Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
File: 9q2iC9mLq990w9Vs14raZu2HoUg.mft (raw, json)
Hash identifier: Sf5ZFmwVESSDB4CHPp0LAiWFmf8PLxMbnXuoau+lLsU=
Subject key identifier: EA:42:F5:8E:8F:33:5E:87:DA:B1:B2:85:98:91:F8:DF:0C:37:2E:83
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 0198745032D0D385E87C3DA94CE4924CF85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
Manifest number: 09DE
Signing time: Mon 04 Aug 2025 09:01:09 +0000
Manifest this update: Mon 04 Aug 2025 09:01:09 +0000
Manifest next update: Tue 05 Aug 2025 09:01:09 +0000
Files and hashes: 1: 9q2iC9mLq990w9Vs14raZu2HoUg.crl (hash: PZqDt8EimRW9dCkWHzkUynhAqB6VJ2i+ykerNOSLqfk=)
2: s-x7d6jJvL70qmh-6OnRq31TKUk.roa (hash: 2DbOtbQA27lHr7qNRTboKovEtkv/3fhOLEwI/H6E4D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:32:d0:d3:85:e8:7c:3d:a9:4c:e4:92:4c:f8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Aug 4 09:01:09 2025 GMT
Not After : Aug 5 09:01:09 2025 GMT
Subject: CN=ea42f58e8f335e87dab1b2859891f8df0c372e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:8c:71:8a:26:90:30:7f:46:ea:65:89:10:
25:25:5c:80:f7:d1:8e:0d:6e:fd:aa:63:a9:e7:d5:
5d:b4:06:fa:91:e8:7e:7a:fe:ff:03:bb:59:eb:3b:
88:c5:e6:55:8b:a0:01:00:3e:00:fa:63:73:94:e6:
82:90:30:eb:27:7f:04:a4:15:76:12:55:c2:ee:55:
45:a4:45:44:9c:ee:f2:b8:8d:35:0f:68:7d:ad:01:
8e:22:e7:a6:f6:23:a2:9b:00:08:ec:b5:07:79:a5:
f2:41:d9:a7:6f:0f:7c:da:5b:d5:50:33:52:ec:f6:
6f:3a:f3:9d:3d:27:a9:96:0b:d9:da:00:a8:b9:39:
3d:7c:ca:74:35:88:26:48:4d:c1:d0:2b:59:4b:1c:
a6:b7:1b:f6:a1:c3:0c:1c:80:71:a8:b6:28:da:31:
3d:e7:3d:3f:87:40:45:ab:16:64:3f:da:ff:7a:fd:
7a:37:a9:91:6e:8a:a8:fe:99:8d:4a:05:8e:19:28:
b8:82:76:49:e4:47:94:1a:9e:8a:a6:df:03:41:2f:
c1:f5:70:d6:dc:82:5b:3b:e8:09:5f:e4:88:bf:06:
08:cd:e5:76:d8:c9:45:67:d6:11:3b:1c:df:7b:ad:
80:a4:89:6f:fa:13:67:17:b9:9e:26:81:16:d4:f2:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:42:F5:8E:8F:33:5E:87:DA:B1:B2:85:98:91:F8:DF:0C:37:2E:83
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b8:4c:67:1d:e2:5e:62:2d:04:e6:6e:25:28:ed:f0:51:3d:
46:f0:a7:d0:e8:a8:a2:4f:a9:22:b6:c6:7f:43:a6:af:53:ea:
83:dc:b5:a7:15:84:26:98:31:37:21:d8:bb:44:b9:96:ab:38:
80:b9:7e:6e:1b:7c:42:af:32:25:30:b4:8a:6c:06:28:e0:18:
7c:76:ad:35:ca:34:a8:19:60:35:72:f5:c0:6e:bd:3f:0b:0d:
72:f3:78:fa:01:30:b0:6c:3d:34:77:46:63:5f:b6:6a:d7:63:
f3:af:eb:18:c5:53:3d:5e:c3:02:78:ca:f4:c3:11:6b:17:12:
b3:ba:e1:32:7a:73:c0:dd:e2:69:91:7f:a2:dd:9a:4e:f7:e4:
45:04:bd:e9:a1:cf:da:3f:d3:06:b1:70:42:77:1f:b0:ee:3e:
5b:e4:da:0d:2c:c9:5b:f6:fd:fd:70:a9:24:ed:77:85:7b:71:
bc:6c:37:2d:ba:4b:5e:78:64:9b:31:59:ed:8a:74:8f:f6:88:
01:1c:93:33:4d:0e:69:73:84:69:bd:28:3c:8a:19:ed:4b:ae:
14:b9:07:90:59:b2:63:c9:ec:a0:2f:e0:4f:d8:03:e1:d7:5d:
15:85:67:ee:0d:95:65:be:99:bd:10:97:92:fa:44:e1:18:c2:
c4:c0:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:57 2025 by rpki-client