Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: 7wnYxcpVNDp4jwVkXocK0ToJAeCUhQCHO8UcefTQsvU=
Subject key identifier: E9:25:EA:B1:D2:07:D0:F8:10:A5:BF:82:86:F1:BC:5B:3B:84:66:FA
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 0198A0F1915048E230ADCAB8549DA43EB7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 136A
Signing time: Wed 13 Aug 2025 01:00:42 +0000
Manifest this update: Wed 13 Aug 2025 01:00:42 +0000
Manifest next update: Thu 14 Aug 2025 01:00:42 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: a4I3bO9jsdRz9PwcGic3nJryxAktV1f2nq09w4/ef6k=)
2: VBSMUM2E1eY-HeRIXiGsI4i681A.roa (hash: 9hPqZnbB+hAnaLIqMz7J1BKYjhJ96B3SoRz8LPWNz7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:91:50:48:e2:30:ad:ca:b8:54:9d:a4:3e:b7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Aug 13 01:00:42 2025 GMT
Not After : Aug 14 01:00:42 2025 GMT
Subject: CN=e925eab1d207d0f810a5bf8286f1bc5b3b8466fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:9d:28:71:4c:dc:23:5d:db:15:d1:35:4c:
74:c0:31:93:c1:31:16:b0:dd:92:e7:38:c4:c7:62:
4c:86:a4:17:2a:2b:b4:15:46:12:3b:38:c2:d0:ee:
89:2d:0a:e3:b8:d3:a9:c3:77:16:6f:86:bb:41:4b:
0f:32:25:dd:37:4d:ad:0a:53:50:b6:09:14:cc:f8:
97:f6:a8:99:af:9b:75:0e:22:e5:02:f9:92:77:75:
12:24:4f:5b:63:5b:76:bd:47:d6:bd:66:cd:d9:d4:
1b:09:fe:e0:c3:55:8c:44:08:18:d3:2a:aa:25:e2:
a4:fc:7a:6a:e9:9a:f2:85:bc:1b:5b:7e:b4:2e:64:
b7:e1:9c:66:6e:b8:27:7d:d1:b8:46:32:77:c6:e2:
36:32:34:a5:cd:49:a9:a0:34:6b:78:2b:39:55:a2:
cb:de:c0:7c:89:33:b2:7a:36:e4:a7:cf:09:df:5b:
30:39:3d:eb:c1:4f:56:d1:0f:a1:fc:24:e9:80:3e:
78:db:fc:62:a7:44:a5:ea:5a:40:47:f3:a8:90:cd:
fe:88:76:91:03:8d:8a:d8:3e:d1:cd:42:87:db:68:
d2:3c:f3:47:4c:ae:e4:8e:2b:9f:1a:af:f4:89:21:
00:b4:e1:a0:2c:4a:7e:b4:08:2d:3b:ab:bb:a7:a1:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:25:EA:B1:D2:07:D0:F8:10:A5:BF:82:86:F1:BC:5B:3B:84:66:FA
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c4:12:78:e6:c9:21:11:61:58:61:92:9e:c1:e5:54:a4:34:
99:92:64:04:1b:80:69:9d:32:ca:53:9c:02:3c:48:61:b3:ba:
cc:86:ff:b2:08:e0:20:6b:a7:90:b8:11:05:a0:d4:df:a4:03:
8c:a1:b7:ce:af:31:92:c3:a2:ac:09:28:2e:2a:d1:c4:5f:b9:
c5:9a:c5:28:ff:ec:25:6b:01:c6:06:8c:96:ab:75:30:5b:99:
b5:89:fb:b5:68:ea:ee:a1:a1:cc:03:c2:83:f1:9b:57:9b:cc:
a7:28:27:25:b4:cc:ad:2b:e2:36:6f:92:fd:37:ec:f1:8c:53:
11:79:05:e3:37:83:21:fc:a2:31:92:88:66:ee:f8:f4:4f:3d:
de:83:da:0c:9a:0c:81:b7:67:15:f7:d7:a2:30:b8:94:63:7d:
67:51:e5:c6:bf:e2:c8:30:28:48:43:99:e3:09:d0:21:a8:cd:
20:82:6c:47:00:a3:49:4e:db:8d:99:aa:9c:f8:ba:92:5c:9e:
33:38:c1:c9:27:7e:fa:38:40:cc:8b:48:8f:28:19:18:60:d2:
93:a6:78:c9:75:8b:51:93:53:6f:a2:75:c3:8d:34:1f:10:f8:
8a:11:3f:4b:a3:cf:3f:5e:39:4c:c5:3d:b5:79:e1:91:37:1f:
23:c8:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:42 2025 by rpki-client