Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: ZvMRvRvMEuJWUveexsOAosM2XAwe94lqhL3aamVnzj0=
Subject key identifier: 08:56:4A:D2:71:7A:4D:B0:D5:B8:73:22:96:79:35:BC:88:5B:5C:EC
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 019874195004D7158094D24AA691D4694FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 08:01:12 +0000
Manifest this update: Mon 04 Aug 2025 08:01:12 +0000
Manifest next update: Tue 05 Aug 2025 08:01:12 +0000
Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: vzN4LsJdSF+qPEwoyBUJK0icsQj/AkI+Xy/UprZtCsY=)
3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:50:04:d7:15:80:94:d2:4a:a6:91:d4:69:4f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Aug 4 08:01:12 2025 GMT
Not After : Aug 5 08:01:12 2025 GMT
Subject: CN=08564ad2717a4db0d5b87322967935bc885b5cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:8b:4f:78:af:2c:0d:31:46:1e:87:42:c2:
08:a6:c5:62:58:8b:b4:b6:1e:93:84:75:b4:f5:b4:
41:7c:97:38:4d:8f:28:5c:aa:be:f0:24:63:ec:f8:
f8:fc:aa:dc:69:47:1c:34:0a:ca:69:85:53:b7:75:
92:14:9f:f2:e9:78:35:40:42:69:a5:7e:0c:21:fc:
2d:e5:3d:e4:16:f4:eb:b1:2b:3e:69:ad:61:28:e5:
6f:34:6c:71:0f:15:b0:c6:77:01:0b:40:e3:4b:53:
e4:69:86:9d:34:2b:43:93:91:1d:49:25:16:45:86:
31:0d:77:b5:9b:0c:97:f8:71:f9:c5:59:18:72:68:
a0:9b:c9:47:9b:42:8b:37:2a:59:93:db:a7:50:a1:
e0:41:80:34:a7:e0:81:cb:72:49:68:c8:17:eb:2b:
39:d6:f4:27:08:00:01:b0:ca:f1:58:68:00:db:94:
13:43:3d:83:1f:48:f4:20:71:d8:6d:bd:53:28:4d:
ab:f4:b3:f0:4b:cd:25:fb:55:2d:e5:b5:b5:32:f7:
82:8c:2d:e2:6e:85:b6:01:b2:9c:c9:16:69:2a:cb:
a9:9b:43:bb:82:da:ab:41:4c:2a:95:63:ed:a9:9e:
aa:a9:0d:10:90:4b:95:a6:64:35:94:f6:cc:2e:09:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:4A:D2:71:7A:4D:B0:D5:B8:73:22:96:79:35:BC:88:5B:5C:EC
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bd:41:90:b5:55:38:39:3e:06:2c:cf:c1:d4:c4:8f:7f:30:
54:95:05:32:39:a7:37:49:5a:92:30:cd:1c:78:91:77:b3:97:
5d:9c:39:18:52:5c:ae:e2:ed:f5:29:f1:51:8c:7d:c9:5f:e8:
6d:e0:53:c7:ad:0f:15:8d:92:36:17:8a:67:08:c5:46:7c:0c:
0c:73:44:04:0e:06:98:81:bc:80:c8:5f:75:5c:4a:4a:e6:c8:
9f:07:df:e1:aa:b1:55:7f:29:ee:7e:5c:b8:38:42:17:42:9a:
02:5b:35:a4:ed:73:9e:81:66:da:50:ee:da:0a:6b:ce:8f:9b:
d8:a0:64:8e:fe:00:5a:21:1c:a8:17:16:be:8e:0c:96:eb:26:
f0:0c:eb:44:74:48:8f:d0:2e:28:5e:d9:87:a2:c6:c3:87:2a:
0b:c1:0b:a6:10:70:e0:88:5c:c4:09:8c:7b:f6:c9:6b:30:3c:
1f:b1:59:84:99:36:1b:04:04:58:38:64:7e:f9:87:20:6d:8b:
46:a6:2d:a4:7c:d5:0b:7f:be:7c:0f:8f:57:fc:1c:16:b3:73:
09:d2:94:17:43:49:0a:fa:79:3d:5b:12:72:9f:fa:9c:cc:7f:
80:50:6a:ad:55:02:9b:1c:a3:dc:ba:be:30:48:60:5e:6d:49:
19:b2:32:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:16 2025 by rpki-client