Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier: Qrpjdlgbasjyty06CxtZC8WeAr8eCKPKNYxL2LV760o=
Subject key identifier: 45:4E:76:D1:3E:59:2D:86:CB:AA:C2:5E:66:E7:96:72:C0:C7:0B:33
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 01987B9D0360CA5BA48873F79D7FA041C851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number: 0751
Signing time: Tue 05 Aug 2025 19:02:24 +0000
Manifest this update: Tue 05 Aug 2025 19:02:24 +0000
Manifest next update: Wed 06 Aug 2025 19:02:24 +0000
Files and hashes: 1: NaKshVhSKaYmb3Sdi3LLJdyjmds.roa (hash: d86txPLHJOy87A3pf1/eOV7404HvHGLlpkkFt/51J1U=)
2: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: Ht8Wj4hbbz+7e4EebKJjjYckzMNP9NQksyFwAIAUR3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:03:60:ca:5b:a4:88:73:f7:9d:7f:a0:41:c8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: Aug 5 19:02:24 2025 GMT
Not After : Aug 6 19:02:24 2025 GMT
Subject: CN=454e76d13e592d86cbaac25e66e79672c0c70b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ac:5d:c2:f4:eb:94:ac:cd:a7:61:c1:c5:ce:
54:0d:db:fe:13:de:ef:8b:a1:1e:b1:33:de:65:9f:
e3:38:68:50:3c:ba:55:8f:74:b3:78:9b:fc:e7:13:
09:7f:9d:6e:71:b9:88:de:b4:b6:91:a9:db:81:01:
d4:64:ff:59:68:13:25:0b:ae:31:ad:ad:57:8a:37:
cc:71:80:0d:7a:6d:57:1b:e3:30:e7:d0:b0:66:37:
a5:38:3e:e9:dd:e1:27:ec:62:97:5a:bf:57:03:41:
9b:fa:0f:92:39:a0:ab:5b:ef:18:29:ca:a2:84:76:
33:40:0c:8c:b0:77:74:79:ba:0c:01:d6:41:9f:fd:
3c:a4:d0:a6:54:5a:a0:75:3f:8f:06:96:28:e5:fb:
20:a3:21:a1:3e:f9:07:86:eb:af:cd:d3:3c:ef:4b:
7e:47:99:4e:f0:12:7e:ab:be:73:b6:fc:99:aa:f1:
6a:80:d0:b2:64:e0:89:7a:6c:53:35:d8:3f:a2:bf:
65:73:6e:4d:da:5f:92:c9:8c:9f:42:4a:62:71:ba:
65:db:5c:ca:ae:4d:44:b6:c4:de:b0:41:33:4e:9f:
56:86:58:7f:40:10:39:a9:74:7f:bb:7c:1a:a2:8f:
d8:d4:1f:98:cf:3b:02:d1:a2:54:59:ca:b4:8d:bc:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4E:76:D1:3E:59:2D:86:CB:AA:C2:5E:66:E7:96:72:C0:C7:0B:33
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:22:4b:96:87:67:d5:59:e6:d9:75:bb:ea:8a:f6:ae:1f:cd:
ed:fa:88:a0:93:03:65:b6:6b:5e:5f:55:11:ef:6f:67:38:f0:
fc:68:01:4f:51:a8:b1:09:61:c0:04:49:99:ca:b4:2b:26:f5:
98:05:f5:a9:4e:d4:dc:87:5d:77:85:a0:41:d5:f6:52:7f:7f:
79:3c:65:02:8b:3a:a3:96:b5:da:54:d6:d0:e8:45:89:e2:d9:
0e:e6:98:2e:57:f9:6b:a7:15:41:71:87:db:08:d4:b8:65:9b:
4a:17:03:e1:bf:c0:b4:b6:07:1c:6c:bb:2d:44:1c:87:4c:5b:
c9:24:ad:29:8f:b9:14:e3:22:18:e1:cc:79:79:a0:78:6f:66:
ca:a9:fe:fb:35:71:34:5d:2d:00:96:39:28:a7:a0:79:8d:20:
50:5d:ff:b9:83:a6:90:3a:b9:e2:0f:26:39:15:d0:8f:24:71:
eb:ef:75:66:67:72:32:f1:2a:de:79:1a:16:61:67:4b:84:75:
84:43:0e:2b:97:ad:d9:60:a6:7d:7f:48:b6:4c:89:0f:06:17:
2f:e6:03:1d:aa:96:78:91:00:3b:f3:d3:86:bc:e1:49:4c:43:
35:0d:4a:c7:12:68:a2:26:ab:33:30:06:33:4d:8d:66:61:70:
25:23:10:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:13:37 2025 by rpki-client