Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
File: 9q2iC9mLq990w9Vs14raZu2HoUg.mft (raw, json)
Hash identifier: QCmwgUBP2Cd+ot2XyRCLwKByc/Uubnhn3jp8crIU0Dw=
Subject key identifier: D5:92:B5:03:B3:DD:73:A5:12:DF:E8:99:E1:3E:A2:E2:A5:7A:1C:93
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 019847E591A936D35BD8C221553BF255D442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
Manifest number: 09C7
Signing time: Sat 26 Jul 2025 18:01:24 +0000
Manifest this update: Sat 26 Jul 2025 18:01:24 +0000
Manifest next update: Sun 27 Jul 2025 18:01:24 +0000
Files and hashes: 1: 9q2iC9mLq990w9Vs14raZu2HoUg.crl (hash: 4fxEW1R4eWI2/J3l0n7LoxJop2NCaRlYbNyHvcyuHiw=)
2: s-x7d6jJvL70qmh-6OnRq31TKUk.roa (hash: 2DbOtbQA27lHr7qNRTboKovEtkv/3fhOLEwI/H6E4D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:91:a9:36:d3:5b:d8:c2:21:55:3b:f2:55:d4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Jul 26 18:01:24 2025 GMT
Not After : Jul 27 18:01:24 2025 GMT
Subject: CN=d592b503b3dd73a512dfe899e13ea2e2a57a1c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ea:6e:95:4c:06:d3:c3:02:72:65:1c:b5:8c:
0d:ea:57:72:c8:fe:5a:bf:77:e4:7a:19:bf:47:f6:
b7:17:85:45:64:d9:0b:b4:48:ad:7c:da:7b:0e:ef:
9e:5c:63:e9:87:44:82:2e:b4:8f:97:90:40:96:7d:
34:89:35:de:a1:e7:2b:36:ab:2f:a1:d0:b5:54:1c:
f5:bb:a0:28:16:70:ad:f4:ad:77:f5:2d:74:80:0d:
8c:32:71:2f:e6:a6:5b:6f:80:f2:5e:9e:31:56:36:
6d:68:af:ee:f5:ac:0f:ec:82:aa:f6:61:e4:49:0a:
36:99:90:02:5c:3c:92:ba:96:e2:61:9d:98:31:77:
ad:ad:02:ec:da:b3:45:88:7f:fa:af:e6:0c:4a:70:
dc:6e:fc:12:b3:74:32:ee:38:40:b6:94:80:8b:5e:
84:60:4f:fb:66:ee:5b:8a:e2:03:2a:64:fe:48:e4:
2b:e7:9c:58:72:c4:3e:7b:ff:c7:a3:ca:f4:18:45:
31:5c:cc:80:59:48:79:2d:05:07:56:48:d8:da:d9:
01:ab:94:38:5e:89:64:8d:0e:cf:5e:5c:b2:f5:73:
98:ec:1a:12:21:87:65:d4:64:e5:c5:be:e3:30:67:
ae:0f:e1:bc:bc:19:df:5e:88:41:ce:08:2b:64:48:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:92:B5:03:B3:DD:73:A5:12:DF:E8:99:E1:3E:A2:E2:A5:7A:1C:93
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:98:15:a3:55:35:6d:b4:a7:d0:06:25:07:e4:f8:70:77:b2:
34:c9:54:e0:6b:eb:92:f7:a5:0e:6c:ba:9e:4d:4c:56:eb:e8:
1f:2e:96:77:91:4b:5a:f6:91:b4:1e:c9:c7:1a:4e:17:2f:7b:
52:8c:00:95:b3:f5:cd:93:60:2a:79:8b:4b:46:dc:40:be:a6:
d9:64:db:be:e9:f6:9f:1f:a7:7c:c8:a1:4c:4e:cc:97:b6:b7:
f6:e1:69:57:36:3f:c0:47:d6:89:4e:24:fa:9d:11:b1:56:68:
d2:b9:c9:21:4a:d7:70:0a:8f:f0:7a:47:1d:a5:5e:be:eb:4a:
5f:a7:69:e1:9f:11:43:06:2f:d0:4b:99:48:c3:e8:52:d2:1b:
24:9e:e5:ff:53:ca:e6:6c:44:39:45:48:10:a6:51:86:28:34:
46:41:a6:09:8d:d2:8f:f8:44:56:c9:37:6b:9e:ad:3a:eb:46:
0b:1b:50:f7:f4:02:47:3d:50:80:21:01:8f:9f:28:9e:e5:13:
26:30:80:f1:be:97:04:51:06:fd:9d:bd:49:c1:45:3d:f7:51:
6e:49:98:72:6e:bb:7f:54:28:bf:1f:e0:da:86:f0:0f:c6:5e:
67:11:f5:2b:5e:79:d7:5f:8f:3e:c7:0d:8d:17:9e:6d:1c:61:
14:14:2a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:41 2025 by rpki-client