Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: /EsIFReK735MmyjdK7PngnMeFEdWYvrFpdgJtHmYQY4=
Subject key identifier: 9E:C2:8E:53:AF:3D:73:EB:98:A3:2E:61:7C:2A:71:7F:7D:0A:FC:F6
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 019847E4DE5CCEA1852719FEE28D515CDF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0969
Signing time: Sat 26 Jul 2025 18:00:38 +0000
Manifest this update: Sat 26 Jul 2025 18:00:38 +0000
Manifest next update: Sun 27 Jul 2025 18:00:38 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: hin7Hc39H1uhiNzrJF9b06ufP0nG2mIpKxnDQ0LIemI=)
2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:de:5c:ce:a1:85:27:19:fe:e2:8d:51:5c:df:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Jul 26 18:00:38 2025 GMT
Not After : Jul 27 18:00:38 2025 GMT
Subject: CN=9ec28e53af3d73eb98a32e617c2a717f7d0afcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:00:17:cd:58:d2:79:df:06:6e:d3:da:03:49:
33:48:e7:da:24:df:e1:79:aa:a3:a7:ce:e0:36:43:
43:c5:8a:a3:78:bf:58:7c:70:56:4c:3c:f1:be:94:
6c:ec:20:5f:80:cc:d0:85:28:6e:5d:da:32:66:a3:
b9:16:31:cd:89:fa:e6:80:e2:93:94:aa:85:5e:28:
86:15:b0:91:f7:1a:69:2b:24:13:30:56:88:86:00:
d3:dc:9a:65:c4:53:9f:38:03:14:8e:1b:d9:81:3f:
01:5b:23:54:9b:e2:1c:fc:b1:3f:77:66:df:c8:a8:
fc:ef:ec:0b:a3:fb:72:d6:77:85:5b:8a:af:b7:d3:
22:54:b2:eb:6b:f2:f2:00:29:a3:63:8d:0f:45:6d:
17:9a:9e:07:13:d4:81:a3:6f:d5:8a:86:93:29:84:
09:e1:92:5f:35:49:d4:c1:f7:18:48:80:43:53:cc:
ec:56:59:c2:14:37:e7:78:33:de:42:98:be:77:f8:
13:f6:a0:10:02:09:77:4f:bd:f0:a9:e4:84:53:aa:
0b:d2:44:62:b9:3a:03:92:27:67:ec:90:a4:05:62:
34:d6:3c:b2:19:65:29:b5:8a:4a:ba:7d:95:3e:e2:
7a:0a:f5:99:0f:79:4d:2c:39:82:63:d8:d3:5e:5b:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:8E:53:AF:3D:73:EB:98:A3:2E:61:7C:2A:71:7F:7D:0A:FC:F6
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2b:f3:a9:d7:d1:fa:e0:c7:20:21:0a:60:a8:d4:6f:f2:00:
ea:58:39:ae:4d:0e:3b:45:1a:f9:55:58:07:40:37:b7:df:f8:
da:aa:78:42:5d:9a:c0:df:d8:43:c2:d7:59:8a:08:69:d9:24:
72:3a:a0:60:7d:86:20:46:ea:b1:7a:1c:09:b4:4f:43:17:8c:
3f:15:3e:ec:12:9e:a9:00:d8:24:5a:bc:bb:82:50:a0:bd:de:
a0:be:06:9e:a4:a8:91:b5:1d:77:88:8e:7d:15:21:5d:75:7c:
a0:8e:ac:49:45:f4:9d:2e:88:03:5f:0b:4c:1e:9e:9c:db:7d:
74:18:50:5d:49:c6:a0:43:ff:1c:bd:65:d4:57:3c:b0:d1:b4:
0e:af:50:62:e1:df:5b:c1:09:9f:95:6f:f9:55:15:42:0f:91:
2c:45:96:c3:33:14:57:c0:61:e4:f3:0c:a3:79:9e:68:8c:64:
a7:13:3e:16:5c:dd:e2:df:83:cd:11:ff:39:9f:61:a7:e1:78:
9c:38:c9:03:e7:7c:53:89:06:7e:22:e8:ca:09:29:5d:f0:32:
58:80:6d:5e:fd:7d:40:2e:36:e0:87:2d:f9:29:40:76:de:12:
6e:de:91:c9:35:f9:8a:45:71:71:ee:c6:1a:2d:9d:f1:96:44:
a4:d4:8e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:51:43 2025 by rpki-client