Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier: qf5zgiqbMBNC+f9AQy/IUj4lT7yuX/wGjqaz8PmHNY0=
Subject key identifier: 16:CA:98:EE:3F:88:FB:7B:54:96:07:10:C9:88:7E:C5:2F:6B:42:DE
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial: 01987D1C35248BAC8CB85708B23F1A5A434A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 02:00:57 +0000
Manifest this update: Wed 06 Aug 2025 02:00:57 +0000
Manifest next update: Thu 07 Aug 2025 02:00:57 +0000
Files and hashes: 1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: fwAnQl/vnxZpwBV0PxoEPgsL2k/H7+qGIA/92RJYUKg=)
2: Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (hash: 5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:35:24:8b:ac:8c:b8:57:08:b2:3f:1a:5a:43:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Validity
Not Before: Aug 6 02:00:57 2025 GMT
Not After : Aug 7 02:00:57 2025 GMT
Subject: CN=16ca98ee3f88fb7b54960710c9887ec52f6b42de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:c3:8b:a1:47:a3:dd:42:37:48:4e:55:d0:
45:10:13:3c:9c:74:83:c0:05:37:3b:2f:1f:bd:b9:
c7:2e:18:6a:42:f5:31:f2:61:bf:9f:c7:44:5e:14:
c2:09:90:c1:46:dd:e9:b4:14:b2:0b:2a:c0:c9:b1:
75:84:09:24:d8:a5:0f:c4:68:86:19:60:dc:a6:7e:
8f:cd:2b:f2:f8:87:f9:8b:f3:ee:88:f8:92:68:4a:
02:96:0d:5a:93:19:92:5c:17:5b:ac:ec:9e:90:cb:
31:f8:9c:f5:01:f8:e8:8a:88:37:69:fa:94:a4:fa:
b2:db:5b:e3:73:b5:c2:01:30:82:07:92:f6:9a:47:
4b:fb:4e:09:56:5b:06:55:ff:e3:52:01:f9:ef:1a:
fa:e9:b8:fb:2f:ff:5c:8a:7f:2d:dd:99:d8:7d:de:
56:1f:c1:d0:9f:6b:e2:1a:07:d4:48:0b:d2:5b:4a:
44:83:5e:09:f3:17:b1:9d:81:cd:cf:67:bf:8a:88:
50:41:2b:66:2f:e2:56:71:1d:16:e8:c4:e5:1d:ff:
9f:6e:f8:87:4c:49:88:a2:7f:a6:34:34:08:17:fd:
e5:b0:54:97:38:e5:65:fe:03:0b:4e:13:10:46:5b:
f5:34:2e:11:f9:92:c3:0d:43:33:a0:7f:dd:d1:08:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CA:98:EE:3F:88:FB:7B:54:96:07:10:C9:88:7E:C5:2F:6B:42:DE
X509v3 Authority Key Identifier:
keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:df:1d:04:24:66:70:27:1c:b3:ec:4f:67:52:6f:78:74:64:
86:0b:b8:ff:d7:5b:26:a1:a2:25:4a:ba:26:63:dc:ba:46:f4:
6d:1f:09:02:c7:c6:27:c9:2a:3d:f9:72:47:b1:50:2c:6e:81:
16:21:f6:8c:e2:79:42:28:7b:5e:35:da:5d:17:0f:b4:98:33:
f2:8a:2f:77:df:42:28:08:66:34:0d:42:7f:5c:76:2d:14:04:
1c:47:b5:9a:d6:f9:3d:bd:ac:c4:aa:fe:a2:2a:d9:7b:4b:a0:
79:12:06:c2:7c:e1:22:a8:a9:cf:80:a8:3b:cb:5d:8e:0a:55:
ba:58:30:65:ff:51:70:7c:ba:4d:9b:77:11:56:c7:a2:8f:4f:
a6:ac:dd:69:4a:42:0d:53:86:54:72:8c:ce:00:5e:39:50:36:
3c:d4:79:f8:1c:d8:ab:fc:f8:30:3d:40:c9:31:ff:e5:04:28:
39:75:6b:62:ce:74:51:22:65:2c:29:08:35:c7:58:c1:df:a0:
c4:5b:57:55:9a:87:2a:68:5c:f4:84:60:6a:d4:a6:13:a8:23:
d6:e8:55:b1:07:fc:0a:1e:6a:f8:02:cd:97:35:f3:e5:8b:47:
39:d1:cb:8a:f1:57:26:fb:cd:0b:0f:ec:44:48:fc:87:ff:da:
d9:1a:28:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:51:04 2025 by rpki-client