Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: FC5qfCDWXUfFkW83zUcSQ5HJlMRdDD/HfdI67Udo8BU=
Subject key identifier: 9E:D0:83:9A:E6:7B:5F:52:66:5E:CD:7C:1E:FC:C2:2A:14:15:93:F6
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 01989713133C8A6D8CA3C6EACDA07CCE5C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 03:01:06 +0000
Manifest this update: Mon 11 Aug 2025 03:01:06 +0000
Manifest next update: Tue 12 Aug 2025 03:01:06 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: HVYw57fnqsph6G05pDZZjPl18ogPNkHGf2Wmmsd4ZIo=)
2: FNrF4gJ9GeSqn1QNR00c9Q4ygYg.roa (hash: 2ncm1gP0ao8l2RvVLkDskRllvyDwCE2AZXVvFGp+UKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:13:3c:8a:6d:8c:a3:c6:ea:cd:a0:7c:ce:5c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Aug 11 03:01:06 2025 GMT
Not After : Aug 12 03:01:06 2025 GMT
Subject: CN=9ed0839ae67b5f52665ecd7c1efcc22a141593f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cc:95:a4:fc:18:6f:4b:9e:9d:38:95:f7:d8:
e4:f8:d1:eb:c8:5c:86:f3:93:0e:3f:d0:ac:5a:b6:
28:c5:12:1d:e1:28:0f:55:89:66:81:7d:29:00:37:
5d:db:63:15:d7:fd:86:3b:47:ac:e7:0e:3f:dc:4d:
d5:88:1c:6f:7a:89:37:82:fe:ae:f0:71:b0:3c:3c:
12:62:86:cf:13:1a:09:3c:56:fa:ff:c6:0d:6c:12:
f9:c3:00:ef:88:5d:a0:13:30:f1:05:e3:e7:45:0a:
c9:45:2a:e7:12:b1:ae:64:c2:db:d9:57:40:c8:ca:
b3:bb:d6:a6:9f:11:49:44:93:0f:ed:df:c7:28:ad:
57:22:10:c0:22:1a:54:cb:6d:53:38:45:79:94:6f:
97:64:c0:58:2e:af:80:80:3f:99:20:f4:b8:27:50:
1f:dd:5f:d8:9f:a7:99:dd:d3:a3:f1:1b:e1:f8:6d:
21:75:53:3c:c7:aa:8e:0d:31:04:ef:1d:02:0d:58:
50:7b:3d:e6:0d:2d:26:62:2a:04:75:31:7d:c3:1d:
3e:e4:4f:51:db:28:9e:8e:fa:d0:8b:f0:04:46:7e:
f2:8d:53:b2:1f:4e:6a:fb:91:da:07:99:05:7d:ae:
08:71:2b:ed:3a:62:72:54:2c:59:ee:9b:72:20:fd:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D0:83:9A:E6:7B:5F:52:66:5E:CD:7C:1E:FC:C2:2A:14:15:93:F6
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:73:cf:a8:54:93:2c:78:cf:fb:db:91:fa:91:0c:f5:c4:c1:
0c:20:12:26:cd:aa:52:59:21:2e:7f:88:f5:8c:53:da:69:2a:
6c:1d:a0:d3:5d:45:a1:53:7f:d3:81:3b:e7:26:ff:9a:01:51:
64:4e:85:2f:b5:37:3e:0f:50:cd:8a:ff:2f:0b:eb:34:a5:c2:
10:b2:d3:d8:81:cb:9c:a2:96:b2:b3:49:22:1e:ee:75:42:67:
a2:dd:b0:f0:3b:5c:17:f2:d9:ad:f1:71:a5:8b:d0:f2:12:55:
15:ef:5e:e5:91:d0:53:3f:a3:de:39:a0:e5:98:82:fe:16:d7:
4e:25:c9:7d:59:e7:d8:6f:22:a4:7f:a0:2d:5d:e5:ee:95:f8:
52:af:d4:29:a6:34:b8:9a:09:a5:d0:72:c2:c7:80:46:14:1c:
94:d6:24:df:ba:e2:24:d1:98:85:c2:39:f9:70:23:bd:ad:92:
48:50:00:43:0d:90:69:74:51:e0:97:65:bb:8d:90:79:3e:34:
da:50:3a:06:68:fb:72:ab:da:8b:75:d3:0e:52:55:91:f3:45:
a4:ea:00:8d:7d:a5:4f:41:94:f0:aa:0e:51:7d:81:e2:83:c6:
2a:fd:01:7a:14:ec:da:b1:48:0e:ee:e3:43:27:dd:ef:eb:d7:
4e:68:fb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:34 2025 by rpki-client