Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: 7OA/cK+o3XTCt4fzAy9+5IRKaDrUnkPH+uFkBq+6cZg=
Subject key identifier: 20:70:7B:E0:BC:2C:94:7D:5A:82:50:D5:2F:40:7B:4E:9E:03:91:E3
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 01983A5FE2835EAE438AE61EE323DBE3B073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 05B0
Signing time: Thu 24 Jul 2025 03:00:19 +0000
Manifest this update: Thu 24 Jul 2025 03:00:19 +0000
Manifest next update: Fri 25 Jul 2025 03:00:19 +0000
Files and hashes: 1: 67zW8t21om1pTXvyuagS0QWX12s.roa (hash: arwG9XkQ/+2dVagELL/zq8/mCR4dYaym8bqyA1sBk4A=)
2: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: aE/bNi0RS6BHn0GXcWgeScY04N2/y4fQotlRn2cdjxg=)
3: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (hash: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:5f:e2:83:5e:ae:43:8a:e6:1e:e3:23:db:e3:b0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Jul 24 03:00:19 2025 GMT
Not After : Jul 25 03:00:19 2025 GMT
Subject: CN=20707be0bc2c947d5a8250d52f407b4e9e0391e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:0d:72:29:b5:00:28:46:60:e8:b2:9a:c1:
6d:57:b5:08:e4:9c:f4:12:f2:5d:c8:2f:f9:ab:e0:
af:04:01:dc:ea:a4:49:33:ef:4d:56:d8:74:e7:d9:
ec:0a:9d:e1:87:c9:ae:2e:d2:5b:3b:57:32:15:74:
aa:e1:a5:2e:60:e7:c2:10:dc:b0:53:d3:2c:24:58:
6b:87:0d:5f:89:40:1e:f2:64:1f:75:a5:b2:4b:d0:
0b:ec:e5:fe:39:05:8f:b7:f2:aa:fa:7d:cf:f1:ef:
00:1c:f1:b2:14:ee:35:75:99:aa:d6:b0:75:7b:a2:
a5:d5:03:1d:50:15:16:50:24:7d:81:cc:2a:88:90:
d1:28:1e:c1:d5:9f:56:53:93:26:79:43:03:40:19:
2c:f5:a6:07:71:30:98:e2:df:e4:80:f7:b2:e9:a0:
91:a2:de:1e:c4:d2:4a:84:6c:b1:74:9b:6b:06:af:
12:f6:16:fa:3e:a6:52:d2:97:8b:58:05:03:b3:a8:
9b:bd:67:1d:49:f6:81:b8:f8:7d:09:ee:f4:f1:9f:
68:ea:42:4c:cd:21:c3:45:d3:f5:81:05:a0:d0:cc:
ef:dc:ea:fc:39:ab:96:e1:81:95:d8:e0:bb:f0:a0:
45:7c:ea:28:37:6f:d7:37:ff:a8:1e:4a:1a:99:f0:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:70:7B:E0:BC:2C:94:7D:5A:82:50:D5:2F:40:7B:4E:9E:03:91:E3
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8b:63:92:c4:34:98:91:df:7e:49:24:1e:d2:51:85:95:3f:
90:ef:79:cc:49:9e:c6:02:fb:56:64:13:c7:6b:3d:7e:ca:1d:
59:95:e6:41:e8:a1:1b:95:b9:00:6d:a5:1a:63:f3:93:1e:1e:
07:d2:2e:29:b9:c1:6f:a2:2f:35:ec:dd:cf:ab:9e:3a:cc:d2:
0f:ce:ac:13:82:89:e9:11:e6:1f:95:61:51:6e:38:54:cd:72:
34:db:8e:9b:c9:d1:ca:8c:ef:93:f4:24:05:d7:95:ac:8e:e4:
7c:11:87:31:60:9a:e5:e0:f8:5d:0c:cd:0d:04:30:69:da:a8:
dc:84:ff:4a:56:b7:ce:6e:17:82:13:35:61:22:c2:e0:a9:83:
b8:20:4f:00:34:0e:2b:62:3e:77:46:0d:89:8c:9e:11:a2:60:
ab:fe:26:ed:0d:f5:9b:7c:f0:04:32:02:41:c5:07:90:43:3e:
13:e4:00:d2:e8:31:94:d3:8f:38:d9:e0:b6:53:bc:98:22:9b:
c3:d3:a7:45:db:86:cc:24:55:5e:8a:70:8f:ab:86:91:20:a4:
0c:c6:de:65:d7:13:98:ab:75:20:30:ea:78:9c:82:ad:68:7a:
ba:78:83:bf:45:47:0f:c7:46:a7:5f:58:40:e3:7a:8b:9c:66:
81:b4:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:57:30 2025 by rpki-client