Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json)
Hash identifier: 7M4v7MYA4N/6CkzWBHS9p7kjWaM+//zKwuQxicrB/ww=
Subject key identifier: 75:96:C1:50:35:73:6F:05:C7:96:7F:1E:40:E9:E4:83:85:29:76:98
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial: 0198477866332C25135357FB71567B416501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
Manifest number: 0AF4
Signing time: Sat 26 Jul 2025 16:02:09 +0000
Manifest this update: Sat 26 Jul 2025 16:02:09 +0000
Manifest next update: Sun 27 Jul 2025 16:02:09 +0000
Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: gDYYruA4aBODvQE6ZiyE365+HwQkphcAaxQXB+pfipQ=)
2: ziQt4Au1b87EcX3IQE4F3MWkDm8.roa (hash: KUoOZI3FZormf07wPCHQ5jctubRO3hNmnfHFtLKB4fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:66:33:2c:25:13:53:57:fb:71:56:7b:41:65:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Validity
Not Before: Jul 26 16:02:09 2025 GMT
Not After : Jul 27 16:02:09 2025 GMT
Subject: CN=7596c15035736f05c7967f1e40e9e48385297698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:6c:10:b0:d0:79:58:a9:73:d9:7d:e9:47:
39:ca:c3:60:8e:ab:99:78:2b:a5:00:67:62:a6:85:
44:43:67:e5:49:59:a0:90:73:68:54:2c:39:5c:f7:
92:e4:88:aa:e0:39:46:de:55:03:84:70:8c:09:49:
17:fe:b6:7a:71:0a:0e:72:06:fd:17:ff:80:70:b6:
c9:06:df:1c:9a:51:78:3b:a4:ee:6e:f6:f7:40:bb:
b9:4a:57:d7:9a:9f:f6:79:f9:05:b4:2f:4f:df:d9:
8d:c6:c0:35:dc:19:a4:4c:dd:63:f5:8f:35:31:ca:
7c:ba:06:81:1f:e9:f2:23:b3:c2:36:0d:c5:8f:0e:
8e:60:fb:e4:67:20:d0:40:ab:94:75:1b:4f:50:c8:
b7:2b:c9:08:05:e4:7d:cc:88:44:8d:2b:68:23:6a:
05:39:07:83:8d:9a:63:53:4c:1c:64:d1:cf:01:45:
f2:47:00:d8:52:ca:24:bc:1f:fa:3b:35:70:4c:bf:
b2:90:3f:52:25:0b:19:7a:ca:52:83:be:61:05:63:
a9:08:7e:10:64:ef:9a:60:e2:bf:1c:c8:df:ff:ff:
fa:cd:00:cf:74:fb:c6:0e:15:18:e9:b7:88:18:f7:
97:d5:52:47:9e:9f:5d:ff:27:cf:a3:e5:49:d7:89:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:96:C1:50:35:73:6F:05:C7:96:7F:1E:40:E9:E4:83:85:29:76:98
X509v3 Authority Key Identifier:
keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ca:ac:64:ce:92:fe:72:7b:bc:12:62:ab:9f:6c:19:69:85:
3e:60:fd:75:60:5f:81:bc:37:c5:56:76:63:4d:ec:ef:b4:a7:
90:ad:b9:89:d1:a1:b6:0f:cf:f7:6d:e0:9c:46:a3:4b:66:6c:
12:ef:55:31:2c:93:69:0a:ec:5d:6c:01:5e:d4:9f:46:51:78:
22:28:90:55:e4:17:c9:b4:ac:7b:fb:f8:36:0b:92:dd:a1:27:
89:fb:c1:51:c5:20:ba:fd:1e:3f:d7:ec:1e:1c:a4:a5:7b:5e:
0e:4a:5f:dd:16:30:aa:0c:a4:41:c4:f6:a8:f1:05:a2:bc:5f:
dc:69:dc:d4:25:4f:95:5e:95:15:b5:25:e3:6f:ff:b8:95:4e:
5f:9f:93:44:f1:17:b5:d5:0a:2e:e4:4a:9b:63:70:af:d2:c2:
e7:b0:fd:00:a1:29:52:14:c3:9e:ec:b7:64:6b:c9:b7:f9:95:
3b:78:78:07:e0:af:d1:cd:8c:8b:8d:52:3d:b0:50:58:64:55:
22:9e:d0:9c:f9:c3:21:75:99:47:a7:5b:12:8d:fe:b6:db:ed:
b7:ae:1e:ad:8d:e2:6d:da:84:19:8e:5a:10:3e:87:fa:0b:e3:
a7:56:9e:c1:ee:b8:7f:4f:bd:5e:a5:d4:53:d1:8e:c1:14:2e:
6a:50:54:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:57:51 2025 by rpki-client