Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
File: p9368Tt9vgXaoytYeLi2gCQEWXE.mft (raw, json)
Hash identifier: mLvNaGJmkjmrDv+ZfjyrFcWNFbFdIpQYaAPs/fMo9DQ=
Subject key identifier: 89:87:C0:B4:2F:3E:DB:F6:77:EE:58:D7:2F:67:A6:AF:F3:61:37:53
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 01988DD8990F03B8AD62D73D806406922A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
Manifest number: 0DAD
Signing time: Sat 09 Aug 2025 08:00:38 +0000
Manifest this update: Sat 09 Aug 2025 08:00:38 +0000
Manifest next update: Sun 10 Aug 2025 08:00:38 +0000
Files and hashes: 1: DYV8rTZS8uCurZHOoqW-jfWMmWg.roa (hash: oTQ/SBogFSvxJCfk7V0vkU2XYqnVHjZNfcn9byEW2aE=)
2: LwjuDBy22G2-Q-2JO3jMhOy1eNU.roa (hash: lEUkgsAO72uMMjQemqqZ36mEX8JKjX4GaMbgSM4hzTI=)
3: p9368Tt9vgXaoytYeLi2gCQEWXE.crl (hash: GTjYu9tKPGY5WgDiiKRRysACXnpFZKtCqBKaachuVrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:99:0f:03:b8:ad:62:d7:3d:80:64:06:92:2a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: Aug 9 08:00:38 2025 GMT
Not After : Aug 10 08:00:38 2025 GMT
Subject: CN=8987c0b42f3edbf677ee58d72f67a6aff3613753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:9c:74:17:ec:aa:8a:3c:46:6e:b6:1f:3e:
6a:0f:8d:cc:8b:b9:c3:13:7b:ab:de:2a:82:f2:62:
6c:a9:6d:4b:f0:0b:f2:16:da:05:24:d5:cd:5d:7e:
4a:03:db:7f:30:d7:e6:78:23:e5:44:13:a4:28:76:
0a:12:40:52:e7:47:db:76:11:99:48:7f:ac:e2:00:
7f:74:53:12:15:0d:da:98:27:ad:96:9e:a2:52:01:
c6:ce:21:07:10:6f:f9:28:9b:8e:21:6e:84:e1:d3:
5b:d2:9b:a1:d4:45:78:a0:af:f0:8a:b0:1e:b6:09:
15:68:26:42:9c:d4:39:aa:3d:0e:14:41:75:dc:8f:
8f:e2:93:93:85:61:d0:37:78:e5:42:f8:d3:79:d1:
0d:7d:3a:a6:80:17:7d:f8:90:c1:8c:89:88:d8:ea:
5c:cf:d3:63:b6:3e:d2:a3:e4:22:1e:04:da:08:db:
bb:b6:83:67:81:fb:f5:01:37:e4:af:c4:cd:f6:29:
cc:4b:1e:18:7d:93:5a:9b:43:a6:c0:ee:73:58:8b:
c6:bb:b6:c2:65:67:66:9a:36:23:ae:c0:ca:1c:81:
b0:49:76:73:bb:70:3a:df:5a:62:78:7a:51:d9:0b:
11:bb:bd:f5:bd:ac:bc:de:50:05:ec:3f:72:06:58:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:87:C0:B4:2F:3E:DB:F6:77:EE:58:D7:2F:67:A6:AF:F3:61:37:53
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:10:ca:8e:3b:62:f6:cb:0b:c1:0d:87:9c:45:2b:3b:3f:73:
94:90:9a:9c:d5:00:5c:44:8d:9d:4e:0b:89:2f:3c:02:3c:5a:
fe:99:1f:b5:65:52:70:7b:7d:9c:94:40:56:a6:b5:49:a3:45:
6f:fc:87:80:71:c1:09:16:8e:71:13:e3:aa:92:8e:d8:6c:84:
3d:cd:47:a7:48:6b:89:ec:dc:8b:00:65:e5:f2:bc:98:f3:9f:
79:a2:c5:d2:d7:6c:82:0c:8c:5a:98:67:b9:15:7b:ea:88:5b:
49:50:db:3d:a7:35:62:b6:c7:f9:c3:47:88:f4:87:91:e6:e3:
13:57:cc:5e:ec:a5:ea:77:63:68:f7:f1:e3:4f:d9:31:86:45:
50:7c:46:a7:ac:b6:3e:0e:16:cd:4b:d6:77:74:d9:d8:f4:f9:
60:43:22:6d:36:2a:22:90:76:73:bf:52:80:8c:c7:35:04:5e:
06:fd:96:64:ae:a3:23:b9:a9:dd:22:35:03:aa:42:0d:4e:e0:
bf:44:f4:19:75:ef:4d:7b:0b:0a:65:46:a2:cd:c0:1b:5b:ee:
13:5e:03:f9:9f:5f:8c:a7:b7:e3:5c:ca:d5:a4:ea:2f:a2:b7:
f6:95:55:1f:1b:1f:ca:6c:91:a6:5b:51:93:de:0e:0d:0b:a8:
8d:ea:fb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:06:39 2025 by rpki-client