Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier: 7xeKbdhpYNX2+QNJKSWkg59ZmaBawfuB9+Tqh8Ms2Dg=
Subject key identifier: FF:31:7D:F9:FC:19:96:B8:10:E5:76:00:94:22:1C:B5:6C:6D:95:06
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 01984A77999CCDF43D45E108E023B85C1B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number: 099B
Signing time: Sun 27 Jul 2025 06:00:08 +0000
Manifest this update: Sun 27 Jul 2025 06:00:08 +0000
Manifest next update: Mon 28 Jul 2025 06:00:08 +0000
Files and hashes: 1: _O2K9lYrU1ufrJyVF92JtVYbIao.roa (hash: opCkasUjE09S1Hv7hZM9HKqW92oCRoLsRmm8L97k62Q=)
2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: RTYztylVaxksuJ7jbl/PX1V9+71xPHo0TjQRVkGnj5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:99:9c:cd:f4:3d:45:e1:08:e0:23:b8:5c:1b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: Jul 27 06:00:08 2025 GMT
Not After : Jul 28 06:00:08 2025 GMT
Subject: CN=ff317df9fc1996b810e5760094221cb56c6d9506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:fe:16:26:eb:c9:b2:9d:6d:34:df:60:66:
18:f2:e2:b7:1e:9c:e2:b6:17:4d:1e:d5:02:f8:19:
ca:9d:00:ac:db:25:a1:ca:a2:df:b1:c1:09:70:66:
af:e1:12:be:15:8c:22:fb:56:0f:76:11:b1:1c:2b:
64:2a:ab:7d:19:bc:9a:84:7e:e6:2c:cf:ca:9a:a1:
82:d6:7a:3c:48:d4:56:85:ed:aa:82:d4:44:77:ae:
62:8b:ab:bd:fd:48:ac:df:90:73:70:fe:dc:dc:02:
30:7e:c1:64:f9:bc:43:95:c6:90:ea:11:82:81:c5:
68:e7:3c:df:b3:b0:5c:80:1a:ff:77:80:07:2e:84:
e1:40:19:da:b8:b7:21:b4:e8:6f:2f:43:78:2b:f8:
a9:d4:47:f7:51:55:68:de:1d:01:fa:df:9c:b0:94:
ee:e8:da:d8:84:e5:9d:fa:17:e1:4b:1f:f5:18:98:
c7:cf:fc:ad:0f:db:e3:1d:e1:3c:37:c0:32:c8:8a:
0c:49:86:de:ba:1c:24:45:22:7a:e6:00:a7:30:07:
b7:8f:20:f5:e1:38:45:af:b2:9d:eb:ea:3e:b3:de:
99:fb:16:ec:5b:f6:e6:0a:5f:15:47:a0:87:04:c0:
39:13:e8:03:3c:97:32:eb:23:1b:c1:6f:2f:20:b5:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:31:7D:F9:FC:19:96:B8:10:E5:76:00:94:22:1C:B5:6C:6D:95:06
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f9:fa:2c:38:80:2e:23:6a:c7:d1:53:5b:bc:68:69:56:ca:
eb:ec:d3:0d:d3:ea:3f:5c:3c:19:3f:00:06:3e:9d:ff:5b:89:
93:3c:80:53:0c:49:72:07:d6:7b:34:fb:a8:4e:64:2f:67:ea:
1c:b1:01:97:53:a6:55:74:ea:8a:81:cf:76:a6:97:38:fe:94:
e9:31:24:aa:f8:6b:45:69:af:ea:c5:fb:1b:1e:d7:86:87:35:
b4:05:a3:3a:6e:3d:8e:ea:54:0a:d2:08:1b:6f:62:3a:14:c6:
40:9f:41:1c:fa:59:02:23:8f:9d:c6:8e:cb:a7:96:7c:c8:29:
d9:84:04:d7:f7:d8:03:8a:94:89:0c:47:f2:91:4b:43:41:ce:
b2:c4:3d:5e:a6:a6:93:e9:09:9a:cd:9d:d1:4d:16:5d:df:f4:
55:91:18:62:79:6e:40:2b:65:f8:c7:56:9f:55:f0:86:c8:7d:
c5:33:91:5c:23:b4:cd:d3:f7:93:a7:2f:98:89:4b:7d:50:81:
62:d7:b4:0a:46:3a:13:1d:33:6a:b9:e3:cf:86:1f:ed:e7:a2:
3f:73:5d:c9:e5:99:dd:23:76:a1:28:59:62:71:f8:99:4f:bd:
f7:66:70:2f:89:1f:9a:01:ae:d9:9d:fd:90:90:31:39:87:7e:
15:66:b2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:50:25 2025 by rpki-client