
a3:26:18:37:df:c1:19:0c:21:f9:88:8d:4e:8a:8c:09:85:bc:
5c:2f:b4:dc:bd:9b:a6:34:b1:34:05:d1:83:10:ab:4d:42:e3:
e0:96:07:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:44:04 2025 by rpki-client