Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
File: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft (raw, json)
Hash identifier: r2WxTbYwszgobAPxVhJTwoNfeWrtTQAKcejalhj2uRo=
Subject key identifier: AD:AF:34:DD:47:EB:09:D7:36:D4:D4:41:7C:5A:B3:68:C9:C1:A8:40
Authority key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
Certificate issuer: /CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Certificate serial: 019840CFA0510EF140102EB521D7837F2FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
Manifest number: 021F
Signing time: Fri 25 Jul 2025 09:00:05 +0000
Manifest this update: Fri 25 Jul 2025 09:00:05 +0000
Manifest next update: Sat 26 Jul 2025 09:00:05 +0000
Files and hashes: 1: 862AzXPpO4q0TZw2prtOswI6C3U.roa (hash: UvMXTudocwR1LdtSYifhkjBcDLnzk1IebtQXMqpmBY0=)
2: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl (hash: eLZnHQFrwkRCr3TFbr7Fd1Yy4nxt6xiXvqvD6TbQWnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:cf:a0:51:0e:f1:40:10:2e:b5:21:d7:83:7f:2f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Validity
Not Before: Jul 25 09:00:05 2025 GMT
Not After : Jul 26 09:00:05 2025 GMT
Subject: CN=adaf34dd47eb09d736d4d4417c5ab368c9c1a840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:16:63:08:c8:15:87:5d:3f:fe:4e:07:1c:
6c:c1:41:8b:8d:47:f0:c0:62:43:b8:a9:6d:0c:3d:
31:5d:f0:e3:a2:2e:20:22:11:d1:b8:dd:8d:34:03:
a4:26:ba:a5:39:03:f1:91:bc:3e:a4:5c:db:54:46:
e6:8a:6c:0a:ba:87:de:dc:e8:2e:b6:ec:e0:36:bd:
91:01:5e:c7:1b:09:a3:55:ce:f9:ca:d6:2a:f5:8e:
1c:b1:a9:ba:02:ac:eb:b3:1b:0c:58:e6:cd:0e:93:
32:15:84:5f:e1:75:0d:ee:70:94:3a:bc:35:d6:2f:
d7:f8:5f:2e:ea:f8:66:d8:d2:e0:b5:1c:cf:76:a4:
71:d7:e3:a6:ca:89:45:37:1b:3a:a9:47:f6:a3:5b:
0c:5d:42:0a:e1:95:35:fb:8d:fd:bf:6b:4b:43:d9:
0e:da:de:c3:19:6c:1b:03:b8:24:d1:9a:66:0f:47:
15:5c:51:aa:68:ee:05:f0:32:e3:49:eb:34:87:f2:
5a:91:93:a0:39:72:7e:c5:f5:9e:5b:23:72:e4:57:
24:c4:43:30:3a:58:59:8d:ad:6c:81:6a:26:34:bb:
ee:f8:e5:96:30:9b:03:cf:bd:54:d3:c0:dc:36:7b:
10:d9:02:eb:5b:62:ff:2d:1c:cb:42:c4:9d:e5:7f:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AF:34:DD:47:EB:09:D7:36:D4:D4:41:7C:5A:B3:68:C9:C1:A8:40
X509v3 Authority Key Identifier:
keyid:F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9c:56:db:1b:d1:cd:1f:ef:0b:93:1e:b3:f2:5b:15:d5:1a:
c6:aa:48:32:39:73:ce:80:fa:a1:55:e9:fd:6c:65:ee:ad:ef:
ad:68:06:71:68:30:00:9f:86:47:20:2c:22:f2:66:28:b8:d8:
4e:93:06:13:3a:d3:db:0f:a3:4d:22:ec:b8:b3:67:c0:9c:5c:
87:55:61:0a:e2:57:23:53:9d:51:a6:f3:68:b3:75:de:27:36:
cc:13:9e:ee:4c:21:a0:45:78:bb:64:d1:45:54:66:10:af:d4:
67:cc:a2:5b:c3:7f:b3:20:84:a9:d9:66:ca:a0:a4:57:fc:93:
2f:22:f7:21:4b:36:7a:64:c2:29:62:fc:3e:bd:7b:e6:b6:bb:
34:a0:7b:47:cc:76:73:a6:a7:b4:fc:02:8f:83:cd:f8:f2:37:
78:7c:ab:40:94:f0:5f:d4:79:a5:aa:ef:07:65:f5:71:c0:9a:
81:9a:58:7d:21:f2:dd:ac:56:6c:5a:20:50:9a:de:25:7e:87:
df:91:2f:84:67:ec:03:ad:25:c7:14:b6:fc:69:a5:11:c5:1b:
ab:96:2d:a9:24:06:2b:17:9e:68:85:17:ef:f0:4f:35:b5:bb:
07:b1:b3:aa:60:ee:16:86:4b:5c:50:ac:dc:a8:c4:85:16:48:
b4:3d:4f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 16:11:27 2025 by rpki-client