Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier: KgK2sBQJl33xPgPyZtTXUB01/XO0GYl3SnvMFqVvKlA=
Subject key identifier: 85:49:97:D7:12:32:2D:79:32:2A:C7:AF:31:38:1E:D3:29:64:B1:8B
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial: 019880C25CE3F3B3ED9BE62DEB5E624D0353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 19:01:17 +0000
Manifest this update: Wed 06 Aug 2025 19:01:17 +0000
Manifest next update: Thu 07 Aug 2025 19:01:17 +0000
Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: gIyWZHmR9P9i4WEGotJ/rM2gUl9XWgG2XhbKHM51wvQ=)
2: BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa (hash: zGv7kfCx9AyBiy/Vt4g16r88DKiDMl7S2RsrkRbPYxA=)
3: U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa (hash: p5afCkYVQi7asNinB13X4z3pkTkHpo8/a9b5lnTy5To=)
4: hlFLNTPKu_nVGF692xwIYmZW2GU.roa (hash: c5Q2Sew+Iis+NOcJWfVvfa4Ocr0QgEd2RYjfl4HhWNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:5c:e3:f3:b3:ed:9b:e6:2d:eb:5e:62:4d:03:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Validity
Not Before: Aug 6 19:01:17 2025 GMT
Not After : Aug 7 19:01:17 2025 GMT
Subject: CN=854997d712322d79322ac7af31381ed32964b18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:da:62:4e:52:ab:08:02:37:e4:b1:0f:6e:
60:a1:d1:58:7c:45:36:4c:46:7b:a2:cf:6f:f3:f4:
07:df:39:03:54:b3:fd:d8:ac:d6:09:c6:88:63:a8:
f8:d6:35:bf:65:cd:3c:0a:82:1f:da:a2:64:02:ee:
ef:e9:99:51:52:09:de:77:e0:f0:ff:dc:16:2d:c7:
46:83:3e:75:9b:c0:8e:f5:81:63:cc:22:0c:3f:d4:
8f:c8:ee:f4:fd:01:65:d1:5f:d4:fe:b0:e8:88:9e:
a6:64:4c:61:3b:d7:51:f2:ee:5c:58:7b:be:ed:33:
a6:0d:30:74:9f:fa:1b:97:ac:d8:57:ad:a9:e1:2a:
02:01:6e:3f:fc:d7:5b:2e:1d:15:a0:cc:4d:58:a2:
44:6e:b4:80:18:d6:c7:ce:45:7a:fb:40:6f:88:8d:
94:82:98:44:d7:d9:6b:40:41:e9:30:a7:3a:63:33:
20:bf:ef:67:f6:46:08:2e:30:b6:98:94:1e:90:e9:
d7:38:bb:91:23:c6:4f:34:25:0c:30:c7:d1:c6:fc:
31:a9:87:ab:b4:74:2d:a2:4f:fc:53:0e:ca:10:37:
11:3b:e1:53:7f:25:b1:5e:67:76:03:71:ec:e8:2d:
c1:fc:65:65:88:50:73:67:e6:41:0d:ae:f0:89:25:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:49:97:D7:12:32:2D:79:32:2A:C7:AF:31:38:1E:D3:29:64:B1:8B
X509v3 Authority Key Identifier:
keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:27:1c:55:3b:9a:e4:52:fd:76:b3:0c:47:88:54:c4:a6:b5:
c3:07:4a:4a:97:93:88:48:2d:2d:bd:d4:42:d9:d4:bc:55:4d:
2c:d4:42:90:f0:25:d5:16:51:63:8f:ca:81:22:e3:4e:e3:07:
01:2e:92:01:2f:b8:7e:21:ed:17:12:79:fe:b4:73:79:24:f3:
cd:dc:d5:50:4c:61:05:c6:a3:3e:da:0e:7f:c0:86:c7:2d:f5:
d5:71:e1:73:4d:9a:f0:5c:08:41:23:67:c0:0b:8a:0b:2d:2f:
89:d8:af:ff:c0:6f:6b:8f:1a:65:8f:d9:96:2b:f4:f2:5a:f7:
c5:7b:59:ec:1b:59:c8:3a:c1:f1:2e:5d:e4:b4:28:5d:69:20:
d3:15:4e:86:b5:67:ce:5f:bb:eb:64:68:b7:c0:f4:a9:23:2e:
19:13:d5:c3:1d:c5:b0:b6:e2:45:b1:39:ad:05:9e:a4:af:87:
a6:60:f1:de:3e:3b:57:d7:27:74:fa:de:47:d9:9d:15:95:23:
a7:f9:28:aa:27:25:2e:22:8c:2c:5e:e8:61:c0:0e:2a:1b:e0:
63:61:7e:ea:78:df:59:43:c3:a3:00:e5:08:79:ab:27:a3:4c:
06:63:ce:5c:ea:b5:0d:94:ac:ca:d6:d0:ea:7e:cd:ae:e7:3a:
00:c6:87:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:23 2025 by rpki-client