
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier: fxyz8x2oZYuGvjJ5jifOxzfwDHZwSf+1q1RgN8EstqM=
Subject key identifier: 33:B1:CF:B6:E0:18:90:4A:BD:21:0B:36:37:7F:B4:F1:EB:5B:B8:01
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 01988AA0F8A5A6568222B7B2CD63DC517153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number: 0BE9
Signing time: Fri 08 Aug 2025 17:01:01 +0000
Manifest this update: Fri 08 Aug 2025 17:01:01 +0000
Manifest next update: Sat 09 Aug 2025 17:01:01 +0000
Files and hashes: 1: Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa (hash: 2zE2fETyOiknIdhnDsU5+xLMFz/vO5FngmYcWoMLhMg=)
2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: pf5QqDhc6BOPHuF3B7zmZR8CYj3fzHog42d+LXUua+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:f8:a5:a6:56:82:22:b7:b2:cd:63:dc:51:71:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: Aug 8 17:01:01 2025 GMT
Not After : Aug 9 17:01:01 2025 GMT
Subject: CN=33b1cfb6e018904abd210b36377fb4f1eb5bb801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bf:5f:da:06:5a:63:b4:c8:71:9a:08:6a:5e:
27:d6:5a:7a:3e:ba:9d:ff:fa:1d:0e:3e:08:ca:87:
0c:c3:f0:a9:f2:df:3e:80:8d:3c:50:a0:6e:69:db:
05:78:37:b8:c4:ad:fb:25:1a:d5:0f:0c:4c:65:19:
f1:0c:f5:06:c3:ad:c2:17:8d:bb:ca:2c:e8:af:f5:
92:b7:30:40:df:2f:e3:dd:7b:1f:6c:e9:70:21:1a:
49:43:dc:c7:a0:6b:f1:ca:2b:8a:96:f5:1f:2b:be:
a4:2f:91:7c:64:bc:d0:27:aa:03:e0:c1:eb:0e:47:
20:8e:87:1e:16:79:29:6d:7c:18:ed:44:e6:6f:77:
44:ce:ec:3f:8f:d3:57:9b:0c:e9:a0:ee:27:65:97:
cf:c5:c9:6b:b0:e8:8e:8a:db:ee:a7:94:42:4d:96:
9e:e4:0c:7c:dc:ec:f1:1f:2e:8c:6d:d7:3c:e1:8f:
b7:4a:c8:04:30:d3:72:31:38:15:ce:b1:27:be:56:
d9:62:b6:33:ff:a0:8c:47:a5:2b:75:5f:c4:21:8d:
9e:91:6a:40:67:0d:57:05:e3:2e:cc:6d:3c:b9:bb:
5e:fd:3f:71:17:c3:e2:28:cb:e2:86:97:11:0f:f9:
f0:f6:1c:0c:72:34:bf:3a:59:d8:d2:61:04:dc:07:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B1:CF:B6:E0:18:90:4A:BD:21:0B:36:37:7F:B4:F1:EB:5B:B8:01
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a5:9a:7f:31:fc:bf:03:c1:e4:6a:2b:92:91:bc:0b:fe:bc:
52:5d:d9:48:a4:8e:f4:3f:c7:f2:82:e7:60:5d:75:cf:a7:6f:
6b:31:dd:ed:3a:93:1f:cf:fa:db:53:1a:e6:00:f9:8e:bc:5c:
ae:63:97:00:5c:67:35:b6:f3:94:f9:56:31:ef:32:63:83:0e:
32:2c:a1:4a:c1:bf:9e:b4:86:b8:26:78:31:5d:a3:a6:b9:0d:
f5:66:c8:82:c0:03:f5:97:b3:1b:e0:d0:7e:10:29:ef:e1:6b:
e7:ee:1a:74:15:af:75:21:41:28:be:35:73:07:f4:de:fb:c5:
59:97:58:4f:92:a8:fe:eb:fc:54:44:39:98:33:c9:31:d5:13:
a5:18:ab:60:76:f3:b1:a8:a7:e9:69:5b:93:98:0d:b6:6d:e9:
98:38:0b:66:3f:d1:c0:14:ee:14:ac:08:7f:27:46:4e:06:c4:
73:2a:53:c2:37:c8:0a:4e:0d:55:18:a2:cc:e0:44:2b:58:67:
57:88:0c:26:5d:73:5b:3c:87:0e:73:e7:7e:1b:29:3a:46:13:
9e:43:84:e9:c0:18:eb:89:f3:16:39:4d:59:d0:05:9a:a6:eb:
61:ea:89:0e:8a:61:5b:04:a6:44:ea:ff:b1:8b:ad:f5:e1:09:
57:fd:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:15 2025 by rpki-client