Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
File: pB97t76hWBYk_LZQOrWnD0IMmz4.mft (raw, json)
Hash identifier: YG+224JMv8f4T8vZ+/kx8eP+ko6+uONgsDUU15I+OCI=
Subject key identifier: 92:51:9C:88:30:79:40:A2:3F:9B:28:DC:AC:0E:9C:FD:2C:BA:76:FE
Authority key identifier: A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E
Certificate issuer: /CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e
Certificate serial: 01987306B75956106214347F530D9D5D66F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
Manifest number: C9
Signing time: Mon 04 Aug 2025 03:01:16 +0000
Manifest this update: Mon 04 Aug 2025 03:01:16 +0000
Manifest next update: Tue 05 Aug 2025 03:01:16 +0000
Files and hashes: 1: TOnoVfX8Ap4KHroZhyTiZTPqFbo.roa (hash: h8XoURF67JqruQUoq14dZxGEi4Cnu4hmR974XbY5rg8=)
2: bktyDBqNSVITQAf_MKFUeQ2s_nU.roa (hash: q/tuR42MGkp/VtZe/IwxRfy5LTdFIBVwnpSc5i4a68A=)
3: pB97t76hWBYk_LZQOrWnD0IMmz4.crl (hash: OCIdrJpRmekgJvDf6uMj1+J0X/QiUXUmBkiuMvgvC/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:b7:59:56:10:62:14:34:7f:53:0d:9d:5d:66:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e
Validity
Not Before: Aug 4 03:01:16 2025 GMT
Not After : Aug 5 03:01:16 2025 GMT
Subject: CN=92519c88307940a23f9b28dcac0e9cfd2cba76fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:3e:61:6d:2c:17:82:fc:43:12:89:13:f7:
c0:6f:38:5d:fb:d7:97:17:b5:91:b4:c3:04:0b:9d:
92:22:98:5f:19:4d:79:85:2c:50:80:a2:ab:a2:b7:
78:1d:f9:ec:3d:2e:2a:49:88:a6:32:8c:53:c0:c7:
09:6b:da:f2:69:e4:8c:9b:21:ca:61:3e:fc:a1:f7:
e2:47:14:fa:88:71:b9:9d:ba:e0:25:c7:8c:f9:11:
33:6f:16:b3:92:d5:2f:ab:ef:08:ab:59:97:ef:2a:
97:b7:ad:2d:5f:ac:32:d2:ce:f7:f5:16:4d:47:b6:
31:0e:0c:53:ab:a0:7b:4c:db:d0:b3:1c:1d:dc:b4:
a6:34:9d:21:84:51:50:86:80:42:58:2d:25:f6:3f:
3d:5a:22:92:38:66:b8:93:a3:21:a8:19:9a:07:9e:
bc:ea:7a:7d:77:1f:eb:2c:47:de:54:3a:b7:b6:47:
1c:bd:97:a1:64:39:a9:dc:3e:bb:8d:4c:b9:43:2f:
73:58:7b:14:65:d3:e4:11:73:ec:83:0d:5a:1d:af:
4a:23:94:3e:86:ac:5d:3c:0e:34:18:d5:ed:74:2f:
f5:d7:74:b1:f7:77:3c:f4:27:45:3d:dc:ec:22:be:
0d:22:fc:34:d4:34:f3:5d:ab:08:9a:1a:84:c8:70:
39:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:51:9C:88:30:79:40:A2:3F:9B:28:DC:AC:0E:9C:FD:2C:BA:76:FE
X509v3 Authority Key Identifier:
keyid:A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f0:29:a7:41:c5:56:c6:fe:d9:c4:90:f4:6b:3c:ce:97:4f:
e0:02:87:a9:7b:36:42:8d:6a:69:fc:7b:48:dc:d8:f4:24:46:
ac:a2:23:d5:40:8e:95:dc:99:21:84:01:e1:c7:57:ca:78:ae:
f9:3a:10:d9:25:aa:6e:ce:e2:17:c6:d5:01:84:fe:b9:7f:44:
b7:fe:b0:f6:0a:ea:00:fd:59:5c:58:d6:20:c3:ef:cf:d3:4e:
69:97:79:68:08:49:5c:e4:7a:de:a7:71:8f:98:33:04:b5:12:
11:fa:f1:6e:ab:66:8a:04:7d:6e:24:52:41:ee:e2:11:ad:f9:
4a:34:27:b2:95:ea:3b:0f:93:35:aa:f2:67:20:d4:ba:6d:81:
b4:88:5d:0c:49:b1:05:10:1a:55:f7:70:d7:fe:39:42:56:ae:
2e:db:f9:62:5b:30:f0:ff:53:f9:28:f4:39:8f:4c:6b:b8:8e:
ee:b9:72:42:26:ac:e8:4c:f0:85:ba:ef:b3:02:46:f4:58:fc:
f9:0e:0b:34:25:46:7a:12:29:73:c5:28:da:0a:b2:13:96:c9:
42:91:ce:32:ea:c8:b7:a0:d4:6f:28:c9:4b:79:2f:fd:60:c6:
9d:f6:2d:d1:72:54:63:d7:ac:f3:17:81:df:c9:d1:66:28:17:
33:18:52:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:01 2025 by rpki-client