Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier: y6CdwDJY44TGhW0T+Iqj5kQx3o9qvSpM2OB7aBNIqGc=
Subject key identifier: 4C:A5:1B:8C:18:F1:3E:F7:21:9B:C8:DB:30:F1:DA:CC:43:23:19:83
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 019896375FEB17FC4E4D79C59842F5AF8D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number: 0CD6
Signing time: Sun 10 Aug 2025 23:01:07 +0000
Manifest this update: Sun 10 Aug 2025 23:01:07 +0000
Manifest next update: Mon 11 Aug 2025 23:01:07 +0000
Files and hashes: 1: 1qWzBwVhmQ6zdPJi5w7aMEYeKoc.roa (hash: QUUw5IgATMBX8godfHfSxzPR3Se/paZBDUtUUYMUESM=)
2: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: knTJvSB3NIdIt7qp8ZKFag2axbZqWw+vDQBdN7cVqbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:5f:eb:17:fc:4e:4d:79:c5:98:42:f5:af:8d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: Aug 10 23:01:07 2025 GMT
Not After : Aug 11 23:01:07 2025 GMT
Subject: CN=4ca51b8c18f13ef7219bc8db30f1dacc43231983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:e0:b2:e3:14:a2:ac:57:90:34:ca:1b:93:
50:95:01:a8:df:bf:74:75:b0:d2:9f:8a:1a:27:44:
97:cb:b0:b3:25:79:2a:b5:5d:e6:ac:2c:a2:71:3e:
46:74:a2:ed:31:de:f3:02:c0:de:41:4b:3c:7d:94:
41:dd:37:51:81:09:b7:4d:29:64:60:94:bb:26:e8:
df:19:ce:b0:3c:df:f5:33:1c:0c:c3:dd:df:40:3c:
41:f0:61:c1:97:bb:88:e6:dc:21:f3:84:c8:4a:9f:
11:64:38:8d:40:ec:7b:4f:ec:be:de:6e:14:2e:f9:
4a:ca:d8:34:e8:7d:21:0d:88:8a:95:03:0f:30:0e:
5c:be:7f:ee:ca:5b:71:27:9e:c3:e2:b3:e9:eb:48:
da:a0:2b:9f:3c:f3:23:2e:82:7b:a1:fc:97:6f:da:
1e:6a:9c:04:36:78:32:bf:d4:60:0a:78:78:df:83:
4e:1e:d5:2f:75:4b:53:ce:f1:69:10:da:03:4f:51:
93:ce:8d:5a:c9:aa:59:5b:fd:75:db:03:da:ef:51:
01:4e:44:e2:18:b6:4e:3d:38:1f:68:59:09:f2:67:
61:06:86:2b:01:1f:e5:aa:db:a4:94:2d:ce:3c:82:
94:ad:6d:23:f9:4a:ba:00:87:a2:26:53:d1:fe:ac:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A5:1B:8C:18:F1:3E:F7:21:9B:C8:DB:30:F1:DA:CC:43:23:19:83
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:e9:43:89:77:ec:1b:b1:21:37:0a:12:e2:ac:cd:15:b5:d8:
96:77:3f:1c:cd:94:61:0a:fc:30:97:a2:ff:66:1a:f9:31:3a:
c3:a6:d9:a7:84:ea:56:59:2b:4a:52:40:5f:88:6b:16:08:7c:
4d:6a:78:f4:52:78:e5:44:c8:37:b3:02:93:14:2a:7d:91:b3:
aa:7d:0f:b0:23:c8:e7:a1:06:4a:de:e5:8e:25:47:53:bd:5d:
f0:c3:79:ad:83:ab:b5:c7:c7:c6:59:7d:35:fc:6a:d6:3e:80:
e0:40:a0:a8:2e:cb:0e:d5:6b:7d:5b:6d:e2:d8:21:c2:85:29:
4a:24:b5:19:07:a8:cf:de:17:42:6c:61:5c:c1:bf:7b:cc:3e:
84:00:fe:25:24:63:ca:c3:97:81:2b:2e:62:8a:7e:df:0f:1b:
19:ad:ed:00:21:d6:cb:31:b6:2e:07:6e:b8:48:f1:95:af:7f:
8c:1c:46:5d:bb:cb:06:d4:0a:b2:01:23:0d:09:67:93:e6:f8:
ef:ca:a9:24:74:ed:4f:bf:cf:9c:4d:d4:74:a0:e7:98:f3:69:
dc:50:9b:8b:3b:91:27:1c:6b:68:86:27:24:56:20:2f:d5:52:
e7:a7:5b:33:d8:5b:4b:44:96:6d:06:6a:2e:a5:91:ac:55:ea:
2c:ba:a9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:42 2025 by rpki-client