Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier: ATtV9b96u2SZcjJCiNG0H7xQScGjEjWJij+hisZm3Lg=
Subject key identifier: F9:1D:9F:65:36:92:8E:55:B3:AF:BA:2D:2A:82:16:BB:8C:95:B2:2D
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 01988B45EA79133715F471DD2DB6C36A5F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 20:01:11 +0000
Manifest this update: Fri 08 Aug 2025 20:01:11 +0000
Manifest next update: Sat 09 Aug 2025 20:01:11 +0000
Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: aQnDC9p3UssmVa8x562OnIyWUnDMEFmXHFap9qkxIG8=)
2: KNQf97WzItrOYioPwLu-Tdh4fNc.roa (hash: RIjtWc8dl547OecCvbWgp63AohvHeAGZkMZVo9/tFEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:ea:79:13:37:15:f4:71:dd:2d:b6:c3:6a:5f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Aug 8 20:01:11 2025 GMT
Not After : Aug 9 20:01:11 2025 GMT
Subject: CN=f91d9f6536928e55b3afba2d2a8216bb8c95b22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:f4:28:88:b7:ac:d0:de:f1:ba:ac:e9:08:
3b:8d:ca:97:f2:d1:43:f7:a6:de:48:1a:59:5a:0d:
eb:15:00:13:01:4a:3c:69:52:25:cc:5e:c4:9d:5c:
6e:78:e6:ae:e1:26:7a:fe:96:32:ca:49:db:9b:a6:
f4:f1:19:68:c7:84:8e:3b:a6:6f:d3:4e:e6:cb:de:
07:30:61:bc:17:b5:58:62:cd:fa:10:0e:29:29:88:
9a:5a:43:3b:73:33:4e:cb:bb:13:03:9f:71:0f:1e:
61:86:43:d9:89:0b:a7:e2:a7:64:75:20:1f:b5:f3:
7e:c2:80:46:d6:1c:f3:13:d9:3d:cc:43:31:3b:26:
79:97:58:72:57:e1:c7:fa:74:c0:1d:13:29:b7:82:
a3:d0:9c:62:f4:84:5c:1d:e0:4a:92:56:96:c7:d2:
d8:af:cc:5c:62:53:b8:84:f4:b4:83:ca:79:f7:15:
7f:59:0b:f9:9a:b9:74:b2:b4:70:9b:06:09:2b:b7:
44:b5:d3:89:9b:e0:e9:8e:f6:41:30:35:e1:59:59:
33:04:4c:80:c3:bc:aa:7c:27:61:f4:bc:c5:73:1e:
f0:39:a3:57:cd:cf:26:4f:29:f4:c0:52:fe:bf:cb:
85:a6:7d:e4:54:e8:8f:31:fd:94:05:c3:e4:14:6e:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1D:9F:65:36:92:8E:55:B3:AF:BA:2D:2A:82:16:BB:8C:95:B2:2D
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bf:ea:09:f2:12:8f:ef:cc:4e:1e:7a:40:4d:b3:48:9f:fa:
2c:24:a0:5f:5d:7e:97:c0:94:b1:ff:be:ab:7c:d9:c8:34:5f:
f4:a4:53:73:b4:02:19:33:95:18:a4:dc:4f:35:f7:eb:09:fe:
d5:fd:ac:be:ea:fa:de:ab:70:9f:49:41:d1:2d:a8:bd:b2:2e:
44:6f:10:22:f9:53:3e:a1:30:d5:53:1b:af:33:81:df:49:ac:
29:ab:57:a5:34:c5:ef:2b:d9:99:64:df:5a:03:57:34:12:5e:
6e:21:91:00:de:bc:b6:f2:40:b2:98:01:b3:ea:27:7e:f8:70:
e9:b1:0c:19:c3:b6:70:2e:b4:ec:68:6f:de:65:ed:ca:84:a2:
f3:b4:90:f1:fb:a7:94:fb:07:73:4b:28:1f:34:d7:8a:fc:43:
b1:66:81:c1:d8:81:f4:d8:80:c7:78:bf:00:e5:29:10:15:06:
ea:b2:d1:eb:69:95:c3:39:ae:4f:e7:f6:d4:eb:e7:49:d4:48:
dc:03:86:81:f2:53:aa:b7:f4:73:05:d5:b6:ff:a2:30:29:e1:
54:ae:4e:a9:3b:d0:18:f3:46:df:77:f5:5b:a8:a2:c1:d0:a7:
9d:57:3d:38:e0:2c:85:ca:a2:0c:f9:49:a1:23:89:fe:ad:9e:
f8:21:d4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:29 2025 by rpki-client