Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: ORgPJ8qBbYuhcl0+7uDzvmM+2KFkhwT96Oqv3cD8Ef8=
Subject key identifier: 1D:CD:AF:3B:C3:64:15:11:BF:B9:3C:26:05:41:6B:C0:85:EC:8A:08
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 019854FC63C911D699D520EF8DD0EDF636EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 0DFC
Signing time: Tue 29 Jul 2025 07:01:23 +0000
Manifest this update: Tue 29 Jul 2025 07:01:23 +0000
Manifest next update: Wed 30 Jul 2025 07:01:23 +0000
Files and hashes: 1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: 8XPNxdqcKS/qPWd0/9dbYcay8Psc54eALb2x2I+joGY=)
2: _0wH1BRcgc6tfF99TwNnC3iQ1pU.roa (hash: O+Zelc4oaCgFlSMOLR6IXR0OWFyZm1W0ImLAmE3cggg=)
3: igkLmqGvdo3ZptL2OBtAT5tgBr8.roa (hash: JNS1dghL0HEbj9Q46she80UtZ72vLWiMcXMi6xfr/RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:63:c9:11:d6:99:d5:20:ef:8d:d0:ed:f6:36:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Jul 29 07:01:23 2025 GMT
Not After : Jul 30 07:01:23 2025 GMT
Subject: CN=1dcdaf3bc3641511bfb93c2605416bc085ec8a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:91:9a:77:35:97:05:89:70:eb:5a:11:79:
a6:e5:66:e9:b3:b9:f2:96:ca:2a:95:45:cc:93:2f:
8b:a2:ea:27:69:1c:8e:74:0a:a4:63:47:53:af:f8:
65:d2:cb:05:eb:84:8d:2d:d4:7f:01:59:84:b9:39:
8c:48:72:38:94:72:1e:4b:a8:4d:ad:79:3f:88:bb:
14:ae:ae:77:29:c0:66:db:cf:42:e5:d8:ed:fb:90:
7c:ed:51:ab:44:93:78:3b:30:a2:19:49:60:5b:0e:
0a:e9:1e:55:1c:53:fa:34:b7:ba:07:fb:5e:69:c2:
de:b8:3a:de:38:4c:4b:6c:71:77:7b:d2:ce:59:8b:
cf:a9:e2:3c:9d:0f:bb:0e:24:42:53:63:c7:30:3f:
d6:36:9a:48:49:45:35:3c:6a:cd:24:ef:99:de:9d:
6a:ba:76:e9:bc:4d:98:9e:6f:5a:06:6f:f2:1e:30:
51:74:9f:1e:8a:3b:8f:ea:fa:d1:d5:8d:40:21:1d:
83:64:8d:0f:30:36:08:f1:d2:9d:68:8e:ce:59:f1:
e0:ae:d3:9d:9f:a8:46:bb:6b:2c:35:59:08:3b:c2:
07:cc:82:32:03:06:07:1d:91:d4:8f:c5:70:b8:99:
e1:fa:63:f5:c9:ff:24:82:12:5c:81:4c:a2:04:1f:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CD:AF:3B:C3:64:15:11:BF:B9:3C:26:05:41:6B:C0:85:EC:8A:08
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:78:10:17:c8:d1:98:3c:2a:13:8e:e3:79:66:c8:da:0f:c1:
81:14:83:3d:6a:07:6f:3d:38:5f:41:21:bd:23:5a:d1:62:da:
e6:ca:8c:79:02:df:ad:6a:32:d3:64:c8:76:e4:20:c0:8c:9d:
6e:45:5b:2a:fb:c0:3d:77:bc:57:dc:40:c7:3d:86:ca:89:10:
a4:85:5a:b5:a8:43:f3:a2:bb:a6:7a:29:42:00:c9:d9:c9:92:
80:04:d3:87:fc:d4:3d:66:95:d9:af:7b:7c:41:b2:80:6f:c7:
21:e2:c6:88:95:5f:00:be:a1:b2:69:e3:24:b2:5a:2b:12:8f:
17:6c:fc:dd:1e:34:84:0d:3b:23:bd:ad:58:ce:a7:2c:97:c4:
99:a9:26:d9:7b:17:5c:c8:6d:00:ee:10:98:ce:01:ba:c0:03:
bd:b9:17:65:43:5f:5f:ad:1e:c0:ec:99:db:0a:de:20:d4:bd:
38:b1:33:61:e6:0d:83:3c:eb:ce:fd:7b:fd:df:8b:bd:c6:b3:
09:98:32:40:31:76:b1:ec:82:aa:6b:bf:c1:38:04:dd:20:2f:
98:97:2e:1b:ba:a5:ef:5f:ca:d6:18:f3:f2:b7:97:1b:c6:ab:
0c:e3:6e:ba:63:8b:25:89:ce:82:65:04:39:b4:00:e1:b4:0a:
0f:e4:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 08:51:14 2025 by rpki-client