Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier: Y4NOXpxhRjxv4K20CNIy/qawgEkuaT7YzpnTd2lE0Tk=
Subject key identifier: 83:8F:AA:96:EE:A4:9D:2C:95:9C:DB:C4:76:DF:87:DB:F1:E6:21:4B
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 019831944765278646A9EADE4734DD2F9471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number: 0E0D
Signing time: Tue 22 Jul 2025 10:00:57 +0000
Manifest this update: Tue 22 Jul 2025 10:00:57 +0000
Manifest next update: Wed 23 Jul 2025 10:00:57 +0000
Files and hashes: 1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=)
2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: CJ2IexAo5NDlIHxy6sBFd8733jV887MLJ2fOHJ/s1KY=)
3: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=)
4: S5ZKnLfz4DstONEqZm_YmyZ8kvY.roa (hash: X0rSxal4LbSgFqA0+FsHMQ78+/EIGLIojbhDJzOesXI=)
5: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=)
6: VunL007YcgdB0SQwEVqZksZS8Fs.roa (hash: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=)
7: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=)
8: xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (hash: 9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:94:47:65:27:86:46:a9:ea:de:47:34:dd:2f:94:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Jul 22 10:00:57 2025 GMT
Not After : Jul 23 10:00:57 2025 GMT
Subject: CN=838faa96eea49d2c959cdbc476df87dbf1e6214b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e7:6c:82:02:2c:2b:e7:e6:ef:a6:2b:d3:e1:
95:c9:1c:ab:eb:53:99:9e:07:a2:b9:db:ee:cf:8d:
4c:36:cd:0b:cc:c7:a5:fb:f0:2d:0b:d0:05:25:a2:
45:39:46:f8:76:0b:bc:84:75:74:d3:eb:44:75:d8:
87:36:99:50:42:94:c9:57:c3:16:7f:0e:57:a1:ee:
63:16:e7:3a:69:a2:2c:36:44:a7:8d:7e:4d:0a:1b:
9b:86:f5:df:87:6b:0c:c7:96:ee:0b:a5:a1:de:79:
9b:21:36:ff:b3:35:ee:3b:d9:12:2f:4d:90:92:36:
f6:c7:0b:66:d7:32:a0:74:4a:11:16:ad:58:6b:9c:
0c:6c:04:b0:75:e7:5c:41:86:e7:c8:13:0a:a6:1e:
a6:72:92:23:1b:51:8e:28:ee:49:58:eb:ec:97:0a:
14:87:17:ef:5b:00:d4:ce:e4:c7:a1:d8:bc:1b:00:
03:1c:03:6b:c1:be:6f:90:bf:c9:0e:bd:99:4b:6b:
72:27:c6:b4:9e:89:66:09:8d:76:80:49:a6:13:6e:
58:1d:14:64:fe:28:b5:7a:ed:8a:56:56:18:2c:79:
e5:19:6e:df:c2:12:39:7b:11:f7:d2:34:5b:d3:d2:
0d:1c:d3:f4:52:35:57:61:c3:79:95:8a:60:93:b9:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8F:AA:96:EE:A4:9D:2C:95:9C:DB:C4:76:DF:87:DB:F1:E6:21:4B
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:32:84:27:39:8a:89:52:bd:f9:a6:d7:05:48:61:43:ac:3c:
a5:dd:d8:ae:52:a4:7c:ff:c9:00:21:0c:97:d2:fe:12:03:80:
3a:78:6d:89:43:0d:f2:24:b9:9c:86:52:32:3e:45:85:c3:24:
4d:46:f0:e1:46:af:93:79:6b:15:28:14:0e:ab:e0:6c:8b:d8:
b1:e9:c1:a4:4a:bf:b4:19:7d:8d:1a:c4:58:c4:13:33:66:a2:
41:aa:72:4b:ed:11:c8:bb:89:92:46:97:1c:23:4e:82:3b:77:
0d:37:f0:22:54:fa:bf:17:ec:cb:ad:99:8b:74:85:a4:70:b9:
38:45:46:85:c8:a9:eb:30:3e:fb:ec:40:5d:29:1f:87:c3:4e:
7a:99:55:65:ab:a4:7c:d2:df:ac:6a:cd:8a:c4:ad:ca:7a:35:
38:8d:58:6d:10:25:49:f8:ec:58:7d:10:27:0a:13:5d:83:51:
db:e9:94:18:8d:f1:eb:03:b4:39:66:9c:30:5e:a1:0e:18:26:
80:bd:88:6c:83:f8:20:31:5d:41:6f:fd:e2:63:cd:18:35:80:
cd:f0:9c:a9:a1:ad:73:41:2b:51:15:3c:51:1e:67:2e:a6:3e:
91:df:05:44:e2:66:27:ff:10:fc:ab:30:e5:6c:20:5d:3a:81:
a2:f6:71:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:12 2025 by rpki-client