
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier: AN7KXCLd745+42wB+Y6KjpJrp8LQdtzag62nCzagZMw=
Subject key identifier: 32:99:D0:80:C7:38:C6:78:16:E8:1F:CB:B6:CC:66:84:06:3F:39:00
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 0198752BCF84424BE43A651A85F4D54E7C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number: 0E30
Signing time: Mon 04 Aug 2025 13:01:02 +0000
Manifest this update: Mon 04 Aug 2025 13:01:02 +0000
Manifest next update: Tue 05 Aug 2025 13:01:02 +0000
Files and hashes: 1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=)
2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: URoTwZvjwVzsar4khXy9EvEvEUSSaErGENEjKT73RN8=)
3: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=)
4: S5ZKnLfz4DstONEqZm_YmyZ8kvY.roa (hash: X0rSxal4LbSgFqA0+FsHMQ78+/EIGLIojbhDJzOesXI=)
5: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=)
6: VunL007YcgdB0SQwEVqZksZS8Fs.roa (hash: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=)
7: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=)
8: xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (hash: 9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:cf:84:42:4b:e4:3a:65:1a:85:f4:d5:4e:7c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Aug 4 13:01:02 2025 GMT
Not After : Aug 5 13:01:02 2025 GMT
Subject: CN=3299d080c738c67816e81fcbb6cc6684063f3900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:83:e0:aa:a6:4a:b4:85:65:34:13:c9:57:
b9:4b:a6:9e:42:63:63:6f:dc:f7:86:1a:b5:d1:1f:
fa:95:8e:06:b6:70:73:50:17:b2:a7:17:94:b0:48:
b1:6a:f4:c2:4a:90:25:b4:d0:ae:3c:47:6f:2e:8a:
84:de:e2:dd:2a:09:83:e5:b7:1b:3a:fa:9b:dc:fe:
f1:f9:3a:c5:8f:5c:a3:50:f0:ed:75:79:63:6e:b1:
74:98:ef:b1:24:33:35:90:a6:a0:3e:b8:49:2f:8c:
f8:40:45:da:26:ba:d6:dc:50:3c:5e:9b:d3:cd:f9:
ed:01:e5:7e:3c:f3:03:d6:1a:37:26:88:b9:38:60:
8c:c5:d3:74:69:02:4c:58:e1:f2:44:25:da:a0:53:
45:97:f8:b8:e1:ef:65:24:64:39:5b:4f:f0:5b:af:
06:aa:9f:b9:ed:35:24:2d:95:b2:6c:31:47:90:bf:
95:6e:65:c6:dc:16:7f:5e:8e:30:ce:9b:8b:77:8b:
00:14:fe:3c:eb:bb:58:d5:c5:70:74:16:09:11:d2:
2f:ac:15:05:c9:48:ac:46:32:33:82:5e:8b:f0:65:
79:e3:03:fb:0f:1e:38:68:41:91:f8:12:85:4f:30:
b7:a9:07:d1:74:ed:4e:46:95:52:34:0f:b5:b3:84:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:99:D0:80:C7:38:C6:78:16:E8:1F:CB:B6:CC:66:84:06:3F:39:00
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1e:c3:e4:51:f7:33:a1:d3:bd:cd:6b:85:d8:e5:d9:5c:92:
48:2f:53:2c:8a:20:bf:71:95:d1:5f:b7:e0:84:89:a8:0b:4c:
13:12:98:11:52:b5:93:d8:cd:f6:b2:1c:b5:f4:e7:d0:d3:d2:
f1:6a:3d:53:a3:4f:d0:bb:10:75:0c:68:2d:fa:6d:82:fb:58:
8a:59:ea:35:2d:50:13:45:53:dd:2c:29:9c:a4:f7:37:e1:4d:
77:73:bc:4e:c9:21:03:6f:ef:5c:b0:4f:56:4d:eb:41:fb:a3:
75:9e:2e:d5:92:a7:f1:36:1c:06:6e:33:04:8d:74:09:e2:ba:
65:9e:43:9f:a7:89:ad:64:a7:a9:3c:fa:47:66:1b:33:25:9c:
1d:85:82:4c:ce:84:59:2e:c4:c0:52:c1:f0:9b:d5:8e:59:fb:
2a:13:7d:3c:97:b4:60:92:25:34:99:81:31:6b:d9:61:6a:88:
59:d8:56:69:1e:09:8b:a7:e1:83:81:25:94:3f:02:93:1f:d3:
d1:53:ee:1a:80:c7:0c:84:7b:94:ce:cb:6e:ab:d8:0d:a4:5f:
75:20:08:3b:4c:5f:2a:86:f5:b9:84:2d:b1:6e:55:53:5e:e9:
1c:7e:63:90:3a:14:b8:a3:2e:82:0b:3d:e4:fe:cb:8b:51:6c:
a4:6a:10:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:04 2025 by rpki-client