Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: TKJxis1tVNyVFqslhbH/dcdqo4QaqW+pYhOJoj4XA6A=
Subject key identifier: 3D:0C:75:96:DD:60:22:FE:61:BB:8A:BE:83:41:6F:29:AD:E1:3E:51
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 01987418EE1E9515A3C4A847A72A96AF55A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 08:00:47 +0000
Manifest this update: Mon 04 Aug 2025 08:00:47 +0000
Manifest next update: Tue 05 Aug 2025 08:00:47 +0000
Files and hashes: 1: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: fnHMg34mN+WHM/6fmD6yoEyF0dvXnOpZuc2SnVnfDfc=)
2: WMejWLM-fXx9J5hQgJ4TNGxlL40.roa (hash: 9oO47gALmpiotO1VgFePsYnaYk2I9wrq424pEV3SiMU=)
3: n5VL-9G7-YZixQJP-BPKVSDqpR4.roa (hash: t+3M+svFb4/LG8WrDBM3x4yGiPVd0ez6gYqaJNLI3Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:ee:1e:95:15:a3:c4:a8:47:a7:2a:96:af:55:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Aug 4 08:00:47 2025 GMT
Not After : Aug 5 08:00:47 2025 GMT
Subject: CN=3d0c7596dd6022fe61bb8abe83416f29ade13e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7b:60:3d:da:46:17:09:46:59:3d:36:a2:6b:
ea:0e:6d:52:60:40:97:91:41:98:e7:2a:fb:af:b4:
f7:71:c8:61:39:56:f5:71:b7:c9:c6:a2:cd:5c:ea:
ca:76:2d:04:e3:6d:88:f8:8f:ba:d8:2a:3f:06:8d:
28:aa:57:f0:96:88:c8:ab:c2:ac:e8:e3:8b:5f:13:
9d:d3:5c:87:08:64:3d:2b:b1:9c:3a:f9:31:c6:70:
61:03:80:9b:07:dd:89:88:7e:bf:66:a8:80:0b:56:
20:e6:96:94:17:bd:5b:1b:f1:16:26:d9:1f:96:1f:
6a:29:3a:31:49:5a:0d:88:64:1b:60:d7:77:a8:e3:
8f:17:45:76:3d:ec:09:f3:fa:70:93:4c:ae:5e:a5:
b7:91:e3:5d:5a:d2:38:27:4c:3f:74:fc:62:02:03:
8d:b3:30:65:2c:d8:46:05:c5:d5:90:24:17:60:5d:
df:6a:d1:0a:13:5d:44:00:ac:76:ec:a5:23:be:80:
da:78:d4:f1:da:39:bf:62:df:1c:e1:98:39:9e:27:
1e:bb:36:7b:63:69:37:9f:88:7f:7e:b3:80:37:ae:
e9:d4:3b:3d:71:6e:11:88:e9:ba:c7:1b:cf:8c:90:
51:c9:b5:71:ba:5a:62:a1:19:96:36:a3:f1:85:a0:
ab:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0C:75:96:DD:60:22:FE:61:BB:8A:BE:83:41:6F:29:AD:E1:3E:51
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:17:af:aa:62:8b:01:fd:f9:dd:a2:54:c6:1b:2e:15:c3:4c:
5f:e1:f3:2c:34:e0:59:18:fd:a7:d6:71:8e:f9:a3:a7:9e:eb:
7d:72:19:08:17:c8:8b:b6:08:a1:e5:b6:7e:e3:34:61:21:1a:
0b:bd:70:58:f9:ef:ad:82:e5:40:e9:68:a7:7a:1c:9a:b5:1a:
25:7d:0c:08:c2:47:1a:76:3c:3e:89:42:c3:72:d3:27:b0:5b:
24:e1:7e:ad:62:79:f9:31:47:da:ca:ad:28:fb:1e:c2:dd:e2:
90:bf:fc:fa:1f:0e:30:ad:c8:49:48:d2:d0:e4:fa:07:f4:36:
7f:46:5a:58:9e:12:8c:ee:f9:2c:5e:f4:c1:a7:1a:1b:b6:11:
67:0a:84:8a:fd:c4:1f:b0:09:08:4f:8b:ee:5c:83:30:8f:70:
f9:cd:e0:09:bf:5b:49:f3:3f:6d:67:92:db:ae:4f:20:4d:f5:
a5:18:d0:6f:2c:10:7b:c3:72:a9:1b:b7:52:a9:e4:cf:bc:0e:
f3:72:fa:82:f5:6d:5a:64:23:a6:a9:ed:62:15:d0:d5:02:a2:
37:d0:3d:09:fd:af:9c:b4:e1:17:26:d8:67:8b:e9:e1:94:f5:
d5:31:70:8b:4c:7e:57:72:61:50:b4:3f:90:5b:b0:a5:74:42:
eb:db:cf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:11 2025 by rpki-client