Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
File: 9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json)
Hash identifier: 7S1k/Tlio3W4x4N45+tEv1BltRCmIk6Fa5PuSYkSgMY=
Subject key identifier: C4:B2:64:16:F7:8C:11:EA:B2:8C:9F:17:FB:3D:DA:66:DF:D0:66:73
Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
Certificate issuer: /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Certificate serial: 019846D1FBDAEF706B8FDE9D1E19BDAD13D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
Manifest number: 10D7
Signing time: Sat 26 Jul 2025 13:00:23 +0000
Manifest this update: Sat 26 Jul 2025 13:00:23 +0000
Manifest next update: Sun 27 Jul 2025 13:00:23 +0000
Files and hashes: 1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: vxasnDY4Maz0cpIQYsSP/hmqhYaO7OfajrqJJEpKo8Q=)
2: xm2GnCrITkLspXymDcS4A7YJbbI.roa (hash: +DAgDZIg9Wj4wTdH4O9JnrjTmjk3rUCiBhMUo5eAXI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:fb:da:ef:70:6b:8f:de:9d:1e:19:bd:ad:13:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Validity
Not Before: Jul 26 13:00:23 2025 GMT
Not After : Jul 27 13:00:23 2025 GMT
Subject: CN=c4b26416f78c11eab28c9f17fb3dda66dfd06673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:04:ff:0c:bb:12:ea:39:7b:bf:ba:8d:1f:
34:77:ae:f2:ef:94:76:68:6f:62:c3:06:06:85:bd:
02:7f:c6:ea:89:17:27:81:a1:0f:ff:9a:12:a0:f9:
36:86:cb:1b:05:f2:c7:80:d3:54:59:a2:46:d5:7e:
47:cc:ca:e8:11:f1:f2:19:98:ba:01:30:10:9b:ff:
88:8b:a9:9a:5d:de:ff:42:f2:eb:7c:91:9c:96:4c:
02:fb:72:ba:4f:14:69:1a:ca:f2:a1:90:3f:66:dc:
b2:d9:3b:64:cf:b8:10:0b:2e:75:b4:a1:4a:19:b4:
e7:ba:c5:fa:fb:f0:b2:9f:25:7f:a5:4d:0a:59:b2:
89:bf:d1:60:db:fb:cb:e4:6a:9c:7e:2b:c8:a5:53:
4a:b0:23:36:99:63:66:39:41:1b:5b:bd:74:a5:70:
97:ee:d8:f1:6e:d3:45:18:b7:d1:41:43:b1:e2:49:
9a:e4:e6:a9:54:c0:10:25:9b:63:14:29:08:c4:2c:
09:86:8b:b4:5c:97:67:02:de:96:2a:ed:54:f0:17:
56:08:00:f7:f8:ab:31:c3:ba:44:2f:88:3a:b3:80:
8e:fa:ed:ce:5e:de:70:48:8d:8a:51:0f:64:31:77:
1c:b8:1c:ac:98:cb:09:72:fd:6b:3a:70:ce:92:0a:
78:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B2:64:16:F7:8C:11:EA:B2:8C:9F:17:FB:3D:DA:66:DF:D0:66:73
X509v3 Authority Key Identifier:
keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:34:6a:d1:21:07:81:b0:a8:5e:48:50:c9:7e:86:6e:e1:3e:
e5:f8:6a:48:84:b9:d5:fe:b5:2b:2c:b0:39:41:0d:f1:7f:e9:
15:16:4d:6b:d7:2d:c9:a9:eb:19:36:e1:b1:4e:9f:ea:f8:c7:
61:7b:af:05:5d:98:a0:c2:80:0b:c8:aa:38:c9:7f:51:aa:28:
92:11:27:71:91:d4:50:c3:fa:00:ac:48:c4:d2:5e:ee:80:3c:
f7:30:0d:90:65:52:36:33:e3:ce:b1:38:1a:12:8b:ea:9c:a9:
ab:55:89:09:e3:54:92:a7:01:96:ed:2d:c1:51:6a:d3:21:02:
ef:d1:5e:be:59:2e:31:29:97:62:f2:3d:22:f0:9c:0b:b9:ac:
3f:cc:8b:09:70:b6:10:f4:9a:9f:e4:fc:28:e2:1a:32:cd:5d:
9b:2b:40:94:9b:f7:3c:55:6e:eb:9f:9a:fd:80:2d:e2:85:b0:
7b:7f:ee:f1:9e:1d:06:fc:65:61:f2:72:3e:53:54:4a:0c:25:
51:10:f4:58:6a:2f:ad:93:7f:af:29:ac:3c:a1:85:6a:08:0d:
33:a7:33:95:47:3d:12:cb:82:f0:71:3f:98:2a:1f:92:ed:a8:
58:cf:f5:64:af:ec:07:17:27:04:13:7d:0c:4d:72:b9:d9:ed:
b0:bc:5c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:00:58 2025 by rpki-client