Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: 4xzA6eFIJlG6QhvB672oS0C10EiSBAD0ecGzYL/JCyk=
Subject key identifier: 25:B2:14:FB:6D:3D:08:79:49:6E:FB:DD:50:11:5E:AC:5C:52:B8:3A
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 019827EC40D68C8D41078460C1A2BE5C58DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 1604
Signing time: Sun 20 Jul 2025 13:00:50 +0000
Manifest this update: Sun 20 Jul 2025 13:00:50 +0000
Manifest next update: Mon 21 Jul 2025 13:00:50 +0000
Files and hashes: 1: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: b0jcCaUDoJMjdj/KcLulwVjJ1HvPrln+KRwLMaA+EEI=)
2: DY7axdNUahmM11yaDw51VfAp67s.roa (hash: bUYyC3SF16Sa424fYOC0qhaN4vyFKANSqCH+D1gEZQg=)
3: HEoZmTdVM-DeFe9X3PrPHHx8iEk.roa (hash: 9udpTWaNqTHQ+GFwYOitrLQw23wqjYK6MW1sHvnpqd4=)
4: PrNUxz0yba76t8wY55c1zKXm_Oo.roa (hash: m1KBoMWL6Rj5bP0aLVgjFWVkvzcAuAcBVIFoqutIMt8=)
5: iO7A1owMbqCMA0Lg3ovjgVWh5Dg.roa (hash: nx9vqvzmG0weAt/3Wd6gNUhHUSRbH2clt0yaQ7fWpF4=)
6: oAbqR3kG7LoiZXxF1UQ_LftT7BQ.roa (hash: 5h2TCAddmyCEmv2EclM4C4a677ny0YxlmBdSG7ml6N4=)
7: vmadOBoOk6niwocbLQBsll2qRrw.roa (hash: zQDs58AuBVhnIjhnpftladMye3nflU9pDFBdocMEldo=)
8: z2wQNkzDkZfaAKh_ssLZfxbhYgc.roa (hash: ccA776YRey2wE5rLtAhOmx43QdG5Twqc3fRZfQPAbDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:40:d6:8c:8d:41:07:84:60:c1:a2:be:5c:58:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jul 20 13:00:50 2025 GMT
Not After : Jul 21 13:00:50 2025 GMT
Subject: CN=25b214fb6d3d0879496efbdd50115eac5c52b83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:db:e8:44:1e:e5:6b:ef:ba:c2:c0:ff:00:
c3:15:c0:5b:4e:8f:d8:f4:8e:90:e2:ee:a6:b0:75:
32:be:d1:2d:47:af:ba:bf:79:35:9f:8d:91:75:c3:
5b:94:22:5d:39:28:92:55:98:83:a1:ff:d1:83:62:
04:e4:12:9b:db:66:ea:55:07:9c:00:e1:84:2c:de:
51:00:64:92:4c:46:f4:4e:db:81:8d:6c:46:60:61:
38:eb:17:52:ae:4d:f0:e9:a3:f5:8b:7b:fd:ff:9d:
4b:ad:37:c3:89:99:fd:8c:ce:38:f2:31:50:b4:aa:
1a:c9:49:9b:94:fa:82:cf:14:ae:69:d6:b1:f4:d0:
bf:85:49:60:96:bf:c3:bf:90:18:16:f2:60:37:92:
48:ea:f1:9d:de:75:8d:d7:c9:a7:4a:c3:7f:fa:7d:
95:dd:4d:92:72:71:b2:67:44:bb:68:2d:30:e9:f0:
a3:f5:34:ae:c5:b7:f0:83:8d:d5:12:1d:57:d9:6e:
4f:60:78:15:7a:8e:8d:9f:d2:e1:1e:8c:aa:7c:9e:
0d:4b:0f:cd:3b:83:9b:ef:60:e3:95:f5:97:7f:c1:
6e:97:8f:c4:77:87:fc:8a:f2:ff:46:b1:0b:69:40:
d0:83:d8:6e:c4:ea:44:33:a7:92:73:a1:8c:0f:13:
c1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B2:14:FB:6D:3D:08:79:49:6E:FB:DD:50:11:5E:AC:5C:52:B8:3A
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:39:e5:89:26:42:d9:c8:b7:52:87:f5:c6:12:02:b2:b4:f2:
e8:6b:c5:1a:e7:17:c8:a0:89:d5:ff:51:b4:7f:7e:d3:25:e0:
a2:45:c0:60:30:7c:f8:b2:63:2d:94:94:c9:bb:17:de:2b:81:
db:26:25:95:08:2d:8e:59:22:d7:f4:a0:28:3e:08:ca:7f:53:
a6:2c:fa:3b:29:60:8b:94:0b:8b:4b:e7:91:b1:12:a5:45:69:
d8:e2:9d:93:16:c8:b0:3f:6c:3e:84:7f:7e:1e:76:20:45:c6:
84:c2:ec:ed:92:36:ee:92:4d:a0:c4:4b:5e:69:1a:3a:6a:75:
55:ff:d3:e6:a8:28:1f:98:fc:f9:e7:50:6f:32:ae:01:cb:50:
21:95:b9:51:7e:9f:34:28:80:3a:bd:41:b6:c3:ce:59:9d:4f:
10:42:67:94:82:e9:8a:6b:df:4c:75:4e:00:e7:ea:d5:c5:65:
78:25:ed:e8:ba:56:42:cf:3a:df:e6:0a:62:1d:49:74:e2:c5:
67:09:14:af:e5:7e:3e:f3:b7:d7:a0:d8:1b:e6:a2:bc:31:3c:
16:c9:be:df:0a:e9:7f:b7:4d:2f:43:c8:51:56:91:1e:94:a1:
25:12:af:84:06:50:92:1a:48:29:01:6a:0f:42:0f:c9:a0:e5:
f5:77:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:29:20 2025 by rpki-client