Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: RoVzthD8inrKGRcxazwXtoJGp5WSy2AoCXTVqLusl6A=
Subject key identifier: C1:36:C6:D6:30:E2:B4:47:31:71:AC:F5:2A:04:13:FC:F0:BD:30:4E
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 0198462D583E43D02B4B4BCFE2C52C40D605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 08F6
Signing time: Sat 26 Jul 2025 10:00:33 +0000
Manifest this update: Sat 26 Jul 2025 10:00:33 +0000
Manifest next update: Sun 27 Jul 2025 10:00:33 +0000
Files and hashes: 1: 84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa (hash: UeaLHRP7oFc/d7B28fPSHAmNwBiXwzZTNmEOfITVZrU=)
2: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: KQPCpZ2tUk03pKoB0dtjpmekwuGG+ujf9sZcznst3eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:58:3e:43:d0:2b:4b:4b:cf:e2:c5:2c:40:d6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Jul 26 10:00:33 2025 GMT
Not After : Jul 27 10:00:33 2025 GMT
Subject: CN=c136c6d630e2b4473171acf52a0413fcf0bd304e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:1a:1d:7a:33:4a:47:d3:a2:ea:d3:23:b7:
23:dc:15:1b:e3:44:a1:63:ee:0b:79:62:d0:9e:72:
ae:cb:22:cd:49:31:c4:32:00:59:e0:4c:9d:4d:ec:
07:4e:a7:68:93:f3:67:d5:46:b6:58:8a:75:dd:f8:
c4:19:d0:81:8e:b3:a1:36:8e:36:a6:00:77:f1:d8:
fe:84:18:22:d8:6f:9b:c5:5d:f5:f1:69:00:05:4b:
3f:f0:06:e7:c9:ca:35:9a:66:82:78:b0:d2:c0:f1:
1d:71:10:f4:66:d7:dc:e8:98:fe:80:c8:e0:ef:5c:
74:9e:28:fa:09:3a:23:3b:15:5e:a0:5b:3d:70:bc:
27:93:1d:0f:68:59:ee:a6:cc:d1:ad:e3:26:d4:b8:
07:f9:73:b4:ef:85:06:03:64:53:f7:6a:9d:9b:55:
73:2c:27:8a:85:af:71:b5:46:4d:fd:0b:8a:f2:34:
c3:54:ef:8c:00:fc:7c:8d:26:3a:84:82:93:9a:37:
05:5b:5d:44:b3:7c:c6:30:cb:72:eb:65:f9:66:b6:
35:2d:2e:62:f3:02:65:80:04:dd:28:b3:76:ba:af:
cb:51:29:7e:b8:b7:b8:35:c7:ee:1f:76:cd:13:d9:
52:1b:b8:fd:b3:58:ef:71:82:f0:88:78:17:67:44:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:C6:D6:30:E2:B4:47:31:71:AC:F5:2A:04:13:FC:F0:BD:30:4E
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:a0:74:6d:b9:7b:d3:e8:43:6e:93:73:d3:98:fe:2a:92:66:
ef:50:e5:34:37:46:7e:ed:6f:2f:1f:c8:18:22:df:e9:ca:6d:
7b:6a:86:6a:8d:d2:3a:75:23:95:f9:98:b7:e6:99:f6:f6:6f:
be:08:82:9f:f9:e0:73:87:5c:a9:9d:81:36:56:b9:ae:3c:ad:
6f:1d:2a:bc:27:c2:02:1e:17:ec:28:34:c4:53:2e:2f:a6:35:
36:18:04:7f:5f:13:80:1b:49:a7:de:0b:28:d0:82:32:7d:94:
fe:54:be:85:be:51:cd:8d:ff:cc:5f:10:40:35:98:79:0e:1b:
ab:e2:30:5d:3a:d3:49:ae:fe:4a:5f:6b:bd:77:87:99:9c:b1:
f3:d8:b7:91:f9:d1:13:93:ca:19:3c:3c:1d:fb:01:e8:ea:09:
0e:e9:f6:b7:fe:11:1f:0e:81:0b:47:7d:a1:c9:f1:30:a6:4e:
6f:6c:27:3b:19:a5:f2:0d:9f:d2:64:76:a4:5c:8f:6c:4d:00:
60:58:91:71:04:dd:45:ec:d9:10:57:68:c4:16:aa:da:79:1f:
53:2a:c1:20:e6:f1:67:e2:bc:21:58:6f:ff:32:2f:62:86:92:
ad:2c:f5:3d:5e:2a:ab:33:de:e2:cd:f0:cd:66:c7:38:b2:c2:
ed:fd:09:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:46:23 2025 by rpki-client