Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: k2UPnWeqMQRk409wK7BHrddIbe6kn6vvRa7dAXVHTxY=
Subject key identifier: 37:1F:68:99:99:BF:16:35:E9:43:35:13:79:2D:F2:BC:1A:47:F2:E1
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 01984A09F166EF4D26807A38E82E29CB1EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 133D
Signing time: Sun 27 Jul 2025 04:00:22 +0000
Manifest this update: Sun 27 Jul 2025 04:00:22 +0000
Manifest next update: Mon 28 Jul 2025 04:00:22 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: yAqKipToaCQo51t9nafQL2nzqH1KGJj+XfckoObmRPQ=)
2: VBSMUM2E1eY-HeRIXiGsI4i681A.roa (hash: 9hPqZnbB+hAnaLIqMz7J1BKYjhJ96B3SoRz8LPWNz7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f1:66:ef:4d:26:80:7a:38:e8:2e:29:cb:1e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Jul 27 04:00:22 2025 GMT
Not After : Jul 28 04:00:22 2025 GMT
Subject: CN=371f689999bf1635e9433513792df2bc1a47f2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:05:8d:5f:ab:c2:28:e1:23:9d:54:92:e5:
66:92:b5:3b:72:64:36:a3:28:15:c5:1a:3f:45:b3:
a9:d3:66:a7:45:55:71:58:a7:7d:f1:98:f3:9e:00:
85:8b:e3:9b:90:82:b1:43:4a:22:30:9c:f2:a5:49:
6d:e4:29:1f:d0:42:29:ec:b0:5f:e4:7e:54:ad:ee:
94:39:c0:9c:6f:9f:1c:35:ee:69:ec:cf:3a:19:f9:
46:e3:a2:51:06:9a:34:7a:69:6f:d1:84:c9:cc:05:
cc:cc:1d:12:80:82:ab:46:84:2c:e3:0b:6a:95:59:
9a:42:f8:73:f7:c3:83:23:d4:e6:66:72:cf:1f:1f:
d4:3d:82:54:12:0b:a6:da:c9:d5:20:da:a6:90:a7:
d1:e0:0c:63:17:4b:c9:93:4e:f0:6e:ee:3c:a0:32:
ac:d9:33:cc:9e:cb:a1:ac:41:e5:b1:6d:d1:a5:16:
20:04:a0:3f:f2:5c:7f:d0:15:e9:d3:d9:90:ae:65:
fd:1c:9e:7b:c4:48:01:a6:d5:9b:d6:f9:92:c3:a4:
a9:ea:10:c0:e9:0d:2a:08:38:72:f4:54:42:4c:83:
e2:c2:f8:79:3a:bb:fc:c1:34:e2:8f:73:03:75:39:
ef:46:04:df:b9:e7:1d:f5:60:5a:a2:85:b1:f0:2a:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1F:68:99:99:BF:16:35:E9:43:35:13:79:2D:F2:BC:1A:47:F2:E1
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:32:f0:6c:7c:92:69:b4:1d:8f:59:90:16:c1:88:c1:71:1c:
d2:cb:04:cb:47:33:c9:94:a7:d2:5e:e6:e0:4d:cb:34:97:65:
f2:3c:70:16:88:fb:95:b2:20:7c:c4:78:4e:20:3f:32:98:53:
19:3f:a2:b8:a2:49:38:3d:0d:11:2c:06:e4:2d:77:68:06:a2:
19:fe:fa:d9:b9:5f:fd:b9:81:6d:a0:f8:5a:f5:be:11:93:34:
91:53:d3:91:2a:a5:3f:fc:fe:13:93:16:82:7d:81:72:ae:34:
79:7a:96:05:ce:83:0c:a7:31:97:84:ae:62:b4:11:e6:8e:f2:
08:bb:83:f1:e1:7f:ed:bc:c2:49:26:c7:e6:0a:85:14:d8:c8:
c0:6d:c7:8d:78:95:49:c9:ad:e9:c5:5f:b7:81:ef:57:2d:ef:
5f:40:08:b0:d3:1b:79:c7:49:ee:83:ba:9b:8d:6e:f5:d0:17:
f0:df:e9:98:23:3b:7e:ac:fc:d3:9e:bd:69:10:db:87:f1:47:
bd:9b:93:fe:07:1f:bd:2d:80:a1:2f:12:e8:ad:85:01:09:be:
6f:c1:09:cc:55:2e:88:d8:74:76:9f:b7:7d:50:42:87:35:42:
59:ad:8b:1d:ad:f4:2c:a6:ea:5c:54:81:37:7b:d1:b3:30:dd:
c6:d4:cf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:24:18 2025 by rpki-client