Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File: T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier: FbB+1Pm/J4M9EGt1MS/UlUN6vRBNR1W0f7WkcGn7oAM=
Subject key identifier: D1:9F:38:AC:7B:48:95:F2:66:0B:A6:A4:AC:68:E1:83:C4:D3:77:AC
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 019887A038CCEE00B205D0B0E8FD39DABA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number: 02CC
Signing time: Fri 08 Aug 2025 03:01:21 +0000
Manifest this update: Fri 08 Aug 2025 03:01:21 +0000
Manifest next update: Sat 09 Aug 2025 03:01:21 +0000
Files and hashes: 1: S0SO0HyBkdo3a_iLFGbpFh-3688.roa (hash: 4aaFEmUhkZXusyFZ1zN2v+eLcgATutmFWhO+KpO/kig=)
2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: WXvie3S99gkIIYW2QFUf9jO7p4Dwy5DJfiWRg9E6EmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:a0:38:cc:ee:00:b2:05:d0:b0:e8:fd:39:da:ba:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Aug 8 03:01:21 2025 GMT
Not After : Aug 9 03:01:21 2025 GMT
Subject: CN=d19f38ac7b4895f2660ba6a4ac68e183c4d377ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ef:e3:78:7a:cb:b6:e8:36:2b:bd:f1:6b:bc:
3f:48:2a:30:ea:5e:06:01:ea:00:dd:9f:d0:1f:82:
a0:86:a3:8c:e2:0b:90:af:45:3a:de:9b:10:35:61:
7d:ad:b1:de:ce:9f:0e:e4:85:f0:72:85:7c:84:ec:
1d:73:89:6c:03:0f:3d:39:79:9d:1a:b5:1c:b5:a5:
91:0c:1c:10:57:e2:2c:1a:51:c6:cc:48:47:59:10:
fc:3a:82:47:1d:d4:63:99:70:a0:44:a8:2d:59:a3:
35:41:4d:fc:bd:58:31:45:76:ad:bd:6c:c5:82:73:
f1:f1:19:5a:62:1e:40:af:d1:ff:1b:e8:2e:9c:fd:
cc:02:47:98:d0:e4:00:46:87:58:f2:ac:28:66:aa:
b9:66:11:92:7f:fd:28:b5:5f:14:8c:e5:d0:1f:b5:
f0:46:51:22:10:df:24:39:ce:8f:0a:2d:09:bf:d5:
5d:8d:e4:05:5f:d9:7b:2d:41:db:df:1b:dd:1e:0a:
e4:f1:bf:f8:16:6e:49:47:6a:13:40:b4:ed:93:b4:
59:d1:55:c3:ad:06:65:eb:76:3c:f3:c3:5e:46:a7:
a7:b3:59:75:c4:5f:13:87:0a:c6:01:b5:1e:3a:6c:
04:e1:f3:9a:4f:48:9a:42:9c:89:2d:a8:01:bb:e6:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9F:38:AC:7B:48:95:F2:66:0B:A6:A4:AC:68:E1:83:C4:D3:77:AC
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2e:68:63:3e:dc:81:b2:2c:fc:0d:c6:9e:b2:bd:9c:4a:9e:
78:4d:ae:e0:69:70:73:f3:64:13:43:81:c1:47:03:18:87:f5:
f6:e5:2d:f1:74:c1:21:dc:f7:d5:63:83:56:db:08:6a:57:c9:
76:de:8b:ce:3d:46:99:b9:e3:91:8f:b1:c2:61:67:7e:ef:25:
15:fa:19:74:a5:8a:7d:26:46:f5:99:28:ef:3c:2f:c5:cc:42:
78:f9:4d:9d:7b:ec:cf:21:a3:a3:44:19:4b:bb:8f:93:30:aa:
96:1c:7b:02:c4:76:33:d7:09:16:45:92:30:8f:7c:00:15:c7:
2f:9a:36:f3:a0:aa:b4:b0:92:27:15:29:3e:08:19:6f:e4:cd:
70:5d:b4:40:d4:db:88:63:0a:32:97:04:9a:30:40:aa:a9:3b:
69:53:54:50:ef:da:2d:44:d5:30:96:65:45:7b:69:54:84:ad:
9e:1a:d9:5c:27:2a:94:87:02:57:c0:be:73:1f:7c:64:c5:99:
6b:3d:b3:c3:64:1d:fb:cb:e9:af:35:9b:6c:18:9e:1f:ae:f8:
86:67:4e:81:9d:d0:9c:aa:75:6d:35:64:21:da:75:a1:28:3a:
b9:97:f0:05:45:b9:51:30:df:81:69:00:4f:e6:70:a4:db:e6:
22:d8:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:26:42 2025 by rpki-client