Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
File: lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft (raw, json)
Hash identifier: HBmNqR+UGti35U/VXaIOM7HT9GzJs0Rpyl9Objze0iM=
Subject key identifier: 80:75:03:36:61:C9:32:A0:6B:F7:F2:D8:98:B1:89:FD:5A:CD:27:82
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 019876077E21ED4406947DF3C722FD346377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 17:00:59 +0000
Manifest this update: Mon 04 Aug 2025 17:00:59 +0000
Manifest next update: Tue 05 Aug 2025 17:00:59 +0000
Files and hashes: 1: Aw8VCCK2oT1v-RRBTzm1Icy2wl0.roa (hash: XRXIYDE3PMP8HGRW9qlh0nIOPSOFPTF1lsWNuSlfpmY=)
2: P9x64-P6Zc5aUoIHika_YUJSpL4.roa (hash: wA4s5vuet/tgGLY4KlSltkNzg/nbmHYvEtESrfXIJ8U=)
3: i9LUKRMFfrn-zZJPck6ZTY7F8F4.roa (hash: vYGYhqvVpW6XCnxzEEe+vdIqrrsrJBwJSKWJ04MFhOg=)
4: lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl (hash: 76W0hpu9Jz9/C0o22sW27UhG+CG2CbqRuLR1y0IAhys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:07:7e:21:ed:44:06:94:7d:f3:c7:22:fd:34:63:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Aug 4 17:00:59 2025 GMT
Not After : Aug 5 17:00:59 2025 GMT
Subject: CN=8075033661c932a06bf7f2d898b189fd5acd2782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:d0:80:c1:39:db:c2:4b:b6:1e:36:0c:df:
85:0e:28:95:bf:31:15:fd:5e:25:4e:da:0d:ee:04:
78:95:19:73:59:f3:05:18:bd:78:fc:ea:6b:e1:d0:
ad:89:2b:1e:4d:11:26:dd:fc:4c:98:ce:e4:2a:61:
69:5e:d2:8c:38:36:d5:2d:ea:d2:6d:b3:2e:ef:53:
41:ea:84:f6:40:14:68:1e:05:68:04:74:78:9a:f2:
a4:17:f7:b7:52:cc:a6:79:82:3d:35:36:b8:3a:03:
06:7c:b0:d9:1c:74:63:26:cc:b3:ec:35:2e:04:e4:
ed:13:75:08:ea:80:5d:5e:9d:7a:58:15:b2:52:69:
df:db:41:eb:8f:c5:57:8a:20:76:3b:92:7b:76:14:
7c:1c:3b:36:a8:59:e1:89:d1:ce:88:eb:2a:f8:eb:
a6:e8:26:b1:66:7a:e8:f6:c4:84:e0:cb:7d:43:d3:
bf:73:ac:f9:ff:e8:b2:1a:29:03:14:8e:3c:b0:15:
1e:e1:3b:80:ed:15:87:06:c9:4e:79:7f:76:70:bb:
47:b0:e1:0f:ad:08:88:7c:c5:97:c3:4d:09:02:d1:
17:fd:d5:56:3c:1c:20:67:40:54:e4:30:4d:34:a2:
3e:9b:5c:97:6c:3b:91:b2:2e:1d:b8:fd:5d:41:42:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:75:03:36:61:C9:32:A0:6B:F7:F2:D8:98:B1:89:FD:5A:CD:27:82
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:93:9c:3d:f5:88:8f:d9:f5:f5:de:c3:01:03:73:8f:d9:ed:
b5:9d:fc:f6:ef:15:db:80:92:21:6f:db:5a:98:fd:6e:96:53:
e7:da:49:17:34:1e:49:67:80:7c:66:4f:27:4d:54:39:c3:5c:
96:38:3e:94:d7:80:ae:f8:2a:88:3b:2f:d1:af:33:1e:c5:e6:
15:2e:45:4b:b8:01:30:d6:b5:12:d5:67:47:16:22:52:f9:bd:
3c:68:34:33:5a:56:87:92:2b:fe:a4:65:31:65:f9:1f:fd:24:
1a:d3:cb:45:93:9c:cc:71:06:8f:47:49:12:41:b8:11:47:9c:
27:a4:79:af:f9:f4:7b:7f:4c:7d:f9:93:e8:55:a2:7c:64:31:
34:e2:b1:69:2c:2d:c5:57:c2:f6:8d:ac:64:92:25:e1:89:3b:
c2:ec:3e:c8:fd:43:8a:27:dc:29:c0:21:73:28:16:ed:e3:ae:
20:21:04:34:be:fd:4f:0a:8c:ab:35:d8:6a:7e:f0:09:f0:0f:
32:bb:4a:40:c0:a0:b8:2d:1f:18:2f:5b:fb:30:0d:a9:16:f0:
c7:96:be:55:89:f5:cf:f2:99:6d:39:b1:73:f2:4e:e4:15:78:
76:fb:0b:77:09:a5:d2:56:8a:c0:1b:81:26:94:40:49:a3:34:
9b:b1:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:23:28 2025 by rpki-client