Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: Z21vPpoRpz7toCPkRQeoyH5kZ3UrEBC7z1h8ubvFJzA=
Subject key identifier: 22:06:1C:79:1E:32:F1:A8:EB:47:C4:49:9C:F2:51:B6:60:7A:0E:53
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 019847ADE797FE7087537026C5B11EB062D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 17:00:36 +0000
Manifest this update: Sat 26 Jul 2025 17:00:36 +0000
Manifest next update: Sun 27 Jul 2025 17:00:36 +0000
Files and hashes: 1: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: fwGefT8TR+RmslovWCsXiCGAzRShu2Ejp+G4g8gOooo=)
2: WMejWLM-fXx9J5hQgJ4TNGxlL40.roa (hash: 9oO47gALmpiotO1VgFePsYnaYk2I9wrq424pEV3SiMU=)
3: n5VL-9G7-YZixQJP-BPKVSDqpR4.roa (hash: t+3M+svFb4/LG8WrDBM3x4yGiPVd0ez6gYqaJNLI3Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:e7:97:fe:70:87:53:70:26:c5:b1:1e:b0:62:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Jul 26 17:00:36 2025 GMT
Not After : Jul 27 17:00:36 2025 GMT
Subject: CN=22061c791e32f1a8eb47c4499cf251b6607a0e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:b3:dd:48:6b:8a:42:eb:83:0a:d0:a9:76:
30:e4:8e:55:91:e0:28:af:2c:4f:96:3e:45:8c:53:
79:ed:b3:e9:ad:91:3c:09:4f:0b:15:1c:81:14:9c:
34:de:86:25:d8:a5:17:9c:87:b4:d4:15:6f:41:87:
ad:94:af:cd:36:02:77:13:cd:10:52:bf:1d:a4:a3:
29:be:a8:ab:90:55:b3:3c:a8:6d:be:47:dd:21:e8:
03:70:1a:59:d8:32:87:bb:47:6a:99:5f:be:29:ee:
fe:8c:c4:2c:e0:b3:0d:98:c8:74:a7:2b:c7:c2:33:
ba:ff:8c:eb:11:84:0e:78:00:e0:79:db:a7:23:c3:
e4:64:5d:b1:b9:72:06:9b:2a:77:47:55:46:08:d6:
7e:19:e7:23:ae:b2:4b:e6:ff:ee:41:40:e6:15:9c:
f4:37:a7:82:f3:e3:5d:c6:49:a6:49:b6:2c:f8:d2:
d7:75:b9:e5:06:08:7a:93:c5:28:9d:04:87:e4:97:
7f:8e:a0:98:dd:42:63:5f:2b:ec:7a:e1:ae:a7:a6:
06:38:04:53:3d:9d:f7:b0:1b:3b:81:34:fc:5d:9a:
73:e8:73:cf:44:d8:e3:68:af:9b:92:f9:8b:49:e5:
10:b8:46:23:43:56:1f:51:f9:43:4f:2a:28:61:e3:
f0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:06:1C:79:1E:32:F1:A8:EB:47:C4:49:9C:F2:51:B6:60:7A:0E:53
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:32:50:f6:2a:80:3f:c1:c4:ea:d0:b1:cf:49:d8:bf:27:fc:
3c:8b:f1:df:08:d2:59:37:45:a8:d7:4b:66:6b:64:c2:8d:c0:
2a:6a:3d:65:9a:65:4d:05:7a:eb:1f:01:7b:da:c8:1f:b5:c7:
a0:84:84:90:d8:1c:47:1a:5c:40:0e:47:57:d7:1e:a3:8c:83:
10:1f:59:38:bb:05:77:87:a0:a2:25:a5:cb:54:74:2a:f9:e3:
5b:17:f0:3e:fc:b0:c7:c9:05:9a:4b:54:b5:d2:66:a0:43:d6:
9a:a6:75:de:39:44:ea:4c:cb:60:65:67:06:97:80:b8:20:10:
da:b3:6d:b1:0f:22:d6:f1:19:2a:27:f6:cf:cb:0b:e6:76:28:
24:45:f7:37:be:61:59:e7:62:cb:0d:f8:09:fb:52:d7:21:18:
bf:d9:51:92:26:48:50:25:9d:c0:b4:70:73:73:d5:24:93:6f:
0e:4c:e0:b5:79:4a:84:51:a4:3e:e6:a1:d4:5c:82:2b:49:99:
b9:7b:13:b3:67:c1:59:32:56:4d:61:09:b1:c5:b7:fc:1a:e9:
84:55:20:fb:77:51:0f:ca:f1:60:bb:9a:d7:8c:28:7f:c7:f3:
ba:d4:2c:64:af:eb:3d:38:72:1f:57:74:3a:8d:81:e7:fc:e1:
1e:66:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:47:37 2025 by rpki-client