Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
File: 9JUCyXSCsoUChSyX75vToKKl6fA.mft (raw, json)
Hash identifier: 5oZ2+Hk0qoDlN++I8WQV41axk9/ZLMA+BJvD7MeX3x4=
Subject key identifier: 3C:04:DA:D5:26:A0:9E:0B:65:6E:09:88:A4:FE:47:A6:AA:0A:DC:8D
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial: 019875628C11D2A0DA5A58988E607D864FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
Manifest number: 13E8
Signing time: Mon 04 Aug 2025 14:00:49 +0000
Manifest this update: Mon 04 Aug 2025 14:00:49 +0000
Manifest next update: Tue 05 Aug 2025 14:00:49 +0000
Files and hashes: 1: 9JUCyXSCsoUChSyX75vToKKl6fA.crl (hash: wmD0XYGcu1tAqz0rTCLXLfRI3PVqDU9gHvqh0ZdSrTg=)
2: EaZvYH2YGiO37NZ1bGFHkmEdMcw.roa (hash: HSZLZ0cKEKUvUtWkwWARshBwReQDxlGBdY+EDDOfXjA=)
3: NbJCCt6mZbGhQhsVck9Ye84ql_A.roa (hash: 1GHJ4CqSoQFt3IGPoRuzPcM9vgZHBXB7ib41DM1rbg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:8c:11:d2:a0:da:5a:58:98:8e:60:7d:86:4f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Validity
Not Before: Aug 4 14:00:49 2025 GMT
Not After : Aug 5 14:00:49 2025 GMT
Subject: CN=3c04dad526a09e0b656e0988a4fe47a6aa0adc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d4:66:c1:62:0d:b4:e5:10:4a:5e:64:bf:bd:
be:3d:d0:f3:7d:de:59:8b:96:a9:78:8b:13:64:28:
c3:34:59:b8:cb:d1:6c:3f:7c:65:3d:ff:42:ba:e5:
54:ba:88:e0:f2:51:a0:7b:e6:bb:10:ee:0e:9c:be:
ec:97:6a:b0:cf:99:88:58:5f:b6:bb:ec:8f:38:93:
2a:f7:0f:43:d4:f9:fe:13:40:23:d6:6e:57:98:e0:
91:0d:7b:5d:b2:ab:8a:4a:09:66:49:ca:65:b9:78:
be:a0:25:54:9a:50:7e:82:43:1b:59:7e:8b:f9:3c:
08:4c:83:81:2c:68:6b:29:f7:5d:93:8e:4e:ac:5c:
52:0d:76:cd:d9:3c:e7:4b:f4:02:e1:3c:6d:a6:a1:
ff:0e:99:b1:84:9e:4f:c7:8e:f0:94:6b:7e:e6:fa:
9f:b1:18:32:68:ce:ab:80:1a:1c:56:d0:56:2c:95:
6e:9e:58:f2:b8:6f:dc:69:ae:e3:4c:ba:97:65:76:
97:c7:4b:59:74:d3:7b:34:14:e5:f0:bd:95:05:c8:
f3:49:b3:22:1e:4f:44:94:e6:09:5f:8c:0e:6e:c3:
49:de:ef:c7:ac:f9:18:b5:6a:f9:d1:7f:fd:82:ee:
67:4f:ba:dd:ab:31:26:4f:97:c0:d0:fe:db:96:6a:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:04:DA:D5:26:A0:9E:0B:65:6E:09:88:A4:FE:47:A6:AA:0A:DC:8D
X509v3 Authority Key Identifier:
keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4c:7b:86:15:e6:bc:56:1a:b7:2c:15:5e:6d:e6:3a:63:3b:
3a:ff:7a:a1:78:f4:3d:a8:70:74:70:61:c3:30:e6:fb:a0:7d:
62:6b:e2:6d:e5:2f:d9:46:34:e3:7f:f0:f0:86:27:c5:ef:07:
7c:b0:ee:3e:86:8d:d0:5a:d1:4e:2c:a7:7d:e5:a9:fe:34:b9:
eb:fb:a5:04:5f:e7:c5:8f:03:7f:aa:fb:66:94:f0:df:5f:91:
e7:40:b6:08:e2:be:8f:77:e7:0a:b5:f9:29:53:85:b3:f5:4c:
fe:67:d7:9d:86:2d:ed:b0:52:89:c5:81:63:f9:9c:c4:b7:6a:
0e:ee:65:43:f6:94:d9:6a:74:f7:b7:59:ae:70:55:cc:19:9a:
9b:cd:f1:4a:dc:c4:ca:ab:3e:9d:b3:ba:33:35:2b:82:77:92:
42:59:2b:bd:b2:70:24:98:0e:c8:5a:3a:98:b2:43:53:1a:b2:
b8:02:c3:ca:84:d2:5f:15:27:e4:1c:93:af:30:96:61:81:f7:
07:85:48:dd:ee:73:40:22:f4:9a:1f:05:55:2b:17:1d:57:a7:
25:7a:13:79:6c:b0:e8:cb:c3:dd:49:3e:a3:a0:10:fb:aa:e4:
8a:e5:ed:c9:b5:1e:2a:9b:4b:9c:83:fb:60:d3:14:25:39:dd:
31:b9:4f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:45 2025 by rpki-client