Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
File: p9nJ2x4fiGAXe__cWPDvzZm5as4.mft (raw, json)
Hash identifier: wjDlchsUuekqZeZUcIu4n+3DMCYhl8d+qfy23SYbWt8=
Subject key identifier: 9E:AE:DE:74:53:C3:DD:9B:BB:06:D1:52:23:8A:D1:43:C5:DE:40:C3
Authority key identifier: A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
Certificate issuer: /CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Certificate serial: 01984A41A5B22EB3BAF3B3306A0CA7789B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
Manifest number: 0DDA
Signing time: Sun 27 Jul 2025 05:01:12 +0000
Manifest this update: Sun 27 Jul 2025 05:01:12 +0000
Manifest next update: Mon 28 Jul 2025 05:01:12 +0000
Files and hashes: 1: lC2KQAOisVOwxCnTUOf6nl08y8o.roa (hash: /DfGXFX3mvJ80lD2tCLD0oWxnch4EP1FqZDjENG9stE=)
2: p9nJ2x4fiGAXe__cWPDvzZm5as4.crl (hash: 9HD04wr1wnEJPMaJ2KciheOgYU3wSdOV1Sfl66X6vfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:a5:b2:2e:b3:ba:f3:b3:30:6a:0c:a7:78:9b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Validity
Not Before: Jul 27 05:01:12 2025 GMT
Not After : Jul 28 05:01:12 2025 GMT
Subject: CN=9eaede7453c3dd9bbb06d152238ad143c5de40c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:68:a2:18:f2:14:7f:40:31:6b:9a:6b:c6:c5:
e3:36:42:bf:87:72:1b:36:a6:50:c7:70:c3:30:3e:
24:a8:a0:af:50:8b:c4:8a:e8:61:57:76:08:3a:c5:
5f:56:e4:cd:d7:89:7a:9e:2c:27:de:ac:86:04:ab:
b9:03:7e:13:15:e9:ee:0e:d4:54:51:c5:4b:f9:dc:
28:2a:7e:b5:aa:c7:e2:45:6a:f9:5e:7f:6f:47:72:
81:43:e7:91:0c:f7:38:c1:6f:9e:3e:d8:9c:fd:df:
32:cf:59:85:b1:42:cf:5c:79:26:fc:1e:4d:1b:d8:
55:94:a2:70:36:bd:63:78:2a:5c:30:84:5b:8b:7e:
1b:fe:5b:5b:84:f1:90:9e:16:8e:57:e8:d0:16:13:
f9:a7:ab:3a:e3:11:8e:40:8c:61:92:4f:c9:b5:0d:
9d:88:2d:df:7c:c6:3c:77:7b:d0:e6:7a:fe:fd:9f:
24:27:dc:61:8b:ba:aa:9d:08:13:c0:01:ba:72:04:
6e:c9:37:93:65:ab:05:b5:3d:6c:1b:be:32:6c:f9:
61:96:5a:3f:59:f5:87:9d:07:95:86:2b:16:07:ea:
fd:6b:f6:99:0b:f2:ce:8e:05:05:67:a6:49:0b:f6:
a9:af:54:9c:71:ab:04:42:44:05:27:77:75:97:5c:
39:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AE:DE:74:53:C3:DD:9B:BB:06:D1:52:23:8A:D1:43:C5:DE:40:C3
X509v3 Authority Key Identifier:
keyid:A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8d:33:23:78:12:3f:dd:05:4f:5c:63:e2:8f:ad:88:59:d3:
43:32:f9:8c:25:08:af:7c:1c:9e:e5:e8:64:76:b1:ba:3d:33:
02:f9:c5:3a:44:15:19:7f:c4:b6:48:be:fe:e9:20:56:a2:e5:
4a:46:6e:dc:75:95:e5:31:78:26:fe:80:b1:d2:e9:6e:3b:87:
cd:e9:6c:4b:d6:c6:c2:2a:ae:2f:3b:a5:37:76:ca:f3:57:df:
39:60:52:7e:de:3f:b2:2a:61:89:09:2f:82:60:ea:a3:63:ab:
04:88:24:10:de:16:8b:35:b6:ef:d8:46:45:9b:2a:68:ad:b8:
41:e9:65:aa:f1:25:b2:f5:29:c6:72:3c:54:19:f5:6d:6b:c4:
7e:72:8d:eb:4c:bb:08:ce:95:13:69:c4:9b:27:f4:71:1f:0a:
83:3e:9d:73:d2:f4:2b:2c:04:ec:f9:76:8b:50:57:58:cb:27:
16:4d:bb:60:92:a0:06:c6:c7:b7:48:f5:b8:59:c3:01:40:27:
8b:60:86:aa:e5:eb:fa:f3:5d:3f:1e:66:1c:01:e3:a6:2d:d3:
f0:72:22:0d:34:29:d3:72:89:59:3c:a0:aa:96:91:8a:3b:94:
29:4e:d6:00:d5:cd:35:ce:20:35:50:a6:60:a4:54:70:95:6b:
d0:8c:f7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:43 2025 by rpki-client