Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier: BvwpIPSogO/uB4KmNKlMWVjIMxC1Y3Tx3ZIKYVrfBuo=
Subject key identifier: 96:13:71:1F:F6:78:83:7D:5F:AC:6A:FB:32:6B:8A:86:30:13:E3:B8
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 0198879F7B4F4C8D63B5479F80DE312DAFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number: 11E9
Signing time: Fri 08 Aug 2025 03:00:32 +0000
Manifest this update: Fri 08 Aug 2025 03:00:32 +0000
Manifest next update: Sat 09 Aug 2025 03:00:32 +0000
Files and hashes: 1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=)
2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: fpt72llnLviIQ7qPKS7iwI1OQdCRPFekx+cH0+kBZM0=)
3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=)
4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=)
5: 67A2CgJxemu3UONyMlCVAtsKdlY.roa (hash: xvBw7mNRlOl8XFOFSPthYphIDW4EGlwFC4zOhUwlCv8=)
6: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=)
7: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:7b:4f:4c:8d:63:b5:47:9f:80:de:31:2d:af:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Aug 8 03:00:32 2025 GMT
Not After : Aug 9 03:00:32 2025 GMT
Subject: CN=9613711ff678837d5fac6afb326b8a863013e3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:b4:04:f9:15:f3:35:cf:36:4a:6b:6a:07:
13:de:12:c5:8b:62:a1:8d:09:52:83:ef:7e:ab:4c:
a9:8c:9f:df:59:ff:5b:07:ed:9f:f5:6d:44:40:e1:
c3:25:21:1f:0f:d2:3a:ec:47:f6:8a:80:1f:c9:d9:
80:d7:de:73:3d:f1:ba:ee:8d:22:66:bb:47:a4:4e:
80:88:39:8f:48:5f:bf:1a:b5:41:a9:eb:dc:b9:2c:
71:5e:43:7c:55:7e:b6:6c:d5:0b:eb:9d:fb:fd:88:
f9:6d:40:87:9c:f0:6f:a1:f7:7e:8d:79:0b:00:18:
12:35:ac:b5:73:16:e5:80:08:d9:c4:bd:10:6e:b5:
49:eb:7d:a2:ed:25:ff:55:89:2e:14:0d:31:01:7c:
c0:e0:88:92:86:be:99:28:a9:4a:e3:63:e4:e0:15:
c4:dc:cc:f7:de:9b:64:93:7d:3c:d3:89:79:d5:1c:
c0:1a:37:90:fa:37:a1:8d:77:83:6e:6f:16:15:fc:
a6:4d:d7:60:1b:20:67:58:70:d5:1d:4f:54:23:59:
66:1d:d7:4e:1a:7e:b2:79:19:f9:33:26:73:6b:5d:
75:45:67:95:f5:05:03:36:13:64:24:5c:88:ec:8a:
d8:97:7e:67:63:ff:d0:3c:d2:a9:cb:02:b8:d4:67:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:13:71:1F:F6:78:83:7D:5F:AC:6A:FB:32:6B:8A:86:30:13:E3:B8
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:31:3d:3f:8a:a9:30:46:45:78:13:ab:38:c8:be:ea:7f:e8:
6a:9b:16:f1:08:ed:89:1d:dc:04:ee:a3:0a:60:8a:a6:a4:6f:
b8:23:74:7b:d6:5b:8a:99:fe:38:0e:64:68:8a:d5:64:8b:36:
79:a5:d6:5f:87:a3:55:67:9c:20:31:93:d4:92:5a:b0:d8:a0:
fc:4c:18:cd:f9:ee:d4:ee:41:28:5b:92:9a:f9:a7:6e:4f:ff:
fb:00:45:ab:69:4b:c8:24:36:a6:12:87:32:30:ba:08:33:f8:
2c:da:57:33:a5:f9:48:26:33:da:4a:26:8c:fb:1c:23:d5:82:
24:2a:b3:8a:50:8b:48:3d:2b:15:5a:e3:63:8d:3e:87:18:ed:
b8:1c:ab:d3:c9:f6:44:1a:18:31:6e:a4:5f:ea:57:84:30:cc:
ea:78:2d:3b:e3:37:a2:ef:62:3f:be:20:92:3e:9f:8a:82:06:
c5:9d:43:d5:7f:66:75:f6:e9:bd:d7:5f:6a:63:00:79:e8:0d:
3d:84:26:ee:a0:98:1b:d1:88:f3:f9:e2:13:e5:fb:50:a1:23:
b4:49:9a:95:d2:90:53:3d:bc:81:08:88:49:fb:4e:86:01:92:
f7:00:91:56:18:48:7a:f4:9a:dd:48:b1:ca:7e:16:9f:0e:10:
4a:a7:aa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:17:12 2025 by rpki-client