Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
File: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft (raw, json)
Hash identifier: c05ZkHZJ5hx0//FrGaEclcRZnWjtQy8lrrBrSEWbLLc=
Subject key identifier: 96:BF:D7:A2:B5:CA:B1:91:56:6E:16:CA:D0:75:A1:E5:14:82:11:B2
Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
Certificate issuer: /CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Certificate serial: 01987306473CB61C6449FD782346F879D9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
Manifest number: DB
Signing time: Mon 04 Aug 2025 03:00:47 +0000
Manifest this update: Mon 04 Aug 2025 03:00:47 +0000
Manifest next update: Tue 05 Aug 2025 03:00:47 +0000
Files and hashes: 1: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl (hash: idkhRfmybOeTldiNrU4Ut3cRwcFEWpYYFhLqcqgLOPc=)
2: _R2-unRLTVoARNA84wK9QwIRcHg.roa (hash: pLbQbiX22eVdy+zNJ3CqYse/kH4/484+cWZJ4cChULA=)
3: a3SyScX72L5TkWnjrj7OuShiBm0.roa (hash: EcnC4sDg2JzNdW4ec0ThJsTXhRWMy/yu92wkqgkxq6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:47:3c:b6:1c:64:49:fd:78:23:46:f8:79:d9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Validity
Not Before: Aug 4 03:00:47 2025 GMT
Not After : Aug 5 03:00:47 2025 GMT
Subject: CN=96bfd7a2b5cab191566e16cad075a1e5148211b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:49:3e:bc:6e:ff:bc:92:8c:4f:87:5f:54:
99:a6:3d:61:d8:5e:aa:1a:9a:33:4e:e9:88:c6:ab:
6d:a9:d4:6e:42:7c:a9:39:fc:58:60:dd:fb:fd:ff:
af:91:88:0f:09:16:52:a9:de:ad:d0:2f:ea:c5:5e:
b7:85:a0:8e:df:96:82:e9:1f:d6:fb:7c:23:dd:af:
c5:a0:21:b3:24:c9:58:e4:b4:b9:78:6e:76:4b:22:
98:51:43:ad:00:d3:57:96:11:bd:d4:1e:b3:22:95:
a7:7f:ab:40:93:dd:99:a3:08:1b:f0:b8:cc:af:4a:
72:e8:d6:73:99:36:79:e0:f1:20:00:ae:ac:d5:33:
19:29:84:ae:a8:5c:87:5f:25:97:1b:16:7a:d5:b8:
37:50:a7:68:7c:8d:fd:f0:15:26:fa:c1:c8:43:24:
5a:11:d9:ca:a6:37:e2:94:10:ff:7c:95:ed:80:b5:
e9:32:b5:a3:78:62:3f:90:3a:34:57:e3:e9:5d:88:
72:ba:6b:3b:5f:bf:10:4a:03:25:29:a4:7f:0d:6b:
d5:9f:80:5c:e7:54:fc:89:52:3a:b2:23:22:05:40:
dd:e0:f8:ed:4b:88:ab:b6:ee:93:bd:be:a0:6e:7e:
f6:5e:e0:86:c7:33:ca:2a:ca:a1:c4:81:99:37:fd:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BF:D7:A2:B5:CA:B1:91:56:6E:16:CA:D0:75:A1:E5:14:82:11:B2
X509v3 Authority Key Identifier:
keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:02:c8:4a:a4:58:86:59:d3:8b:b9:f7:3c:78:4e:9b:92:2c:
00:ac:bc:59:f9:82:15:6d:5e:a7:68:f9:93:8b:d4:71:5c:5a:
c5:f3:33:c9:e3:d3:73:1b:e1:c2:1b:f3:f2:1c:6e:da:c2:19:
a4:2f:2c:33:d0:45:d8:20:a7:6d:f0:79:4e:b3:fa:d8:7a:df:
87:24:95:93:29:50:85:29:05:2d:17:97:53:c0:3d:f9:7c:43:
3b:09:57:b0:be:23:8f:64:e9:b0:82:bc:5b:e6:56:59:b7:de:
12:7d:84:25:a8:91:8d:95:fc:9a:66:3c:37:db:56:88:1e:e5:
b6:9f:5f:e9:b8:be:f6:ce:bf:35:a6:86:87:c0:a9:d6:2d:0d:
47:af:18:70:94:b0:54:95:4e:27:77:0b:78:64:95:b1:e9:9c:
ed:6b:e7:0b:5a:18:be:11:b9:83:a8:21:e8:e2:74:25:1d:d9:
29:67:e5:1f:e7:bf:2c:65:aa:a4:f8:4b:ec:19:bb:00:ed:77:
41:ea:28:c9:15:e3:ad:4b:14:72:a9:9a:59:f6:90:10:39:6c:
48:25:01:2b:07:db:a2:fe:7c:de:1a:62:26:6d:8e:15:e6:ff:
f4:d4:34:77:c5:c9:85:37:fa:e3:45:95:6d:f8:1b:06:fc:64:
8c:36:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:44 2025 by rpki-client