Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
File: p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft (raw, json)
Hash identifier: O8UWrQYKzhmr7Y1t2EOHoEQQZ1q1X1agl+fpn45xeh0=
Subject key identifier: D6:A0:42:CB:44:EB:AC:8C:70:3D:EA:02:57:57:45:E3:BC:A7:C9:01
Authority key identifier: A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD
Certificate issuer: /CN=a7ef66cb7cc350345852be9bdd75455782afe4dd
Certificate serial: 0198820BC9E182584922A59E2F7D53F267A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
Manifest number: 0739
Signing time: Thu 07 Aug 2025 01:01:07 +0000
Manifest this update: Thu 07 Aug 2025 01:01:07 +0000
Manifest next update: Fri 08 Aug 2025 01:01:07 +0000
Files and hashes: 1: a05D2as5w-ZphYSOJlRsKKwpve8.roa (hash: xvnLmK5XjCaYTBnLCkguyMd5kItynb1Iv2CauMJIpxU=)
2: p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl (hash: 7Ww0SKP9NW8v5EDuRJErBkPOyQPHSGDdw5IKCfO3yus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:c9:e1:82:58:49:22:a5:9e:2f:7d:53:f2:67:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ef66cb7cc350345852be9bdd75455782afe4dd
Validity
Not Before: Aug 7 01:01:07 2025 GMT
Not After : Aug 8 01:01:07 2025 GMT
Subject: CN=d6a042cb44ebac8c703dea02575745e3bca7c901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f5:d2:67:89:4b:c8:f4:eb:1f:25:92:ef:9d:
02:e8:8b:4f:81:e4:af:27:ce:ca:0a:e9:0b:68:76:
f8:e3:4c:bc:52:85:f8:f0:22:1f:89:e9:4f:9d:13:
8e:e8:a5:f9:a5:c4:cf:9c:1d:d3:5f:09:87:34:20:
e3:a9:1d:4b:78:94:ac:30:96:d5:64:31:56:76:df:
16:1f:6d:16:9d:f5:67:60:24:de:04:07:2a:34:f5:
fa:ee:c4:a4:a7:eb:a9:90:35:df:03:8a:c6:1f:70:
d6:08:09:e0:7e:d3:5f:0e:25:93:4c:04:e0:67:a0:
16:70:b1:a4:55:18:aa:df:e9:21:1a:9e:fd:39:2f:
76:e1:ce:1c:d8:da:79:9b:30:89:38:3e:cc:ad:4c:
33:a8:80:67:03:cb:bc:09:a4:e0:f2:d0:0d:d3:8f:
f6:d3:f3:ee:1a:40:70:cf:3f:d4:71:60:21:f1:5a:
32:7b:df:92:7e:28:21:f9:a7:11:57:5a:6e:19:f1:
fc:56:e7:d6:4c:f7:8a:4e:f3:57:e1:3c:29:84:d3:
25:3e:a0:17:91:1a:0b:46:23:a8:14:7c:9d:39:b1:
ff:f0:f1:3d:6f:7f:6a:6a:1f:72:ff:de:6a:07:ad:
79:52:e3:2c:63:b8:16:96:d1:16:db:46:46:5b:30:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:42:CB:44:EB:AC:8C:70:3D:EA:02:57:57:45:E3:BC:A7:C9:01
X509v3 Authority Key Identifier:
keyid:A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0b:00:c9:5c:38:59:85:de:9a:87:f9:96:92:cf:80:a5:76:
ea:2b:8d:54:e7:ef:46:09:a1:4e:cf:17:40:54:33:14:5d:77:
9e:6c:1a:2c:d8:bf:9f:3c:bd:c7:92:6e:3a:b5:45:b7:72:ca:
a3:4f:92:1b:a4:be:6c:ba:f1:87:c0:f0:5e:be:a9:28:4a:ee:
25:de:09:8e:be:5d:e0:66:f1:12:72:79:0f:1b:55:fd:65:22:
50:87:b2:c7:44:4b:12:69:a3:df:c1:0b:92:e4:bf:2a:01:6e:
f4:f8:54:2d:75:1f:61:31:69:95:fd:26:be:8d:7c:86:5c:46:
58:12:48:b1:ab:63:5f:b4:b2:9b:b8:d2:d1:89:14:52:9f:57:
7d:35:4e:26:25:e9:74:07:a8:31:c1:c8:87:0d:9c:25:55:6b:
09:c3:95:36:a3:1d:b1:18:66:b1:6a:cd:b1:8b:d7:ec:e8:4e:
93:36:d2:32:f5:e5:92:a8:18:e0:16:ca:9d:b6:70:61:64:0d:
18:43:27:b6:28:d4:76:1a:37:8c:9d:cc:8e:ce:8a:9c:2a:8f:
15:1b:1b:4c:0c:8f:56:e2:db:ee:b8:df:99:54:6d:1c:84:92:
64:d4:cc:ee:3e:ab:07:8e:4b:c1:75:e4:9c:fb:d7:7a:5c:d4:
a5:e9:83:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:38:39 2025 by rpki-client