Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
File: 9Is_DGqHwEW9z_q9kA24iSvnAuE.mft (raw, json)
Hash identifier: 2qiE03DIhBh8y6qZSWeDMMdNeJKzXbTykpdhmhhH0wY=
Subject key identifier: 48:B2:52:89:FD:CD:0A:FA:CE:8E:6E:03:C5:A6:36:36:7B:39:DB:39
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 01984C2F71C05E2C2096E970DF9418E49222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
Manifest number: 160A
Signing time: Sun 27 Jul 2025 14:00:34 +0000
Manifest this update: Sun 27 Jul 2025 14:00:34 +0000
Manifest next update: Mon 28 Jul 2025 14:00:34 +0000
Files and hashes: 1: 9Is_DGqHwEW9z_q9kA24iSvnAuE.crl (hash: +I/iLcZCYIO9Eb7NIMAbdQypiNncs7rUhFDeTT6EFtc=)
2: Hg9ZafaXQ8rLTSt-HMnDH0lT2yU.roa (hash: 0HTHXkqvlWJxm74CgwKZLUkDjsOUoGNMgHyD7nKaILk=)
3: lPxrJNzTmXryV2F51IkQV9qfvk8.roa (hash: XwWZCOkUNT19TkGVL4DD1MLeNhROccVqsb63RsLA8Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:71:c0:5e:2c:20:96:e9:70:df:94:18:e4:92:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Jul 27 14:00:34 2025 GMT
Not After : Jul 28 14:00:34 2025 GMT
Subject: CN=48b25289fdcd0aface8e6e03c5a636367b39db39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:29:21:82:17:11:3f:46:df:a4:3a:53:f6:
ff:a3:70:c6:c2:bb:da:55:ff:37:74:12:e9:0f:67:
50:eb:e7:79:48:c7:c2:5d:44:19:53:7a:7d:a8:78:
5f:bc:a3:1d:ea:f0:22:b5:48:78:13:66:33:fe:48:
f8:75:51:85:a3:c8:2c:e9:ec:f5:8d:25:d3:7f:dd:
29:d7:ae:61:cb:8a:4d:06:85:82:1f:f2:e6:a0:0a:
26:1e:fe:8f:36:94:52:a4:91:e6:19:d7:d0:86:18:
04:e6:77:c4:a8:f2:5e:3c:9a:6e:64:60:b7:01:f5:
6c:07:85:67:43:b2:e9:eb:90:8d:59:20:03:42:d5:
b8:3f:ea:f5:44:5f:1c:d1:6a:15:c5:40:68:c8:c1:
69:52:71:66:90:22:5f:0a:1b:3d:cb:5e:91:d7:14:
bd:2f:89:ae:71:16:cb:37:53:f1:44:1b:46:5f:36:
80:5d:3f:da:ef:69:31:a5:58:06:77:3a:d6:7c:b4:
4a:9f:6e:a5:6b:29:f1:86:53:fe:38:1c:dc:b2:9f:
3b:f4:76:99:37:3d:99:0b:80:4e:f7:fc:d6:f7:05:
a6:7c:28:10:88:d5:98:05:ff:55:02:c9:35:de:f6:
f3:bb:59:aa:09:da:68:b2:30:fe:19:d5:38:66:a2:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B2:52:89:FD:CD:0A:FA:CE:8E:6E:03:C5:A6:36:36:7B:39:DB:39
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:87:04:26:b2:03:f4:a2:58:a5:05:cf:3a:dc:a8:70:8a:ac:
5c:d3:f9:1c:33:88:c4:75:52:7f:f1:9e:80:c7:18:89:99:93:
30:be:2b:ab:80:00:7a:19:c5:55:81:95:7d:d0:13:d1:e6:47:
9e:c7:e5:d9:79:7f:e4:05:a7:26:e5:be:d4:e8:29:7f:e5:e3:
ea:b0:21:d5:1b:0c:11:b8:a3:f5:24:d1:20:7f:82:58:6e:69:
e2:c3:97:42:a6:bd:7e:68:37:7e:20:68:67:f7:78:90:00:82:
10:f3:c3:0d:05:3f:56:23:c1:e1:95:3a:dc:78:57:89:5e:98:
b2:b8:f0:0a:81:e0:20:8c:d8:48:36:b5:51:97:4f:7e:14:16:
cb:5e:98:89:71:16:1e:bd:fc:89:96:73:27:1d:0e:e0:9c:3c:
13:7f:c8:50:70:5e:ca:61:40:5d:0b:2e:77:e0:ce:a0:6c:2e:
15:1d:58:09:46:74:e2:7a:ec:74:3b:48:ae:56:1f:0d:71:07:
f7:ea:7e:a0:cd:4c:9b:a1:9c:29:c9:b0:ac:be:04:89:69:55:
52:8b:4e:71:46:fd:a6:d1:bb:df:94:80:a0:c4:1c:9b:cc:01:
77:f1:d0:0b:f4:a4:3a:6a:65:8c:57:5f:5f:15:53:4f:f3:97:
2a:42:3a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:02:59 2025 by rpki-client