Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
File: 9zHDObGGFyK__oZyGDFM4SlcPIU.mft (raw, json)
Hash identifier: RgH/APmeU4tENierzi665YjZi6O7SbKLoJaQxLX8mLo=
Subject key identifier: 4C:3E:51:FC:3F:76:15:C3:2C:CA:AE:ED:63:91:56:9E:7C:87:4C:24
Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
Certificate issuer: /CN=f731c339b1861722bffe867218314ce1295c3c85
Certificate serial: 019845F64A5615362D8BBEE970B2B2810EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 09:00:25 +0000
Manifest this update: Sat 26 Jul 2025 09:00:25 +0000
Manifest next update: Sun 27 Jul 2025 09:00:25 +0000
Files and hashes: 1: 9UQ0_3_mS41_iKwg1qjiuH2k8kg.roa (hash: kiU7QM0C1mwEaOQNcthFFJZevyv4iXHm9WMDBPMiwH8=)
2: 9zHDObGGFyK__oZyGDFM4SlcPIU.crl (hash: mneT3zlo65sNQhGj6RUe7Tt3TIXGPqvp87WJt/FfxqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:4a:56:15:36:2d:8b:be:e9:70:b2:b2:81:0e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85
Validity
Not Before: Jul 26 09:00:25 2025 GMT
Not After : Jul 27 09:00:25 2025 GMT
Subject: CN=4c3e51fc3f7615c32ccaaeed6391569e7c874c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b5:c4:92:9a:a8:0b:37:8f:ff:19:d2:19:e3:
1e:d4:9d:e4:f0:8d:d4:85:8a:48:f4:e7:5b:7a:10:
97:cb:f6:11:1a:82:be:01:a3:2c:9f:19:19:22:2e:
7e:83:86:ed:c8:51:c5:bd:da:d9:ec:c2:10:83:29:
58:05:b5:95:ed:10:11:8d:2d:3a:1b:da:af:a8:e4:
d4:cc:30:49:04:31:f0:9d:01:f0:6e:3e:f1:69:13:
7e:08:08:8c:ee:44:7f:9f:fa:e8:bb:0d:d8:a9:5c:
33:89:e2:1f:c6:68:f5:20:87:e8:ca:76:5f:e9:a2:
d4:e4:58:10:bc:42:58:66:3d:f0:3e:7a:1a:ac:64:
fa:93:64:65:7e:f6:b2:3c:9c:e3:d6:ba:de:b6:2f:
95:0a:ae:63:d6:79:53:52:80:2a:53:52:5f:af:c9:
78:69:d4:0c:aa:cb:de:61:4a:95:8d:b2:2f:46:c0:
66:fe:d6:87:27:a1:d1:58:fc:77:f3:77:bc:ab:e8:
64:40:7b:35:a9:12:b7:f3:77:5d:06:8d:d8:c2:72:
de:3a:c5:ce:d3:06:87:b9:a4:fe:e0:14:69:cf:53:
9e:4e:d3:ef:91:fc:a5:55:4a:d8:4f:91:20:86:9f:
d0:dd:32:30:9f:9d:e3:55:52:d6:39:0b:31:fc:f0:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3E:51:FC:3F:76:15:C3:2C:CA:AE:ED:63:91:56:9E:7C:87:4C:24
X509v3 Authority Key Identifier:
keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ba:42:5b:d8:b2:9b:2e:8a:0b:8c:90:76:fc:2a:0f:a1:cc:
3b:1d:8e:7d:79:49:33:38:c2:ff:ab:67:23:02:e3:50:b2:d8:
7a:75:ed:98:2a:87:d7:50:af:ef:b2:c9:4e:19:cd:64:2d:ec:
a6:d8:8d:b8:d0:e3:e6:66:9d:53:d2:07:b7:04:64:82:c3:f1:
16:a2:b3:2d:04:c1:b1:e9:13:9d:ed:1f:9d:3f:07:ba:e5:8a:
0a:ab:9d:8e:07:92:44:ed:a9:43:7d:09:1b:94:67:f1:85:92:
86:73:67:c3:db:88:01:ab:ab:28:6c:68:51:bc:d5:2b:98:41:
b7:52:ff:81:7e:25:85:9d:20:f8:31:d6:c4:0b:80:d1:99:5e:
e0:f5:d6:dc:60:dc:d2:e3:b5:0a:d7:44:c0:2e:84:56:4f:e1:
f7:7b:fa:aa:6d:b3:df:f2:36:5a:8c:2b:db:95:ce:f9:95:67:
92:e6:8e:6d:76:08:87:fb:84:f7:35:2d:03:40:c3:65:d3:99:
88:8d:20:9e:b8:f2:03:56:98:8c:08:1b:6e:a6:5e:75:b7:58:
28:ff:ff:27:48:75:7b:7e:3e:58:95:33:8d:ec:5d:70:cb:c6:
0b:11:97:47:d5:b7:9c:01:ef:d2:ba:72:0f:38:01:fe:c4:d5:
6f:80:e7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:03:50 2025 by rpki-client