Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
File: 9NavTeibuoEYlTzO6_s59FqO0bw.mft (raw, json)
Hash identifier: N5NYda+UnHWOQHxhUuxxnR1KxXKTLOok8rOdlZWKLkY=
Subject key identifier: CD:38:8A:86:0B:85:EF:47:17:02:DD:F6:2C:87:2D:04:0E:D0:5A:EA
Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
Certificate issuer: /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Certificate serial: 019873E3678DE8987B4C0F43921CFEDD3598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:02:19 +0000
Manifest this update: Mon 04 Aug 2025 07:02:19 +0000
Manifest next update: Tue 05 Aug 2025 07:02:19 +0000
Files and hashes: 1: 9NavTeibuoEYlTzO6_s59FqO0bw.crl (hash: UagG49v9sVe6uxPRo1ReCnk0hyad2nzWF1fIfWED9Sw=)
2: RSBqMA8SK5hkaH899w74rpWOWzA.roa (hash: ZarbLd1gWH81UzY1+uoaATMpd5XCQStSn4LP/xfm248=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:67:8d:e8:98:7b:4c:0f:43:92:1c:fe:dd:35:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Validity
Not Before: Aug 4 07:02:19 2025 GMT
Not After : Aug 5 07:02:19 2025 GMT
Subject: CN=cd388a860b85ef471702ddf62c872d040ed05aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:21:65:1b:4e:91:36:7c:7b:02:20:c5:1c:41:
dd:aa:2a:67:f7:39:61:09:85:72:b4:59:65:57:03:
39:83:b7:9a:60:08:b2:85:a2:61:7a:49:87:50:01:
9e:83:e0:cc:c5:ce:3e:43:ef:57:6a:c4:f9:b2:4b:
92:39:d1:13:3c:a3:93:ce:6b:12:f3:53:52:e4:f3:
a9:10:bc:90:2a:4d:e9:e8:46:a3:73:71:2f:8c:b6:
55:f0:06:1c:c0:2f:48:21:4c:9f:e2:4b:f9:7f:9d:
e6:6c:5b:58:7a:b9:fc:ea:fb:45:62:ac:45:ed:c4:
3e:66:10:fe:75:28:c7:e9:a3:de:eb:59:60:5b:98:
08:61:2b:81:94:06:a3:d4:a1:88:33:74:a5:2c:b3:
19:76:f8:e3:46:3e:75:c2:a6:45:5a:6b:26:95:80:
fa:49:1a:08:c4:ee:52:96:cf:14:90:a7:f6:f8:31:
02:5e:67:5f:18:bf:bd:f6:eb:5c:39:0c:83:03:00:
8b:c6:61:aa:e5:d8:d8:90:b7:3e:98:91:12:20:a8:
de:18:1c:13:a1:b0:ba:a4:17:89:86:4e:30:92:59:
50:3b:08:91:7a:37:81:c3:af:cb:23:39:f7:27:04:
98:bd:ac:ef:6d:4b:06:31:22:3f:66:2b:1e:ad:ba:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:38:8A:86:0B:85:EF:47:17:02:DD:F6:2C:87:2D:04:0E:D0:5A:EA
X509v3 Authority Key Identifier:
keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:25:90:bd:a4:0b:99:c5:4b:6f:c7:5b:24:5f:33:46:59:86:
b7:02:45:77:a8:37:c1:61:d8:32:e3:b6:d7:e3:f7:b9:99:bc:
b0:59:06:c0:d2:fb:00:d8:1a:3e:c6:ae:ca:22:ee:ba:f7:26:
ae:23:0d:4c:58:16:f3:bb:72:3c:bc:51:8b:60:67:81:70:c8:
59:e5:e2:b1:71:81:ea:53:84:78:76:be:5b:73:ed:b2:6d:88:
0e:85:4a:20:3c:be:86:af:5b:f2:fc:a3:6c:8d:e2:15:55:fc:
41:99:a7:d5:42:a9:ad:a0:5c:de:19:5f:54:23:93:3f:ac:d3:
a6:89:91:ce:9c:b7:5e:b5:b1:fe:36:f0:13:69:84:26:cd:df:
12:cd:d4:2a:d9:82:5d:bd:ff:2b:e5:75:3d:2b:71:76:1d:91:
27:e9:ea:7d:75:5e:a0:f0:6a:95:24:a0:52:6f:8d:01:85:bc:
6a:97:84:5e:7b:de:60:6e:e5:39:20:a0:86:b0:20:8b:4e:dd:
d9:7d:d9:36:9a:e7:8d:5c:08:8a:ad:7b:ec:75:ef:e3:ae:de:
08:6d:cc:52:61:55:31:3a:91:b7:51:74:af:1a:33:48:8b:7d:
2a:32:c0:22:e6:81:8c:48:9b:b1:26:08:25:9e:c6:0f:d1:bd:
49:8c:84:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:20 2025 by rpki-client