Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
File: 9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json)
Hash identifier: XFBfuCK5oNfrWDGh/tYcb0c7vYkf9G3L1fpkctzDgvU=
Subject key identifier: AF:20:45:CD:05:E9:98:BF:BC:26:C1:5E:E8:93:0E:12:E0:7A:85:70
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial: 019874191534EF00CDDA43D97157BA68DD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 08:00:57 +0000
Manifest this update: Mon 04 Aug 2025 08:00:57 +0000
Manifest next update: Tue 05 Aug 2025 08:00:57 +0000
Files and hashes: 1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: wFtICERg62Fz53PnRG71Q6kNp4EFKAL8fz3COcFv+xk=)
2: heOGsEgwvnx0rV_PQ-KerQ9C-CY.roa (hash: sP+8nNNKaPD0x4Bknlm6WIvlRad2W4u8N2Xxii0xN0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:15:34:ef:00:cd:da:43:d9:71:57:ba:68:dd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Validity
Not Before: Aug 4 08:00:57 2025 GMT
Not After : Aug 5 08:00:57 2025 GMT
Subject: CN=af2045cd05e998bfbc26c15ee8930e12e07a8570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:39:4c:e8:b5:4d:a7:87:ab:77:9e:36:dd:
42:d5:0e:04:d9:bb:31:50:4e:ef:10:4a:ba:23:dd:
2b:fe:d5:8f:55:69:98:9f:b3:b4:29:2b:00:d6:aa:
c4:f1:ac:44:f0:a1:6a:34:62:dc:d0:24:c5:7e:8c:
c5:11:7e:d6:b6:ca:dc:f3:80:90:06:0d:df:6b:20:
9d:c7:97:cf:08:af:e5:aa:61:5c:45:98:9c:87:a8:
f7:52:33:ce:c7:5b:6c:f5:8f:1e:37:9d:75:e2:5b:
9f:c9:95:42:d5:8d:72:08:c4:16:c3:1f:2f:7e:c3:
d4:4c:f7:40:22:40:e2:96:97:35:9e:b0:a7:32:6e:
10:c2:e4:e3:5c:bc:d7:13:1a:76:d3:77:5e:77:3c:
40:b6:f8:cf:06:7a:41:1a:d0:07:38:91:b7:40:10:
01:d6:97:e0:60:fa:f0:9e:3f:cd:d0:6e:1c:b9:34:
14:cd:8d:ab:da:7e:ca:42:b7:c4:82:4a:bc:4e:ed:
70:73:67:19:73:3f:3f:a1:28:58:46:d2:21:67:bb:
66:7d:70:de:32:49:dc:16:90:e1:79:aa:e3:b8:67:
60:91:66:32:e7:74:bb:65:6e:ff:a1:22:4d:bb:0f:
5c:00:53:78:91:57:53:f2:b5:79:40:cb:e4:94:f3:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:20:45:CD:05:E9:98:BF:BC:26:C1:5E:E8:93:0E:12:E0:7A:85:70
X509v3 Authority Key Identifier:
keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1b:26:dc:ac:ec:3b:61:80:28:3e:51:51:6e:dd:1c:b1:7b:
a7:49:2c:bd:bb:be:46:a6:28:bf:c1:40:ce:5c:11:ae:b3:e3:
c8:13:1b:f3:2c:d3:9a:c4:72:53:49:1f:d7:14:66:6a:f8:cf:
13:74:26:95:92:f6:6f:1f:ad:48:c5:90:80:38:18:ea:4a:a4:
46:c0:ec:57:a9:9e:d6:97:f0:10:b9:38:42:b4:92:b9:76:c5:
9d:98:dc:cf:28:fd:cf:cb:aa:3a:8d:17:9e:68:25:75:48:1d:
c3:f8:b4:7b:7f:a7:a4:57:22:2d:0b:ef:34:02:9f:69:55:6b:
f1:86:41:c2:ce:c0:cd:9a:62:e2:2d:bf:23:46:ab:2c:3f:6f:
31:13:69:e7:ff:2a:0f:83:2b:b1:6b:54:3e:e8:fc:d8:1c:cd:
b6:00:b3:24:b3:07:95:a8:b8:ea:c0:d9:74:55:51:3e:88:26:
ff:6a:bc:d5:5d:47:13:b7:94:52:e5:61:12:d1:9d:15:6d:4e:
e4:bd:e0:f9:bf:8d:fe:ee:99:3c:f7:a0:e6:f1:d8:a1:5c:b8:
1c:03:4b:66:1e:8e:dc:2a:ac:3c:47:b6:22:34:a8:4f:f6:44:
b9:48:69:43:45:57:98:f8:0e:27:b0:66:54:35:ec:0c:e8:ab:
1b:f8:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:43 2025 by rpki-client