Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
File: 9-VkfNC39yK-1FafN7i_j5JTjPU.mft (raw, json)
Hash identifier: sMSnC/KUJp74T0XgsGmztDijTICMw6rCq+8P2dirqSQ=
Subject key identifier: 2E:E2:89:4A:89:98:8A:22:D1:38:06:D7:C1:20:C0:D8:CD:73:17:B3
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 01988243249B41B605983EF17C9FFB1F1570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
Manifest number: 1240
Signing time: Thu 07 Aug 2025 02:01:34 +0000
Manifest this update: Thu 07 Aug 2025 02:01:34 +0000
Manifest next update: Fri 08 Aug 2025 02:01:34 +0000
Files and hashes: 1: 9-VkfNC39yK-1FafN7i_j5JTjPU.crl (hash: zclX0CbhZOxp+Qql493LMbDCIGmwqMjSnH7w/gtKvVY=)
2: DBhdVQnWbQeKdQzgQiCpHErXzhE.roa (hash: ke+PE6qJEQ9z2GmlNhQtn8qkPU8ewvFXiEh0aYxuqOo=)
3: q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa (hash: aaFqVy4+hGHKy39rpTWrEUIWgkLIuK6ZgSAREjkESF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:24:9b:41:b6:05:98:3e:f1:7c:9f:fb:1f:15:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Aug 7 02:01:34 2025 GMT
Not After : Aug 8 02:01:34 2025 GMT
Subject: CN=2ee2894a89988a22d13806d7c120c0d8cd7317b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:6d:2e:f6:ec:e8:24:8b:55:c4:29:25:31:
03:16:c8:53:ab:22:1e:b5:89:f3:85:dd:ae:d8:35:
2c:d4:63:d8:96:80:db:6a:63:a3:db:1a:db:40:2d:
14:9c:72:61:a6:3e:71:b2:ef:89:a2:0b:3d:da:c0:
e4:98:d3:77:70:92:e6:1a:37:19:65:da:96:c2:bc:
8c:0c:08:e1:b1:54:c3:d2:48:f3:0c:a4:57:78:ea:
f1:1c:52:9c:a7:4e:85:c1:06:cc:71:f6:64:cb:72:
47:f6:92:7d:9e:ac:32:d4:47:68:6b:05:98:7f:ee:
34:ae:5e:32:7f:7e:2e:61:33:84:c5:6e:e4:49:f2:
16:2d:ff:07:1c:e2:77:92:c3:c6:61:4f:c9:d4:c0:
c7:0a:cb:3d:2f:2c:aa:59:b6:87:fb:07:7c:ea:07:
46:3a:fd:06:76:b7:2f:3c:49:8f:6d:49:7e:88:5f:
dc:08:a9:c5:56:1d:09:4a:41:b8:14:5b:91:4e:69:
5a:3a:79:b0:f2:81:df:43:b0:c5:f6:46:91:09:52:
76:fc:c9:14:4b:23:4a:e3:da:ff:83:7f:07:ba:66:
9d:14:2a:78:64:b4:1b:40:b1:58:5a:b1:c0:d2:a5:
5c:c9:6f:c6:2f:11:7a:df:a0:90:0b:3b:ba:b5:90:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E2:89:4A:89:98:8A:22:D1:38:06:D7:C1:20:C0:D8:CD:73:17:B3
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:84:0e:63:c5:cc:e7:d7:3a:76:66:2d:00:7c:c9:c6:a3:4c:
c8:60:f3:16:6a:16:11:66:57:5f:9d:3c:df:8a:90:32:47:ee:
01:0f:b3:40:6a:75:cc:83:f4:96:32:1d:fc:bc:a4:50:a9:14:
09:20:c9:08:70:51:70:cb:bb:ff:36:3d:2a:1c:18:a7:bb:13:
cc:88:e4:d3:41:2a:ed:62:b7:42:f9:66:c1:81:f3:56:05:81:
60:4d:d3:6b:50:33:f8:4f:01:75:86:f5:16:32:62:13:d8:64:
c8:01:5b:b2:ca:aa:93:e4:3e:e3:f2:d2:f4:5a:b6:c8:eb:52:
51:57:16:dc:d4:66:38:f9:81:97:23:72:47:e0:1a:23:c1:60:
1b:9b:55:7b:b6:4f:e2:b5:dd:b1:ef:2f:bd:74:77:7d:f3:3b:
c0:0e:cd:a3:6f:18:1f:4b:97:48:fd:ea:ea:79:b3:53:af:cd:
2f:d3:03:f9:41:ad:ca:4d:65:23:b7:ac:9f:b9:9c:87:eb:63:
3c:fa:85:1a:c3:ad:f7:17:40:43:9f:a4:90:e6:16:61:b4:c3:
ac:d8:04:7c:8d:51:e0:37:12:f6:04:13:b4:e3:b3:94:50:9a:
28:3a:1f:b0:93:dd:a5:e4:10:96:5b:e0:4d:17:07:a8:1b:a2:
3d:8e:bd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:11:05 2025 by rpki-client