Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
File: i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft (raw, json)
Hash identifier: hssqrw6pPorymdT1oPyPvBYPSMkeOf5JTL6QxPh6y2E=
Subject key identifier: B3:BB:63:D6:C7:D6:28:3B:CA:C1:BA:92:BC:34:D2:2C:17:AB:24:BE
Authority key identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
Certificate issuer: /CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Certificate serial: 0198978092A6355F3853B805210C99D197AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 05:00:42 +0000
Manifest this update: Mon 11 Aug 2025 05:00:42 +0000
Manifest next update: Tue 12 Aug 2025 05:00:42 +0000
Files and hashes: 1: i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl (hash: zPum+T15lvYKWTnuMQghIhfj7qAKA0z/6q8BiF/wGCM=)
2: rZl7il51Qi4Gx_nmvEJg-3TLGKk.roa (hash: IPdBuWhuBJNo3ThX3cWTYn6XuZdtQY1uz610IBEtgfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:92:a6:35:5f:38:53:b8:05:21:0c:99:d1:97:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Validity
Not Before: Aug 11 05:00:42 2025 GMT
Not After : Aug 12 05:00:42 2025 GMT
Subject: CN=b3bb63d6c7d6283bcac1ba92bc34d22c17ab24be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:73:6d:71:ac:4b:3c:56:18:09:30:bf:e5:
52:70:0b:88:c0:52:f7:7e:11:e4:c7:e1:b5:87:25:
d7:3c:31:01:f2:73:af:6b:30:81:b8:32:e9:bb:c5:
27:99:9c:6d:12:07:32:43:6e:3e:13:20:7d:5a:8f:
68:66:5c:70:13:43:d9:91:27:7e:a3:23:39:d0:50:
10:4c:ee:87:60:6b:79:53:5d:5e:2e:ee:7c:52:8e:
cd:ee:74:8f:07:f4:a3:bb:7b:a1:e8:28:bb:71:46:
37:73:b4:d4:e8:16:ac:0c:6f:ce:dc:55:15:22:8a:
15:8b:2b:3c:7b:e1:d3:d9:b8:35:ba:f4:fb:6a:8c:
41:35:c5:0c:9b:d0:a8:5b:43:cf:8a:a4:50:41:7d:
99:a5:f0:ad:64:0b:d3:4a:03:4a:60:65:5e:c0:7f:
45:cc:f1:a3:5c:6a:b2:0c:3d:bd:aa:7e:68:01:78:
e8:f7:14:5b:64:cb:24:e5:27:66:99:3e:af:6a:78:
50:69:fe:ae:1e:b6:96:56:eb:2e:9a:cf:f6:2e:fd:
d6:47:35:aa:97:84:25:dd:65:06:ec:65:9e:d9:05:
7b:9b:34:c8:30:95:69:6f:2c:3f:2e:fc:fa:6d:04:
3f:10:bf:47:89:2c:74:b5:10:df:33:2b:a2:73:cd:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BB:63:D6:C7:D6:28:3B:CA:C1:BA:92:BC:34:D2:2C:17:AB:24:BE
X509v3 Authority Key Identifier:
keyid:8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5c:cd:9d:cd:66:ff:43:4f:58:d0:1e:44:37:87:ba:a6:8e:
eb:4f:52:89:2b:b4:10:6d:0f:f6:43:64:ac:36:65:72:db:99:
c6:f7:16:9a:87:40:82:87:91:8f:43:ef:85:5a:bf:94:48:51:
8d:2a:c7:fb:14:44:1c:9a:0c:b2:42:52:f6:8e:5b:a6:c2:0d:
a8:5c:af:13:79:30:ae:3f:5e:9e:ac:70:5c:28:33:7e:b5:ef:
f3:22:9c:5a:7b:65:f2:ab:2c:0e:71:97:5d:09:40:43:34:6b:
01:a3:6b:ba:23:b6:50:57:ef:10:17:5a:71:0c:ce:ed:c1:22:
b0:66:7e:cd:d5:ce:fb:77:d8:e4:32:26:da:56:89:b1:82:b7:
6f:9d:f6:d4:35:e1:01:f9:18:bc:b7:ae:90:69:14:f0:7b:c6:
75:45:66:d8:26:55:44:fb:17:2a:98:f2:b6:47:09:7b:6e:7b:
65:4c:ee:17:55:40:4c:4e:d1:3d:d4:47:44:74:c4:d4:21:92:
24:ab:43:51:86:34:00:a7:6f:26:ee:64:56:f8:53:83:cf:40:
5b:54:db:d8:3b:5a:1e:b3:1a:ab:eb:d5:1c:03:0a:67:00:c8:
0c:f4:2c:1d:89:4b:1c:47:41:cb:3c:cc:1f:36:23:47:36:ea:
c9:00:0b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:53:43 2025 by rpki-client