Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: YNpyRFK2rV681PwT1AOVrj3GWgbt/vf9YPuVX7I4XXc=
Subject key identifier: A3:C7:A0:23:0D:C6:01:23:33:90:FB:F5:4D:7F:6C:54:26:A3:3D:33
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 01984A0A0C74FBB42E53B27AED70E0590C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 1592
Signing time: Sun 27 Jul 2025 04:00:29 +0000
Manifest this update: Sun 27 Jul 2025 04:00:29 +0000
Manifest next update: Mon 28 Jul 2025 04:00:29 +0000
Files and hashes: 1: 7Q18JYmAuxaMa6IHufbofG2Nif4.roa (hash: SgEEylWwu8UHfA3f6YmbRxIxeIe/WWwb7mO+pnXONBI=)
2: Z-qhy45K2zlM7WIh7yxwKFBjWYI.roa (hash: 23XRpBYe78gwQGj8rW9uI1A0myazk2hz/zj+cGkCS8s=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: jcxSNfLfeDUv+gzE78fPsT5Pkx3kZuIPn6Rg2fVOvm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:0c:74:fb:b4:2e:53:b2:7a:ed:70:e0:59:0c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Jul 27 04:00:29 2025 GMT
Not After : Jul 28 04:00:29 2025 GMT
Subject: CN=a3c7a0230dc601233390fbf54d7f6c5426a33d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8e:79:bf:b5:17:90:c9:83:ea:18:32:9c:e5:
49:fd:ea:76:93:67:73:df:db:7d:70:16:57:47:e9:
a0:23:67:18:a1:e6:b3:01:97:c7:fd:f3:9e:82:78:
ea:e2:da:ac:87:65:a0:2c:01:07:2a:85:a2:54:c8:
81:ff:d3:31:13:e9:72:b0:41:22:0b:bc:f1:33:71:
14:08:31:22:90:77:e1:98:8d:3e:51:51:e3:16:28:
e6:89:07:a5:4c:68:84:71:96:d9:20:df:e2:9e:f3:
fa:f4:59:13:f2:33:ee:25:93:6d:23:e5:2d:50:af:
b6:92:09:e6:0c:9c:50:43:94:e8:a1:9c:f5:d2:a6:
89:07:27:e0:2f:55:54:76:9f:cd:2d:25:33:8c:48:
c8:f2:4c:54:a4:f0:b5:11:0d:2c:a9:3d:96:29:93:
94:dc:04:87:8e:79:f3:27:75:ff:32:2a:cb:2e:f9:
9f:49:d7:4e:41:5f:10:63:24:ab:0a:60:72:4f:6b:
5c:ff:d2:dc:43:2f:a2:35:5b:66:e4:eb:ed:0e:fe:
ca:91:b0:a9:6d:24:9b:5c:96:9f:01:29:e3:18:4b:
40:29:ab:5a:2e:6e:82:86:d6:95:b9:d6:e0:f7:9b:
f8:a4:78:ca:0d:1d:9a:9d:fc:eb:c0:ee:e9:f6:ce:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C7:A0:23:0D:C6:01:23:33:90:FB:F5:4D:7F:6C:54:26:A3:3D:33
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:5c:31:21:7a:be:1c:58:25:5b:4e:a8:10:5b:94:c8:fa:a8:
63:25:42:c2:9a:1a:b5:54:f4:63:0d:4b:c1:65:10:70:ce:2b:
60:7c:3b:97:ab:4d:99:be:12:f2:5a:ef:1e:fd:31:6c:6c:a9:
ed:6e:1c:27:0c:28:6a:1f:a4:e5:d9:60:b2:ed:8e:07:38:d6:
7b:9d:3d:73:f7:5a:2c:4a:5c:74:96:26:3d:26:f4:be:66:2a:
14:63:59:47:5b:4b:01:47:ae:7f:e6:c7:b5:ac:96:e0:63:0c:
b3:1a:27:91:f8:c3:61:ac:9f:5c:d2:39:cb:0c:d2:38:dc:55:
d2:7f:e8:3b:89:b7:57:32:6e:bd:ad:96:04:da:a8:45:ae:a8:
35:bc:e1:24:92:84:13:9b:8f:cb:c8:0c:89:24:d2:c9:1a:a8:
16:d2:66:58:d5:ca:88:49:8a:90:ac:19:29:3f:39:17:66:f8:
c2:13:08:96:3d:1f:90:c7:45:1a:58:68:da:e3:b6:ed:07:30:
84:15:60:8d:24:57:73:0e:1a:1d:75:77:ea:fb:79:3f:67:b7:
b2:e0:72:65:89:e1:8d:e9:5e:4a:ea:4f:fd:77:8f:14:0b:a6:
df:78:42:7e:85:88:4b:7d:23:f7:e6:ab:38:b4:69:bf:4b:8d:
25:2a:ff:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:09:56 2025 by rpki-client