Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier: REhina6BQtC9VkTmZT+P/L8ftCrKmy47oXJlCxN+CM0=
Subject key identifier: 95:FD:3B:60:E6:A0:03:49:A5:BD:C5:66:54:1F:3B:9C:8B:4E:93:D5
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 01987DF85C4B647A66DFFF2482D9E9898C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number: 1623
Signing time: Wed 06 Aug 2025 06:01:25 +0000
Manifest this update: Wed 06 Aug 2025 06:01:25 +0000
Manifest next update: Thu 07 Aug 2025 06:01:25 +0000
Files and hashes: 1: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=)
2: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=)
3: Fnl-4WGHpZ5LXFARfr2ATzp8vLk.roa (hash: ux6nyEJd1cHyE1av/8nhZIQD47mVZkeQGG+DrMwKlok=)
4: QX-JX3Qu6B9dGH2bgHRHXCFQSGM.roa (hash: Libk/j+UTy/9cJUk+hwXMnFM9cOquglWjTlufdsoMkE=)
5: bDPZ2IR6ImcRHKaCKb1DFYZSPeU.roa (hash: C/oWZRw0Dl261ZToD4X2GP0Mb4nYzslAlII1IzygPX8=)
6: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=)
7: lipPE0ZW42V7IEiCduQOBOaBQRM.roa (hash: nPRnjF3dKcW3adjgIBLS/OZJ6pE6pjg9DlJLpdzKt78=)
8: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=)
9: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: MxMe3Yj8zJLjpYYSIInfRkvZQfl4HDHJjG3p7eDCmR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:5c:4b:64:7a:66:df:ff:24:82:d9:e9:89:8c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Aug 6 06:01:25 2025 GMT
Not After : Aug 7 06:01:25 2025 GMT
Subject: CN=95fd3b60e6a00349a5bdc566541f3b9c8b4e93d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:92:78:c5:a7:71:4d:dd:2b:e7:1d:4e:4b:
b0:1b:ea:62:88:e9:0f:9d:9b:43:ce:c4:7f:df:9c:
b5:44:ee:d2:3c:92:5e:95:c4:7c:df:8d:ed:18:6b:
14:5a:b9:85:57:ce:29:82:d7:7d:68:4f:0f:e9:68:
37:a6:61:e3:af:e7:29:be:9e:cb:8f:8a:12:01:2c:
35:7c:b6:fc:f2:41:2b:ba:a3:c9:d0:3b:4c:ce:08:
67:bf:88:37:25:bd:3b:27:0d:34:53:8e:ef:97:7a:
40:c1:41:fc:f6:7b:03:65:87:9c:5a:07:28:63:bf:
f3:e4:ed:f7:d2:31:8e:15:36:53:7d:a4:20:1f:70:
5f:33:1e:f4:d5:ca:5d:f0:9a:2c:9d:e2:50:87:7b:
c8:c1:53:d0:41:dc:2b:b0:28:15:5d:52:bc:08:f8:
02:c5:df:49:29:fb:99:84:15:52:94:8d:87:23:4a:
78:a6:4c:cb:c2:0f:6e:07:75:c3:4e:2e:b5:0f:cc:
57:b1:84:cc:db:a4:f9:f4:31:9c:2d:83:1f:6b:4f:
ad:0c:d7:1d:f8:ff:40:49:65:be:07:40:7e:fc:b5:
ca:51:14:6f:1a:20:45:bc:89:e9:7c:c6:02:85:28:
46:f0:6f:1e:61:d2:5b:10:e8:91:bb:a3:22:0f:de:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FD:3B:60:E6:A0:03:49:A5:BD:C5:66:54:1F:3B:9C:8B:4E:93:D5
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3f:6f:c1:a9:d7:88:8a:40:6d:4e:0c:2b:aa:9f:74:a5:c7:
4b:2d:af:64:fc:a4:71:c7:f2:4c:13:9b:8b:b4:1a:61:e7:cc:
ed:68:b9:ab:b5:aa:33:97:2f:f7:38:fc:18:92:60:0c:4d:25:
cd:62:3d:f4:c0:04:ac:0b:f0:47:6e:e3:6d:c7:1a:f8:bc:c5:
78:ee:3d:ec:bf:42:30:e3:39:86:8d:2f:ee:64:c8:cd:77:1f:
72:42:ab:b4:13:b9:53:9e:5c:47:c1:5e:ea:95:7e:83:c0:98:
6c:fc:53:90:e8:2f:fe:6a:c5:73:3b:e2:5d:f7:b0:27:65:fb:
84:5a:4f:71:2c:1f:33:8f:ad:c5:60:82:96:cc:3a:7e:88:e8:
ef:bc:74:0a:d7:d7:f2:16:d9:6f:1d:3b:a7:aa:1b:6c:64:8c:
97:13:36:8e:e0:8b:b4:ba:a6:de:39:8a:a4:da:67:b9:93:86:
ce:57:9c:0d:3a:bf:ff:cb:c8:76:93:4d:62:9d:9a:14:00:74:
bc:66:b7:a4:04:ae:dd:3a:77:84:c8:9d:d7:a4:b1:23:18:03:
f0:42:c8:94:f2:88:ff:79:75:7f:3b:54:a1:73:24:a0:03:cc:
05:44:5a:41:01:04:72:fd:1a:c6:0a:4b:88:4c:35:30:6e:18:
7b:fe:c7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:19:56 2025 by rpki-client