
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: SVeJqhobEroZOFr+Ti4rAdPYJXBXMcrs9D8g0pWEuCU=
Subject key identifier: 6B:BA:19:49:64:BA:13:FA:4F:A7:0D:59:70:88:77:13:80:21:A0:EF
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 019879AD66EB77E076E4B26D6556AE916F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 15A9
Signing time: Tue 05 Aug 2025 10:01:03 +0000
Manifest this update: Tue 05 Aug 2025 10:01:03 +0000
Manifest next update: Wed 06 Aug 2025 10:01:03 +0000
Files and hashes: 1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: jWWmXdGWHfP5sWw0CO2q4fgebtVtb8Ru6HsErwacXpg=)
2: opYZOi4k9YDcS_3foMnJJa-4gCI.roa (hash: VbpgC06Lnc7NWswjuIad3/ZduRJ+GtOZh31gorgG7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:66:eb:77:e0:76:e4:b2:6d:65:56:ae:91:6f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Aug 5 10:01:03 2025 GMT
Not After : Aug 6 10:01:03 2025 GMT
Subject: CN=6bba194964ba13fa4fa70d59708877138021a0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:6d:00:7a:c1:e7:02:4b:45:bf:60:26:a6:
cc:38:44:63:05:92:6c:a3:e6:ec:2d:f7:7a:ec:ac:
9d:fe:c0:8c:e6:27:c4:fe:f8:4d:2d:e3:d6:8d:7c:
17:35:4b:9f:d6:93:5a:6b:70:b5:7c:0a:6f:a6:cb:
44:32:22:7c:c6:5d:4a:b0:66:09:98:a4:2f:c3:16:
9b:ca:85:94:97:a5:c5:30:d1:06:9b:52:87:11:e2:
4a:7b:57:cb:ac:ae:ab:c8:d7:f4:d9:cd:01:ff:dd:
fb:fc:09:8d:5e:25:dd:af:33:c8:e7:2d:11:be:13:
d9:ea:c2:13:18:33:52:d1:d4:2e:73:e7:42:55:6e:
bd:b5:02:2a:fb:2d:b4:56:35:52:50:56:b4:db:0b:
f3:9d:7c:61:88:03:34:c0:b4:e8:27:1f:f8:74:17:
8d:80:77:b2:13:99:8b:58:8c:1e:0d:22:30:a5:57:
eb:99:77:71:1e:67:ae:d2:90:61:3f:0d:3f:5a:8f:
33:46:dc:17:6a:e1:45:57:db:a0:eb:ca:63:d0:5c:
76:01:14:75:23:36:8e:a4:6a:84:38:45:25:52:51:
7e:83:b0:1b:be:80:f4:05:97:86:f8:31:c9:fe:ce:
cd:40:e9:87:a9:51:c7:f2:6f:d6:77:9e:3b:e2:e6:
a2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BA:19:49:64:BA:13:FA:4F:A7:0D:59:70:88:77:13:80:21:A0:EF
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:bc:8f:8e:1f:df:15:41:c3:ce:71:ea:43:b3:00:ee:2d:8e:
f0:04:32:c7:0a:08:37:55:49:4a:f9:17:b4:1a:a4:61:ec:16:
66:fe:88:36:ac:be:0c:d0:04:e9:7c:35:4f:7f:98:12:ea:3e:
45:0a:e9:c9:d9:a4:88:41:3a:19:1a:5e:52:a9:bb:94:a9:4a:
13:3f:61:4c:cd:4a:89:6b:bc:16:22:c3:43:8a:89:c6:ef:f4:
b5:b5:82:ac:3b:9b:25:0e:55:f2:81:2f:33:da:e9:40:5a:18:
a6:d7:bd:4a:cc:aa:ca:92:b3:73:6d:d9:0c:27:cd:03:97:a7:
dd:76:4d:a7:07:2e:82:4a:a7:b8:b1:5c:ff:d2:50:ab:fa:a4:
98:03:c0:ba:e9:71:48:01:45:8e:a8:73:ff:6a:44:e2:f0:f3:
fa:55:f8:a2:6a:f4:18:5b:b5:53:2f:57:b3:27:51:e3:ff:d0:
b5:3d:20:84:72:e8:36:a8:44:9d:59:79:f0:4b:59:48:3c:2b:
b3:54:00:40:05:a7:23:0d:9d:d8:8b:e8:48:b3:97:dc:42:83:
ba:f0:1e:55:0d:d4:97:b2:67:62:09:f7:20:c7:be:3f:3e:e5:
a1:4a:88:47:cc:ee:ba:70:94:69:bb:e5:77:e7:2f:12:23:38:
1b:2e:e8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:27:28 2025 by rpki-client