Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier: /RsDe+AlGYqPsygKJt8HfOBn4Oot6qmPVn54AmSrO18=
Subject key identifier: F7:87:D7:14:13:62:8D:5F:A5:8D:A7:B3:79:A5:A1:D4:0C:81:E2:FA
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 0198499BD492B488CD5AF5962D11A745DA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 02:00:05 +0000
Manifest this update: Sun 27 Jul 2025 02:00:05 +0000
Manifest next update: Mon 28 Jul 2025 02:00:05 +0000
Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: y5cvF8lKN4l07N/1O+wkYOdU+MW6EtDEw8WIHxIUZjk=)
2: liKr9r8FMDweCFSU14hBTeBiJGg.roa (hash: yTAfLgiLewRGMW9BR3bDVbC2pPmowcN0vbDNQIsIUcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:d4:92:b4:88:cd:5a:f5:96:2d:11:a7:45:da:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Jul 27 02:00:05 2025 GMT
Not After : Jul 28 02:00:05 2025 GMT
Subject: CN=f787d71413628d5fa58da7b379a5a1d40c81e2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:07:31:c5:5b:df:c4:18:95:bb:25:bd:ed:
78:91:e8:74:93:d1:45:79:ab:06:d0:b6:93:75:4c:
73:85:31:d1:86:e5:c7:66:79:7e:3e:0e:d3:c2:00:
2a:9b:d6:a5:71:da:ad:f1:1b:74:a8:8d:8e:04:db:
75:63:fe:30:0a:f7:63:ff:4c:fa:70:21:3a:fb:54:
2f:94:8e:3c:7f:9d:50:54:52:5b:9a:e9:1c:2a:8b:
80:57:e9:88:69:f5:d5:34:93:e6:d8:76:88:35:5e:
20:89:c1:95:6e:59:f4:c6:53:0c:83:b0:c9:ef:69:
0c:9d:20:ee:e8:56:08:b6:c3:d0:10:3c:47:3a:f8:
bd:e1:fd:78:b4:e0:ba:ad:25:99:6f:f1:85:e4:20:
55:8b:b6:f9:f4:39:2f:68:8f:c0:36:5b:4e:52:cc:
a2:3f:6e:a2:81:25:42:49:48:08:f3:49:68:3f:aa:
a5:5d:48:d1:f6:df:c0:d6:7d:90:75:9b:6e:bc:0a:
1b:3a:fa:2d:df:71:a0:0d:4d:33:ad:c9:63:7b:15:
1b:84:94:16:ba:da:96:8e:37:d0:d2:94:47:93:a1:
3b:80:9e:4b:aa:06:26:bd:d7:1c:f0:8d:5d:e8:ab:
70:d9:1c:06:a4:c9:17:6a:fb:b5:2b:f8:9a:b6:f6:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:87:D7:14:13:62:8D:5F:A5:8D:A7:B3:79:A5:A1:D4:0C:81:E2:FA
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e6:d2:ef:e8:67:b0:03:54:8a:27:69:78:c3:11:8d:77:39:
ee:26:13:95:b5:51:da:3d:1f:6c:2d:07:36:9a:91:79:b3:c4:
08:e9:c6:0e:7b:dd:9a:50:02:e6:84:70:48:35:e2:bf:f5:3e:
ef:52:5d:9f:fe:42:b4:b6:99:47:de:51:8b:83:1c:30:93:49:
dc:91:df:ab:19:ff:8a:71:eb:66:79:48:cc:8f:41:06:58:b8:
a6:cf:53:bb:f1:f2:fe:1c:c1:5d:f0:03:33:13:a3:ef:c1:35:
06:f9:b3:ef:7c:a9:5c:0f:62:62:68:f7:f2:04:1a:b2:1e:b2:
d2:5a:ec:6d:be:a5:ee:54:c1:2b:dc:5f:cf:76:26:1b:bd:c8:
14:45:86:b7:d3:e8:01:26:1c:83:e9:73:e3:e7:e8:26:a8:a5:
39:94:07:df:76:5f:e9:ba:14:e1:44:5c:d6:f6:48:e6:58:ce:
0a:48:3c:26:7a:e9:d9:6e:60:ad:45:f0:fe:26:d7:3d:30:5b:
4e:08:0d:e2:b9:ec:a6:f5:b1:17:5f:c8:c1:11:e9:b4:17:c4:
7f:5a:9e:1d:94:79:fc:2b:22:60:6c:75:1a:cc:a4:7d:93:62:
48:07:da:bc:76:8a:4b:cf:29:48:f3:38:a3:68:d3:c3:13:7f:
b2:9a:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:00 2025 by rpki-client