Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier: Oz1p31P+ntOddcp/e2qdDyq4uKs7jjviZktsIPkj+7k=
Subject key identifier: E2:59:1A:62:DC:78:B6:FF:79:91:6D:7E:6A:8C:42:A6:BE:5B:04:EE
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 0198A196F8531835F823E60D94DF9CC97F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number: 0F18
Signing time: Wed 13 Aug 2025 04:01:22 +0000
Manifest this update: Wed 13 Aug 2025 04:01:22 +0000
Manifest next update: Thu 14 Aug 2025 04:01:22 +0000
Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: qIcJeHcw0DXH5IgeBHdst07dgyjHNJ64kO9gBEcAZeU=)
2: aLKZdbyHdUQAxsRZ3ruuENc53TE.roa (hash: yhXtjt95UoYbZR58FaQJ/OrRbsl6cTOpt3SfPdy5STs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:96:f8:53:18:35:f8:23:e6:0d:94:df:9c:c9:7f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Aug 13 04:01:22 2025 GMT
Not After : Aug 14 04:01:22 2025 GMT
Subject: CN=e2591a62dc78b6ff79916d7e6a8c42a6be5b04ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:c4:1e:c0:06:ca:82:4b:66:fa:ae:e1:c7:
41:b5:f1:54:65:c3:f8:5d:a2:ab:b2:e4:de:af:4c:
93:34:ac:e4:a6:7b:4d:fe:cc:f8:a5:ee:12:a0:56:
85:d4:6a:c5:d0:eb:63:60:c0:9c:d7:e2:af:c4:df:
88:0e:ce:f1:6e:e0:0a:7b:1c:a3:0e:8d:a3:2f:82:
7e:53:c1:58:c2:34:5d:de:1c:ed:c3:fa:e7:70:49:
71:de:3d:0b:ad:3e:a3:fb:ca:be:62:82:9c:35:9b:
40:58:78:bd:9b:c8:db:71:a6:0e:50:cd:dd:ef:b0:
81:7e:54:25:04:dd:b3:5b:e1:74:6a:c3:3c:b5:71:
0e:86:77:fb:b0:ee:23:8a:8a:41:47:4e:a2:db:27:
43:dd:c8:dc:58:84:f0:6f:4b:14:5b:e4:c6:ee:9d:
d5:61:11:f8:27:d6:71:e5:93:d8:4a:74:73:de:21:
5a:06:45:ed:92:3b:42:26:e4:4f:56:0b:be:81:b9:
a9:43:f9:54:a7:84:78:f3:9c:3f:45:e7:7c:74:ff:
86:ab:ed:7f:c5:d2:cc:cb:67:dc:14:79:ba:13:8d:
c3:e4:e5:9b:f4:0c:47:a9:44:64:f4:0f:41:8c:97:
e0:ab:19:f7:95:00:ea:9b:22:ed:da:0c:c3:f4:72:
b8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:59:1A:62:DC:78:B6:FF:79:91:6D:7E:6A:8C:42:A6:BE:5B:04:EE
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c6:1b:f7:70:23:06:cc:80:9c:e3:be:ca:fa:e2:07:4c:5a:
e0:66:e9:b3:74:ae:cb:6b:93:56:11:22:ac:74:c1:e2:b7:17:
33:90:69:e2:06:2f:76:d6:cc:f9:cf:79:a8:c2:00:00:48:32:
6d:68:31:9b:26:0e:58:67:17:8e:0f:32:4c:6f:e5:ff:74:5e:
4c:aa:af:c4:aa:38:cc:57:5f:e1:65:50:ed:81:5f:65:ff:6b:
24:24:5d:46:f1:e8:1b:66:53:ab:f6:42:88:a4:5f:7d:86:25:
c7:f9:b6:91:0c:bd:5f:69:f6:a1:ce:39:6d:02:79:2d:f5:c8:
fb:27:b2:11:d8:6b:c8:bc:65:7a:e3:1a:71:50:3b:c5:b0:f0:
e6:4a:5a:f2:00:9a:e9:26:fb:35:92:1b:51:4c:60:fc:b1:fd:
86:31:78:13:79:26:5f:f2:b2:ac:21:0c:f6:5e:13:1b:2a:ef:
3c:eb:6b:d6:97:ed:aa:b8:6f:54:fc:59:a5:a2:c8:37:79:cf:
26:1d:ef:5b:84:a0:84:f2:18:4b:2e:a9:6b:a9:7d:fa:c8:dd:
d2:ae:fe:fe:eb:f3:f5:74:b6:f5:06:9d:e8:ea:bb:5c:71:33:
42:7e:47:e9:95:c0:53:6d:f0:cb:ff:f4:7c:7b:0c:ab:f3:c0:
a4:58:14:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:40:46 2025 by rpki-client