Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
File: D9zw7HuvNJ6JLVERXCLA29Q1C44.mft (raw, json)
Hash identifier: /vsU5ue0Qa3UPfvCD4ccQA6TRzUJIK+ZxJuk1PJaLz8=
Subject key identifier: 24:9B:FF:13:79:BA:D2:DF:87:C2:95:37:51:34:F2:07:CF:C4:59:26
Authority key identifier: 0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
Certificate issuer: /CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Certificate serial: 01984965B015808DD32716022E28CEF73AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
Manifest number: 02B9
Signing time: Sun 27 Jul 2025 01:00:57 +0000
Manifest this update: Sun 27 Jul 2025 01:00:57 +0000
Manifest next update: Mon 28 Jul 2025 01:00:57 +0000
Files and hashes: 1: D9zw7HuvNJ6JLVERXCLA29Q1C44.crl (hash: oB9y9fl4m3v4ikCc5s/qbcMRTjas0CI7R/v+tu7JPlc=)
2: LkbZ9NbuqV8kVwW0R6t_W7E36SY.roa (hash: OFwtZ8nR+nHbeTcy4UO/g/3elRZlu1GMxchq0zT/W/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:b0:15:80:8d:d3:27:16:02:2e:28:ce:f7:3a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Validity
Not Before: Jul 27 01:00:57 2025 GMT
Not After : Jul 28 01:00:57 2025 GMT
Subject: CN=249bff1379bad2df87c295375134f207cfc45926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:86:47:6b:99:43:4c:fe:c7:4e:6d:8c:38:
4b:6f:dd:07:8f:24:dd:91:ce:0f:b8:21:22:47:e2:
19:8d:5d:a2:8c:86:98:9f:08:0a:0d:14:76:aa:f7:
0d:2a:fe:33:46:67:be:b7:eb:dd:6d:d6:20:1c:21:
ed:12:56:03:74:e4:88:32:c5:63:f8:5d:49:05:5b:
38:57:9d:5e:7e:17:0f:2b:d0:22:14:0a:6c:72:c1:
6b:a8:39:fd:ac:bb:0e:eb:a2:dc:71:b6:a3:a5:4a:
18:5c:ce:8a:b3:ce:2f:41:15:5d:0b:7e:8f:40:bc:
9c:09:52:d4:da:14:b8:b4:71:3f:c3:45:7d:5b:d8:
ab:e1:6f:f3:f9:5e:8d:e7:ad:f2:1a:d0:61:dd:8f:
e4:92:a5:f6:6f:f3:f6:c7:34:4c:e0:e6:64:a7:33:
41:09:42:f5:cb:dc:7d:08:92:82:2a:36:c5:52:e5:
b0:ad:c6:b2:a7:84:60:eb:69:84:77:ed:9e:8d:8e:
95:62:9b:c6:1b:ae:50:fa:69:f6:49:ec:e6:01:bf:
d2:c2:61:02:f6:67:cb:a2:2b:25:f7:23:3e:b1:d4:
69:d7:12:18:0f:51:69:87:bd:75:a2:ae:47:51:31:
7f:2d:9c:e2:aa:be:e6:d6:ea:e0:ed:75:9c:45:26:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9B:FF:13:79:BA:D2:DF:87:C2:95:37:51:34:F2:07:CF:C4:59:26
X509v3 Authority Key Identifier:
keyid:0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:5b:24:84:99:09:63:16:34:b5:2f:90:2c:ac:18:37:2f:f0:
a5:a1:34:80:e9:da:0c:40:52:37:95:24:95:de:ec:6e:93:5a:
dc:66:f5:e0:d8:2a:18:9f:d4:a1:b8:5a:1d:ba:b5:1d:84:fd:
05:e7:f7:e7:65:0d:b7:88:d2:e2:7d:99:11:97:ea:54:1b:0d:
51:da:11:75:92:07:6d:eb:89:b1:06:ef:1d:83:87:75:02:28:
18:59:4a:f6:76:dc:7e:aa:23:70:3a:3d:38:89:b8:f8:6c:51:
c0:43:70:3d:db:19:a0:e4:9b:4e:30:f7:51:be:b1:bc:c7:c6:
57:c2:42:f2:a4:aa:f6:27:3e:19:c4:0a:0b:2b:48:09:b3:48:
0e:aa:6f:aa:51:9f:71:1c:0b:5d:da:72:79:a6:2b:01:7c:61:
66:9f:d1:2f:3b:6b:2e:3a:f9:51:d4:23:57:18:88:ee:a9:16:
74:12:9b:7c:d0:45:e7:40:51:fb:9c:b8:fc:c6:34:18:fe:be:
bd:40:19:81:09:d1:23:a2:98:47:ad:f1:38:a4:cc:f3:54:70:
02:38:70:9c:99:0e:e1:f7:89:5d:ed:ad:cb:10:71:5a:56:12:
b2:4a:a9:c3:b2:a7:76:bc:5a:ab:c9:2d:07:1c:1b:33:83:c8:
dc:8d:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:49 2025 by rpki-client