Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
File: 9iZUZY9nKqzzcTO1xxz0sRwYado.mft (raw, json)
Hash identifier: QTgjv0nvOFmuIWx17rBZShJmlc6FV3G8tbUnPA8OnRw=
Subject key identifier: FC:E0:14:47:59:42:2F:6B:8F:5D:9D:2C:5C:F2:90:64:B5:75:4F:62
Authority key identifier: F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
Certificate issuer: /CN=f62654658f672aacf37133b5c71cf4b11c1869da
Certificate serial: 019849D37576F08D618A3FAC3002C932EC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
Manifest number: 010B
Signing time: Sun 27 Jul 2025 03:00:51 +0000
Manifest this update: Sun 27 Jul 2025 03:00:51 +0000
Manifest next update: Mon 28 Jul 2025 03:00:51 +0000
Files and hashes: 1: 9iZUZY9nKqzzcTO1xxz0sRwYado.crl (hash: RWLmJcYWeOZ16TR860UeGAHZo/TGVkz2GYpJxDCGpLc=)
2: NEPVSXjqT46bRniV4fcHp7pNd9I.roa (hash: cRn+2MSENb6w9bePKCbLQTtEQgCQcGDUoWkOY828NLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:75:76:f0:8d:61:8a:3f:ac:30:02:c9:32:ec:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62654658f672aacf37133b5c71cf4b11c1869da
Validity
Not Before: Jul 27 03:00:51 2025 GMT
Not After : Jul 28 03:00:51 2025 GMT
Subject: CN=fce0144759422f6b8f5d9d2c5cf29064b5754f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:cf:21:b3:39:0d:21:2c:ff:1d:43:ff:ac:
28:dc:65:c4:3a:81:21:3f:b7:7e:56:48:4b:15:fc:
f2:7a:a6:3e:21:0e:80:23:bc:46:7b:9f:ae:51:a5:
b2:10:7a:ec:14:f6:19:5a:70:84:41:4e:0c:ad:89:
01:2c:04:a7:74:4a:96:24:a0:89:5f:97:3f:99:19:
d3:d7:94:69:b1:64:73:90:a7:8b:44:f9:01:19:69:
8a:32:43:94:8a:1d:63:25:2d:48:e9:e7:e7:ec:3d:
82:49:ea:9c:41:2d:41:d1:44:0a:bd:c5:62:a7:95:
5c:33:68:77:d8:3d:64:7b:b0:7f:c3:e7:ee:b0:07:
e5:0b:d3:51:51:a0:9c:9d:ab:a4:93:ab:ec:ef:ce:
f0:f1:53:2e:83:88:82:3f:30:9c:c7:05:19:20:c8:
e9:25:64:94:08:91:04:a4:42:a2:3b:3b:0a:95:bc:
cf:f1:04:30:b4:c1:fd:7d:86:8e:67:1c:04:32:d1:
d6:4a:50:b4:51:4b:e5:51:37:95:01:6d:00:a0:be:
49:fe:a5:1b:7d:e3:fa:79:7c:bf:a3:e0:3a:94:26:
2e:66:61:be:af:3f:de:31:8f:20:a8:28:f8:27:1c:
73:76:99:5b:c1:59:38:63:e9:5d:d7:a2:9b:a3:d6:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E0:14:47:59:42:2F:6B:8F:5D:9D:2C:5C:F2:90:64:B5:75:4F:62
X509v3 Authority Key Identifier:
keyid:F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:60:85:55:ae:7f:ec:35:cd:ed:b6:1d:b9:e4:c4:5d:7f:14:
1a:cb:cf:c9:df:c0:67:9b:c6:fa:0d:0c:a7:28:19:a6:13:77:
e4:fa:1c:0d:78:64:14:e6:d0:e2:2c:00:fe:24:20:36:7c:f3:
e0:22:30:2b:bd:b3:fe:ee:ff:2a:bc:e6:f8:90:ae:0b:fe:bf:
cf:e1:8d:e7:c4:f1:c4:1e:03:df:03:8a:d9:10:d5:d4:51:12:
3a:65:45:d3:9b:da:a6:ee:d4:3e:d7:f4:d6:e8:13:85:66:3b:
fd:6d:fc:e4:d4:e0:a3:c8:f0:80:8b:0d:50:30:9c:80:e9:01:
92:f2:09:4e:12:60:52:6f:f8:d9:de:46:82:0d:d0:7d:81:b6:
3d:a2:f6:99:d3:8c:cd:c6:19:f1:8f:61:6b:a4:f8:d2:a8:a1:
93:6c:d1:90:8b:7b:6e:d1:ca:d3:4b:b3:b2:8f:0c:7f:0d:a8:
61:3b:55:1a:aa:77:d4:51:52:0d:05:ba:2d:c5:ea:7a:3d:df:
7c:d3:d9:89:f6:a4:f0:9c:13:61:fa:87:f4:da:a9:85:79:d0:
98:ba:97:13:87:c6:3a:87:de:02:c4:b7:2a:0f:c5:3a:a9:5f:
c6:62:d1:27:e9:20:ce:7a:d7:e2:ea:d1:f2:d6:c9:cf:22:4c:
33:6e:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:28 2025 by rpki-client