Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier: Qhda9DpJ1qPoQvocEplx5TcDkJznZuVEBfR1EIYnQy0=
Subject key identifier: F2:7C:3E:E8:59:D2:76:3A:3A:9F:A7:C4:D4:87:9C:1A:4B:84:61:93
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 01988AA0C2CF941A4E0E7FAA6C6CFD65DEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number: 0A97
Signing time: Fri 08 Aug 2025 17:00:48 +0000
Manifest this update: Fri 08 Aug 2025 17:00:48 +0000
Manifest next update: Sat 09 Aug 2025 17:00:48 +0000
Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: FRiBHrNMgLx9NxzdvvomG9erX7kv7NbcZx1JBlDKFSU=)
2: JFSPkHUXD6uekiRT14OFUV3SRJ8.roa (hash: d66KNl4Y3abt7U8S0mMyC51IECrPTJ0e2/YrGhdvTTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:c2:cf:94:1a:4e:0e:7f:aa:6c:6c:fd:65:de:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: Aug 8 17:00:48 2025 GMT
Not After : Aug 9 17:00:48 2025 GMT
Subject: CN=f27c3ee859d2763a3a9fa7c4d4879c1a4b846193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:d9:74:8e:26:43:cd:c3:01:3c:92:14:20:
43:c3:3e:f8:45:58:9d:0a:30:1f:34:83:92:7e:cd:
b6:3c:6b:67:de:b6:40:63:57:ab:22:77:97:c2:0b:
df:b9:82:42:12:8b:c5:34:ac:78:f9:7a:27:99:6c:
b6:65:96:d9:89:4f:65:42:ae:2a:a0:b5:c0:b4:30:
c5:8a:fa:21:d1:68:43:a1:e2:6a:ab:19:48:1b:b0:
a2:c6:22:b4:6a:6d:e4:be:7d:1a:05:f0:6b:1f:4f:
d6:7a:96:ee:37:0e:c4:95:2e:ff:a0:1e:92:6c:25:
51:4a:86:8d:46:4e:69:d1:e0:50:5c:58:c5:de:6e:
11:19:f3:ad:c9:0d:1f:b9:da:d9:10:ad:13:70:df:
7f:fa:ea:ed:83:df:f5:f3:0c:8a:e5:81:1a:77:a7:
6b:39:54:8a:50:0d:42:92:15:f3:47:50:56:5b:a4:
ad:f3:34:21:1c:98:80:4a:b8:1f:93:be:96:f5:ff:
b4:84:62:64:2c:ed:cd:e4:19:03:69:30:d8:a4:40:
18:03:54:9a:86:0c:3f:d4:a7:7d:52:f7:14:6f:f0:
8e:f1:a7:f3:5f:7d:73:58:40:84:5b:8e:a4:8c:44:
25:6e:bd:3c:ab:52:dc:eb:8e:ae:fb:52:f8:9c:b0:
35:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7C:3E:E8:59:D2:76:3A:3A:9F:A7:C4:D4:87:9C:1A:4B:84:61:93
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7a:71:d8:4f:00:55:f9:36:10:ec:40:b0:38:13:4d:2f:48:
64:87:c5:d0:44:84:a8:37:04:9b:ca:5a:cb:42:5d:2a:37:65:
8f:55:6a:e9:7f:4e:8e:48:37:c2:c4:7e:c4:dd:af:c8:33:e6:
50:95:a9:9d:3d:77:11:5c:9e:6e:48:6c:8e:26:46:1f:79:95:
ea:86:39:f6:67:c0:d2:fb:e7:ac:38:d0:20:a8:e9:00:e9:63:
4f:bc:55:45:de:49:21:c3:a0:d2:25:e0:22:8d:7f:95:2e:dd:
e4:e5:1d:bf:01:d8:bd:b2:ac:91:5a:02:bc:bf:42:df:6c:60:
93:a6:9d:25:de:7a:2a:21:09:00:d3:d8:42:b3:26:e8:01:66:
73:89:9e:cd:4f:20:0a:15:e9:ac:38:d7:37:76:c5:18:cd:c8:
74:9b:77:16:fb:58:c4:d1:e0:cd:36:fd:e7:57:c7:8a:8f:9f:
a5:45:c4:00:19:d7:ae:22:8d:2b:5d:cc:88:71:99:5a:11:aa:
3f:25:87:0f:d5:a0:18:31:cb:2d:a3:a0:78:99:49:54:fe:65:
fb:9b:54:d9:e7:35:99:c2:f3:ba:33:ab:13:09:0f:77:ec:de:
35:0d:dd:ef:d8:82:e5:c1:92:b5:57:bf:e4:4a:b1:8b:c3:f0:
b7:05:18:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:46:58 2025 by rpki-client