Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
File: 9-VkfNC39yK-1FafN7i_j5JTjPU.mft (raw, json)
Hash identifier: RxAiG+8yHUUv9hG23ErsW52k+QTUXvmWn3OYvqvkhaI=
Subject key identifier: 92:7C:72:B8:92:7A:61:9A:D2:57:D4:EA:65:BD:4B:42:0C:75:9C:6A
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 01984A419B0B87F25933C49141897596DD32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
Manifest number: 1223
Signing time: Sun 27 Jul 2025 05:01:10 +0000
Manifest this update: Sun 27 Jul 2025 05:01:10 +0000
Manifest next update: Mon 28 Jul 2025 05:01:10 +0000
Files and hashes: 1: 9-VkfNC39yK-1FafN7i_j5JTjPU.crl (hash: tF6GHqui3d1VTWOheM1biW3wc8FaJ1w5vulzfGSn6DA=)
2: DBhdVQnWbQeKdQzgQiCpHErXzhE.roa (hash: ke+PE6qJEQ9z2GmlNhQtn8qkPU8ewvFXiEh0aYxuqOo=)
3: q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa (hash: aaFqVy4+hGHKy39rpTWrEUIWgkLIuK6ZgSAREjkESF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:9b:0b:87:f2:59:33:c4:91:41:89:75:96:dd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Jul 27 05:01:10 2025 GMT
Not After : Jul 28 05:01:10 2025 GMT
Subject: CN=927c72b8927a619ad257d4ea65bd4b420c759c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:9c:03:36:41:8b:45:fb:4b:07:3d:ff:5f:
50:f4:0d:aa:a4:65:f4:af:3d:a0:d7:d0:62:86:ed:
64:ea:05:2a:b7:85:c8:3b:34:d0:56:dc:f8:95:29:
b6:b3:59:54:ec:b1:01:f9:32:18:a9:e7:3c:69:97:
ad:ed:d6:d2:d7:e3:7f:b7:08:71:10:0c:ee:ef:65:
e9:5e:00:a9:5e:e4:78:d4:c8:96:78:ee:65:72:61:
36:d0:34:8e:13:04:0c:33:b7:c0:ca:ac:b0:e8:aa:
a0:d4:d1:ad:ca:b4:13:27:d8:20:be:c4:d4:50:ec:
60:aa:b1:2d:f2:22:0d:62:c8:28:d3:bd:2e:3a:57:
93:cf:00:81:66:0c:93:7b:b1:b0:64:4c:4f:ce:e7:
1d:e5:f8:af:28:a0:fb:63:91:96:cf:66:68:c2:bf:
af:71:ed:e8:cf:cb:a2:ad:5a:98:5f:b0:cb:de:6b:
64:c5:9d:9a:e2:0e:d8:0b:3c:0b:49:61:39:a3:93:
5c:d8:00:a9:2f:42:b0:c3:54:75:db:00:d4:01:f0:
2a:8c:dc:0c:6b:fc:c1:a8:85:aa:d0:02:3e:94:f5:
d0:5b:2a:4c:dc:21:36:2d:18:ad:5e:19:1e:e9:66:
78:96:e3:4d:5f:97:a0:17:09:9a:66:91:52:d6:e4:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7C:72:B8:92:7A:61:9A:D2:57:D4:EA:65:BD:4B:42:0C:75:9C:6A
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a8:87:0c:27:a9:bc:dd:54:6e:a8:33:80:d0:50:aa:8f:a0:
b1:18:53:90:a8:0e:ac:5d:59:ce:ac:08:d5:d3:6c:c9:df:cf:
f5:c4:b4:88:b0:ac:06:af:1b:b2:94:2b:27:bc:65:66:eb:79:
aa:27:5c:75:ce:33:5e:ac:61:3b:87:a7:45:e9:ab:67:6f:84:
a6:e3:e9:08:95:29:f5:0f:84:a0:42:a4:85:40:3d:49:ce:53:
04:60:97:66:31:8f:83:bf:7e:49:e6:f3:85:7f:43:01:49:33:
94:eb:86:a8:87:cc:52:2c:13:1c:82:f0:d3:ad:01:e2:fa:bd:
f2:60:21:55:a6:f8:54:18:e6:5a:91:3a:bb:7f:6f:7f:2b:75:
2a:b2:7b:ff:c6:b7:83:69:44:06:c6:77:10:67:81:6b:a2:f4:
1a:a5:e3:05:96:2a:e8:f8:8d:96:65:40:eb:a1:02:c3:c2:af:
20:b1:13:46:e8:9f:db:e8:0c:4b:c5:43:18:c0:35:bc:95:8f:
0c:26:05:b0:71:40:59:f3:8f:7f:24:63:99:fd:45:0e:d9:0f:
3d:1f:8f:f1:5b:f4:aa:09:3f:2d:28:ac:8f:2e:39:56:65:9e:
fd:4b:29:c1:9d:87:96:5b:da:1e:9b:8c:c0:46:ec:d7:14:98:
6e:fd:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:36 2025 by rpki-client