Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: jdHmlTkXtdL2hMRCgznUj2wI2//+GpUsAjSJES+tLmg=
Subject key identifier: AF:2E:92:7D:23:5D:0C:DD:38:8A:30:E9:41:09:A5:22:2C:39:13:BA
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 01988FC6D4AC03D4AAFE5F70B1064598427F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 17:00:29 +0000
Manifest this update: Sat 09 Aug 2025 17:00:29 +0000
Manifest next update: Sun 10 Aug 2025 17:00:29 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: 5jPScE1v0C1L7dfwZKC/QUtaJSB07HH/uzQN0cEil4g=)
2: fGeYBTeIqUGlzWkeYCJZuXTV3NA.roa (hash: NVWcI0sfwe5T87MmDN6gYp0EndXzVclJkGdW6buL8Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c6:d4:ac:03:d4:aa:fe:5f:70:b1:06:45:98:42:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Aug 9 17:00:29 2025 GMT
Not After : Aug 10 17:00:29 2025 GMT
Subject: CN=af2e927d235d0cdd388a30e94109a5222c3913ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4b:b7:ec:f8:f5:11:eb:03:c8:60:24:6e:be:
2a:9c:f1:dd:0e:a0:73:45:9f:0d:e4:23:ff:bc:38:
41:4e:67:9f:42:dd:32:6c:3d:26:8c:5f:68:f8:1e:
42:37:b7:30:96:35:da:35:71:c3:eb:a1:d9:ef:44:
3d:69:61:1a:bb:ae:2a:8c:56:3f:1d:8c:3a:c2:5b:
36:bf:5c:1b:5a:c7:9d:73:2e:6c:f3:fa:80:d6:9b:
a9:50:c9:7b:b0:59:b1:ff:4f:af:87:21:c6:a1:bd:
f1:16:58:03:77:92:9b:b8:59:db:80:cc:02:85:6e:
ae:d7:1f:14:07:ac:76:98:9f:47:79:c3:71:39:2b:
b6:34:8f:f9:6e:bd:ee:72:28:9a:35:4a:51:45:7d:
1e:b5:04:c0:75:49:94:5f:65:fe:6e:c3:e4:ca:b6:
4c:b8:d8:c9:5d:ce:b1:31:2a:aa:1f:b6:ca:54:7e:
e6:8d:b3:4e:e8:52:24:2e:82:11:4d:6c:ac:9f:7d:
84:27:23:6a:3f:db:95:4b:24:1e:75:fa:7c:c6:27:
40:38:39:85:7d:af:58:36:8c:89:c4:eb:30:08:8c:
ee:4e:ca:cb:11:e4:b2:88:b7:7d:1e:34:b7:37:34:
dd:d9:d2:53:d3:b1:ed:af:8a:89:ed:ae:04:2f:6a:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2E:92:7D:23:5D:0C:DD:38:8A:30:E9:41:09:A5:22:2C:39:13:BA
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7d:10:73:67:6d:89:ec:f8:51:1a:5b:ca:2c:e6:23:02:d2:
62:5f:34:c9:db:75:a4:8e:e8:9b:9a:6c:90:04:66:cc:45:d2:
2c:32:6b:f1:a8:96:72:b6:d9:f3:bc:7c:9e:e8:fe:4e:a0:a6:
9b:c4:1a:c0:50:25:96:41:44:b7:26:84:df:f6:0d:b7:c2:07:
f5:34:33:fb:45:a8:02:ee:90:e1:86:1f:ab:e5:42:84:d8:cc:
ed:81:53:56:98:70:97:c3:cc:b1:d3:30:35:0e:2c:a1:ce:fd:
cb:51:16:0f:5a:ff:82:cd:7e:e2:79:3b:1b:56:35:0b:02:d5:
28:c8:20:0a:24:26:e5:e8:46:dc:94:71:f6:d9:c8:00:9e:f9:
64:bd:2c:ed:8d:cb:77:85:90:1d:e8:dd:92:2d:d2:25:6a:c4:
b3:44:cc:3d:68:ae:4e:1d:1c:33:b8:cd:14:87:f7:c5:e3:3b:
1f:44:3b:40:90:60:1a:e1:14:24:65:05:a8:55:ce:a8:f7:2c:
d1:be:ab:d1:51:c0:9c:b9:ff:ea:b9:54:97:dc:cf:95:c5:dd:
03:a8:a8:58:7c:dc:01:f0:17:3b:3d:e6:b9:8f:be:e4:5e:a6:
cc:43:47:2b:6c:ce:b4:56:8d:35:fc:62:4e:f7:c2:29:66:06:
d4:c7:78:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:14:13 2025 by rpki-client