Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
File: INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json)
Hash identifier: c+H2jQ7+dq0PMODeQ3o9VAPtGeKddtSdftH9MZTc0L4=
Subject key identifier: EA:33:ED:A7:74:C3:3F:F5:EF:76:66:4E:CC:91:6F:BF:1F:2C:E1:0D
Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Certificate serial: 01988B7CE9E8618BFF1C91301E2AEACD3942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
Manifest number: 15B5
Signing time: Fri 08 Aug 2025 21:01:15 +0000
Manifest this update: Fri 08 Aug 2025 21:01:15 +0000
Manifest next update: Sat 09 Aug 2025 21:01:15 +0000
Files and hashes: 1: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: zfn+VL8lvmQH6KGMV3QwjgIfTsDNDedRayjgdb5C23M=)
2: h_lcjhsZRd-WoNkwUeJTA-cn-HU.roa (hash: MoTuYke9XnON66W6lzgS1xcgPTaCQPNgcBaF3y/k338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:e9:e8:61:8b:ff:1c:91:30:1e:2a:ea:cd:39:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Validity
Not Before: Aug 8 21:01:15 2025 GMT
Not After : Aug 9 21:01:15 2025 GMT
Subject: CN=ea33eda774c33ff5ef76664ecc916fbf1f2ce10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:cc:f3:9a:49:ec:2c:61:4a:7d:79:79:07:
c5:5b:d3:92:9f:d6:9b:7a:d3:43:fd:f9:58:c4:24:
39:21:1a:5a:6f:f9:67:82:7b:6a:2d:91:13:1d:f7:
15:f0:81:63:0d:ea:f9:a8:c5:0f:df:0f:91:cb:7f:
08:e1:b0:3e:b4:c1:14:76:75:1a:14:80:e3:91:51:
ec:27:58:31:be:f8:82:8d:44:07:5f:17:16:e2:f3:
0b:fe:bb:25:f9:7f:c6:ef:59:3d:5f:74:78:53:37:
43:d8:02:42:c1:b3:54:7f:50:77:9b:31:ba:84:fb:
ea:29:ce:6d:1f:0e:18:40:e5:8d:18:40:aa:ad:b2:
e4:27:32:c2:fb:87:6d:97:3d:11:fb:27:1e:2c:bb:
c2:83:aa:f3:ea:55:4b:7e:33:1f:0a:1b:90:7e:6c:
42:ff:f7:02:f7:fa:eb:d5:d4:bf:2b:80:75:5e:77:
35:d5:1a:47:c7:f2:eb:c0:a8:3d:6a:9f:c0:5c:66:
67:bb:65:c1:44:41:a6:72:af:bb:90:88:0a:61:9d:
a2:17:b5:b9:6c:cd:f2:e9:43:30:5a:05:00:79:49:
23:28:b3:e6:e8:09:67:29:40:e7:36:41:d4:16:fe:
8b:3e:8b:f1:be:c5:b3:78:f3:21:0a:13:8f:bd:f5:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:33:ED:A7:74:C3:3F:F5:EF:76:66:4E:CC:91:6F:BF:1F:2C:E1:0D
X509v3 Authority Key Identifier:
keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:61:60:58:5c:f7:ae:9f:bc:05:cc:9f:13:6e:99:9a:bd:ce:
4f:b2:6c:02:76:03:0e:2c:23:40:4a:f7:02:64:fa:13:02:b5:
08:30:4e:e2:ab:a7:d2:ef:c0:d1:11:07:d7:69:8c:43:54:19:
3a:65:d7:81:f6:35:a0:8f:f9:3d:d9:f0:62:6e:f6:69:ba:cb:
21:7e:54:8e:c9:ef:14:5f:29:52:80:ed:b3:df:76:f2:a7:bd:
21:98:ae:0f:1a:90:c5:31:c8:12:63:4e:f7:de:b7:40:d8:f2:
d4:09:f8:cc:b5:69:0b:09:cd:22:b0:e7:69:5e:8f:a6:e3:6f:
19:3a:56:ef:4e:76:1b:43:37:4b:83:1a:dd:05:89:db:36:63:
63:22:02:b2:13:c2:e4:89:41:8c:dd:ae:e4:ee:25:ff:1f:6c:
18:cd:23:7b:75:55:f0:ed:40:49:96:9d:45:d4:45:8a:46:ce:
ac:1f:d7:92:52:6c:d5:7e:9d:57:24:52:ea:76:8f:f8:6e:42:
35:ed:4f:04:be:54:f9:d5:45:a7:5d:d7:8d:9e:7e:d5:28:0b:
9e:32:99:0b:e1:99:e6:5b:d7:fe:1e:15:b4:bb:a6:25:e5:c2:
55:9d:57:88:d2:34:b3:f2:12:68:b7:d3:f3:bc:df:94:26:06:
e2:f6:cb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:21 2025 by rpki-client