Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: 0hJeaqeA2mPD1B0BpI/vJtsbFG5sMfOkYUfcAJV2i9Q=
Subject key identifier: 6D:E1:8E:99:39:A0:50:A8:74:1D:49:52:74:28:3C:3E:B1:52:84:F5
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 01989336985E992F54B2E8607174B07B5148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 09:01:25 +0000
Manifest this update: Sun 10 Aug 2025 09:01:25 +0000
Manifest next update: Mon 11 Aug 2025 09:01:25 +0000
Files and hashes: 1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=)
2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: umjsw6Q7Tl6maCeNKlmfTxcE/CQ3buBbmQoXAAG+/ss=)
3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:98:5e:99:2f:54:b2:e8:60:71:74:b0:7b:51:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Aug 10 09:01:25 2025 GMT
Not After : Aug 11 09:01:25 2025 GMT
Subject: CN=6de18e9939a050a8741d495274283c3eb15284f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:87:e9:b6:6c:1a:0f:77:5d:3e:ea:de:2c:
a2:20:27:0c:b6:3a:3b:35:bc:01:5b:c1:fa:31:67:
5b:5d:16:90:b5:6a:16:f6:7c:cb:49:bd:18:84:e0:
36:49:ed:61:3d:f8:b5:de:ab:6f:13:70:c5:96:c5:
cd:a7:a7:ff:f8:00:4c:3f:8c:70:22:03:88:e0:0d:
1d:20:0f:60:40:8d:c4:0c:32:df:38:a0:55:41:69:
a0:a1:ad:9a:a5:24:81:3d:ab:8f:20:2c:f6:e6:ea:
47:66:27:86:4f:e9:a5:c3:56:0b:eb:06:34:6d:c5:
36:ab:da:ec:a4:a0:cf:62:9c:e4:3f:ae:2e:f2:3f:
74:28:f3:68:75:6f:37:71:c7:fb:69:96:b3:2d:3e:
b5:fb:08:90:35:d0:a1:e9:de:b9:38:d9:39:81:64:
b5:99:b7:1c:f5:af:fb:03:6a:61:94:5d:c7:d8:55:
fa:52:e4:85:f5:c2:ff:17:5c:c4:2c:5c:dc:88:02:
4e:3d:48:46:ef:9b:81:71:b5:36:f3:8e:d1:8e:7a:
d0:fc:c1:80:7a:84:ca:17:2e:51:98:ca:d6:5b:0a:
22:f8:92:47:e2:d4:5e:bf:60:db:f2:19:29:0a:e6:
99:16:0f:c6:c9:e3:05:b0:40:58:68:6c:75:59:65:
2b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E1:8E:99:39:A0:50:A8:74:1D:49:52:74:28:3C:3E:B1:52:84:F5
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:84:96:c1:df:c5:4e:6d:87:9d:01:f7:b7:b8:29:1f:3e:c0:
99:3f:17:1d:e0:ee:66:f5:16:a1:51:ef:af:48:0b:1a:08:9d:
6a:27:c2:f2:ae:c8:12:97:f7:ac:1f:24:3a:6c:51:35:3e:b4:
dc:05:1a:72:bd:5b:a5:50:83:c4:df:be:a4:e4:24:fb:4e:0e:
ca:a3:73:58:06:68:f1:4b:88:61:6a:43:0d:69:89:d3:70:7d:
8f:61:e6:d3:02:77:cc:81:a6:7d:f7:e4:ad:32:3a:78:46:1d:
3d:b0:a5:e5:0f:98:17:7d:2a:c3:e0:d1:92:b1:89:96:6a:7e:
0b:de:d3:d4:0b:50:05:d2:94:e0:b7:27:84:3f:8b:ba:19:e1:
a8:b3:b6:d9:b9:0e:13:63:a2:93:8c:ce:a9:79:0d:85:d6:53:
5f:69:61:37:18:5c:eb:cf:e5:72:eb:3e:61:50:2b:0e:5d:b3:
b9:b0:17:46:1b:8d:df:df:dd:22:ab:ef:97:d9:cb:d4:d9:da:
c5:78:28:12:48:87:fc:e0:f2:8f:17:77:f3:b9:96:61:70:7b:
5a:aa:e1:89:bc:a4:24:3e:5e:ab:b4:58:5a:5c:a2:08:dd:25:
5e:47:85:8c:be:01:c4:4e:98:ab:8e:67:6c:c9:3a:90:c8:47:
1f:77:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:27 2025 by rpki-client