Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
File: r9I8xVrurzN-23Pq4ltZCXoneEw.mft (raw, json)
Hash identifier: KLdYOejxs+UZuaP/alRBFbcdTVKBEyp+I7ZlZzIs+Xw=
Subject key identifier: F4:E9:DB:B1:31:88:4D:DA:D5:DD:7B:F2:90:39:FF:92:74:8E:16:20
Authority key identifier: AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
Certificate issuer: /CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Certificate serial: 0198A04EC8463C1FB9F8A5D3DB77D229B535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
Manifest number: 162C
Signing time: Tue 12 Aug 2025 22:02:54 +0000
Manifest this update: Tue 12 Aug 2025 22:02:54 +0000
Manifest next update: Wed 13 Aug 2025 22:02:54 +0000
Files and hashes: 1: lHwTYMLdPppQjIGCxxbbE7ChdPI.roa (hash: AdFGp8oSyfut37qs3XRrjrGdC0sy7qxul+fWrYsyUd8=)
2: r9I8xVrurzN-23Pq4ltZCXoneEw.crl (hash: Rg5y58nWw/80YkKrUxaILgoGmojts7KHaZq9CVNyHOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:c8:46:3c:1f:b9:f8:a5:d3:db:77:d2:29:b5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afd23cc55aeeaf337edb73eae25b59097a27784c
Validity
Not Before: Aug 12 22:02:54 2025 GMT
Not After : Aug 13 22:02:54 2025 GMT
Subject: CN=f4e9dbb131884ddad5dd7bf29039ff92748e1620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:8f:44:14:3a:33:c5:fe:39:ed:14:ae:e0:
5a:d8:25:4e:48:fb:a4:85:d7:12:6b:d2:ca:c3:0c:
e3:e0:6e:58:20:61:74:f5:8d:17:1f:6e:75:ef:c0:
05:6e:46:43:7e:32:c9:98:f5:e7:d3:da:fe:77:9a:
a9:26:e4:8c:09:4e:cd:6f:e7:83:88:24:ee:b4:e3:
ab:09:ee:fd:52:b0:95:79:1e:55:b2:9a:58:65:f6:
48:7f:e6:0c:dc:c6:7b:cf:32:c8:43:d8:43:f5:37:
da:50:e7:ee:1d:8d:58:22:e4:9f:95:7b:45:91:3c:
70:7f:39:df:f6:4a:95:82:80:ed:a6:7f:89:15:13:
21:94:05:c6:84:c9:7d:54:b0:27:10:63:33:43:1b:
3c:8b:b4:ed:ee:a4:ce:ef:66:24:b8:8f:58:f0:f0:
dd:86:13:12:9c:78:8d:f7:79:f7:2b:8b:be:c9:9b:
3f:f0:86:21:c4:e3:1c:28:8c:24:6b:61:96:91:cc:
23:2f:bd:86:86:88:ad:66:77:7d:fa:42:ab:a3:00:
f5:29:c0:56:f2:ed:68:5b:7a:89:16:e0:3c:7a:79:
48:fc:d4:90:5c:1f:b5:43:87:71:e6:0d:7d:60:d8:
7a:73:92:31:d7:25:bd:78:e8:a2:14:43:9f:65:18:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E9:DB:B1:31:88:4D:DA:D5:DD:7B:F2:90:39:FF:92:74:8E:16:20
X509v3 Authority Key Identifier:
keyid:AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:56:18:bc:dd:c0:44:68:67:49:f0:71:93:ce:55:0d:f0:e8:
29:53:0b:fa:08:1b:60:76:5a:4b:56:e3:96:41:41:27:3e:ad:
2a:1b:3e:8f:5d:64:ee:32:2c:e4:fe:9d:15:53:fe:f6:b6:ea:
5c:b3:cc:1c:4b:d0:b2:b0:d9:8d:f9:ca:a8:00:ef:11:a0:9c:
8d:0f:22:fd:2c:ad:45:e1:9a:24:33:83:48:bb:6a:38:93:ca:
30:e2:aa:af:03:c0:95:5e:65:8e:0a:4b:ca:24:2b:b8:8d:d6:
7c:b7:22:b0:7e:6a:cb:c3:46:cf:ac:ce:2a:2c:f8:63:47:b5:
a3:24:ad:ab:c1:e5:3c:e3:2b:0a:d9:bc:81:73:97:82:7b:dd:
71:c7:21:87:1f:4c:b2:64:ca:69:c5:33:bf:1f:85:0c:64:70:
7a:47:8b:22:c1:f3:69:9c:db:e5:99:a0:b4:12:00:8c:b5:cc:
9f:f8:2b:e9:5c:16:92:c3:f9:da:13:df:fc:09:35:d2:89:92:
88:a3:6f:5b:08:2d:9a:53:1a:1e:23:11:91:72:22:b0:a9:5d:
ec:ac:61:b3:62:88:09:1c:82:14:ae:4f:e9:84:9d:83:c3:44:
68:6e:5d:74:32:ee:7e:be:35:ae:2d:9f:40:d9:2f:d5:b5:0d:
6a:f2:7f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:59 2025 by rpki-client