Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier: yZW69puvcIDcCh2pU+o5jOFbIrykJdL4xXCMpBVw/oI=
Subject key identifier: 5A:50:1D:2A:1F:E1:8A:8D:04:3F:2D:AA:93:41:E0:57:C2:9A:16:62
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 019873E2C22CED784117A2B272C59282DEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number: 1612
Signing time: Mon 04 Aug 2025 07:01:37 +0000
Manifest this update: Mon 04 Aug 2025 07:01:37 +0000
Manifest next update: Tue 05 Aug 2025 07:01:37 +0000
Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: +nByvXmZ5wr4H5AJ4jhFoBIILQPaoFs+qez0ksLlfNM=)
2: yhhMqOayivlP0HqWgBqkxI1f14U.roa (hash: w/NNRo63VlTAmPeepIG4fNxKMWjZVte8F0Xs65Wc7u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:c2:2c:ed:78:41:17:a2:b2:72:c5:92:82:de:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: Aug 4 07:01:37 2025 GMT
Not After : Aug 5 07:01:37 2025 GMT
Subject: CN=5a501d2a1fe18a8d043f2daa9341e057c29a1662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:c1:8e:45:95:7a:9a:92:84:f0:d1:7b:18:
51:c9:98:14:a0:47:94:02:28:74:2f:b0:0b:be:59:
a2:8d:4a:9a:65:0f:dc:c5:fe:21:7b:bc:17:86:ff:
3b:d4:3c:0b:ee:56:09:e2:68:dd:8c:ce:62:ee:5b:
45:bc:61:61:ca:c2:7c:f5:89:0b:56:5f:3f:e5:ea:
7e:ad:f0:c5:c1:a4:d2:3e:ad:b4:43:c9:60:11:3d:
98:4d:64:bf:bc:f1:49:04:67:a3:18:86:b2:2d:58:
43:80:4d:2d:8f:33:f1:6d:4d:ab:32:e3:57:d5:b8:
8a:bb:44:cd:76:05:87:97:77:d3:35:00:6f:82:27:
40:5c:bd:7a:7a:5f:fd:22:a2:f4:04:6f:29:d1:9c:
71:87:98:cf:0b:09:c5:31:36:6f:34:3f:0c:33:f5:
d5:ec:0d:a3:18:5a:fc:0b:54:46:54:8c:77:02:29:
bf:90:86:d6:32:f5:75:31:4c:bf:dc:2d:66:67:55:
e0:18:6d:fc:f0:1a:9a:db:9b:3d:bf:17:91:3f:6a:
1a:2d:f9:6e:9f:b2:7a:1e:80:d5:ad:6e:d3:3c:81:
e5:fe:7b:bb:b1:14:97:c2:74:83:2d:88:d7:0c:fc:
16:be:56:5d:72:a7:d5:10:a8:a4:59:af:08:af:ff:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:50:1D:2A:1F:E1:8A:8D:04:3F:2D:AA:93:41:E0:57:C2:9A:16:62
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d1:84:4b:69:c4:91:5e:f2:97:55:05:d5:dd:6c:ca:10:e8:
55:a4:27:b4:d8:e2:db:49:8d:4d:0b:5c:4d:15:fc:61:8f:87:
91:79:be:3e:50:f2:b6:ac:83:6e:30:01:9b:e4:6a:17:51:12:
ee:aa:34:fb:ca:8d:72:46:cd:99:2c:5d:58:c4:4a:3c:4b:ec:
a3:a4:84:27:fa:ad:f8:5c:c4:44:f8:a0:76:3a:e3:e7:ca:e6:
1f:d2:cf:96:87:57:8e:68:4e:4a:e5:b3:73:7b:3a:b8:af:6b:
9a:29:c3:20:97:f1:61:6b:a2:13:dd:27:52:89:a7:1a:9d:ad:
0b:7c:57:fd:8e:d8:67:22:e9:6e:66:42:4c:70:bc:f0:1d:5e:
f7:60:31:32:97:c8:f1:a2:66:b5:d3:8f:6b:46:ac:7c:2f:ec:
ff:87:17:a2:84:25:68:04:15:d3:6b:fc:49:49:d4:c9:93:3d:
ed:a5:e1:3a:db:cc:12:e2:12:7b:90:8f:22:88:12:c4:71:6d:
f7:75:c0:ae:c9:6c:a8:59:78:7c:d6:40:1f:f1:44:49:f8:05:
48:38:23:73:cf:90:08:e4:67:d5:c9:a6:1d:c1:e8:d3:bc:c5:
b0:9a:c2:85:ec:f9:d7:d4:51:0b:57:2a:b3:36:3a:b9:88:0c:
14:4d:a1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:08 2025 by rpki-client