Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: 8GnYiQ8BvSClBwWdflJ3KHJMXSBg292AT78nlWXUV1Y=
Subject key identifier: 3B:E2:17:09:8F:A1:CE:60:1E:6D:C9:B7:C9:06:5A:A2:A7:9C:55:39
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 019893364EB028B9D9B024F31A7B4E51B66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 05DE
Signing time: Sun 10 Aug 2025 09:01:06 +0000
Manifest this update: Sun 10 Aug 2025 09:01:06 +0000
Manifest next update: Mon 11 Aug 2025 09:01:06 +0000
Files and hashes: 1: 67zW8t21om1pTXvyuagS0QWX12s.roa (hash: arwG9XkQ/+2dVagELL/zq8/mCR4dYaym8bqyA1sBk4A=)
2: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: MAYg3KY91Dx9WIhs6QVYUdRU/lOHErh2G2I6i8g8l2U=)
3: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (hash: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:4e:b0:28:b9:d9:b0:24:f3:1a:7b:4e:51:b6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Aug 10 09:01:06 2025 GMT
Not After : Aug 11 09:01:06 2025 GMT
Subject: CN=3be217098fa1ce601e6dc9b7c9065aa2a79c5539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:53:0a:b9:f3:fe:37:be:cd:eb:10:8a:ba:8b:
bc:95:92:c1:d6:f0:53:cf:19:12:fa:79:73:9d:f1:
de:3f:37:ff:c9:08:8c:de:83:ed:1f:5b:fe:19:3b:
59:10:d5:a8:75:7e:82:c3:d6:59:a6:d3:20:b9:90:
74:65:50:e4:8a:a5:2f:c4:d5:ce:aa:fa:09:5d:23:
4b:1a:40:60:04:5e:61:07:e9:e9:2d:76:ed:bf:89:
45:ea:db:12:0e:72:16:45:89:4c:2a:1b:a0:5d:e4:
0c:6b:ca:90:10:7c:d0:dd:6f:0f:2b:7d:7f:90:da:
20:e6:9e:a7:6a:a6:fb:a4:66:7f:b2:30:de:6a:d8:
0d:48:81:11:f0:ec:6c:23:e0:1d:b5:ea:bc:ae:f3:
51:55:24:61:d8:a9:fa:62:8f:72:ca:28:c2:e1:d8:
16:6b:63:ff:cf:02:d6:25:16:eb:49:e9:79:7a:cd:
cc:62:29:1f:1f:9a:9d:70:58:fe:00:ca:b8:38:a9:
4e:7e:e8:f3:92:86:aa:85:21:7a:3d:f9:3a:8f:fd:
70:81:72:15:15:a8:21:cf:49:3f:9f:28:f3:a8:33:
59:d0:6f:d6:ff:b1:3c:ce:58:94:75:5c:39:ee:9b:
ff:ae:6f:9c:ba:67:89:7b:ad:03:99:6d:65:e1:9d:
6e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E2:17:09:8F:A1:CE:60:1E:6D:C9:B7:C9:06:5A:A2:A7:9C:55:39
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:86:7a:b9:37:42:e2:cc:83:86:09:b9:80:a2:d8:2e:44:08:
2c:9e:78:a3:20:e5:4f:6e:dd:a8:27:8a:0f:35:b5:18:88:77:
2f:37:0d:f3:7e:fb:0c:88:cb:3a:e1:fd:05:03:a9:9d:5d:a4:
be:e1:51:cf:0e:8f:56:73:82:a8:2a:6b:74:25:d7:47:8b:27:
38:a5:79:a6:86:f8:86:8f:2d:5c:61:90:71:db:48:4e:07:2a:
a9:68:04:3a:ed:8b:b9:5f:f6:a3:95:52:8b:94:4c:f8:0b:a3:
27:06:c0:4e:a2:8b:f8:cf:46:bc:fb:99:79:3d:27:1b:f4:3d:
0a:f2:6d:e8:20:89:c2:d9:cf:5b:33:cb:83:1d:3f:27:91:b0:
d3:81:16:a1:e7:5a:cc:4c:51:70:63:71:36:b3:d5:7e:cb:41:
b3:79:e8:6c:06:b2:b2:60:3b:b1:79:eb:26:cd:49:6f:40:22:
e2:a6:6b:c8:2e:52:e4:b0:ab:ed:ff:86:e1:30:0c:81:1a:2c:
f5:31:fb:80:d8:ef:68:bd:6a:15:29:e8:93:ae:e6:13:b5:28:
5a:85:e7:65:61:7b:4f:44:0a:e7:dc:4b:12:30:26:cf:4a:f6:
f3:7f:9e:58:30:84:2f:03:02:b5:4e:a3:e2:50:53:ba:c2:03:
0e:5c:16:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:27 2025 by rpki-client