Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File: f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier: 5cnwJggwdD98ZCbXhgSXD80XB9zYNh2Mld/pCyxn188=
Subject key identifier: DF:25:72:C9:F6:18:92:C8:DB:DC:3D:C6:2A:34:39:2E:23:B9:37:C1
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer: /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial: 019844AC6A3452D1EFCB238CED75A1B8C5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number: 1186
Signing time: Sat 26 Jul 2025 03:00:06 +0000
Manifest this update: Sat 26 Jul 2025 03:00:06 +0000
Manifest next update: Sun 27 Jul 2025 03:00:06 +0000
Files and hashes: 1: CrYUOPAFPEtuHkKyJhzQE8UrUoM.roa (hash: 9NqhKYyaxDuqPrOUEVd5P1RqZQxAPP5YeCq0DGdnu/4=)
2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: TSur7tcITpF6Ehtm11U4CPdsz4MOdZ4pPzCgZd0vRSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:6a:34:52:d1:ef:cb:23:8c:ed:75:a1:b8:c5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Validity
Not Before: Jul 26 03:00:06 2025 GMT
Not After : Jul 27 03:00:06 2025 GMT
Subject: CN=df2572c9f61892c8dbdc3dc62a34392e23b937c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:f5:b9:dc:83:62:d9:2f:b5:60:df:02:87:
46:bd:79:1c:53:3f:06:67:43:4e:c2:8c:60:94:b6:
1c:23:3d:1e:d8:41:40:4d:c9:ec:8b:79:ee:99:d4:
7a:7a:2f:d9:2e:ee:81:20:8c:d7:79:f0:22:21:0b:
c1:11:5d:18:c9:32:4c:1a:b4:0a:c5:45:1f:c1:6f:
6c:db:e6:4c:95:79:fb:6e:be:4f:f9:0e:4f:d2:1d:
7b:c5:8c:ef:dd:97:02:ca:56:58:53:ff:95:eb:0f:
f5:dd:6e:97:e6:dd:19:d8:64:e9:8b:89:5f:bd:95:
63:7f:3f:d7:f6:43:55:77:91:c3:31:e9:d4:7a:6c:
2f:0b:98:9a:48:d2:96:30:d5:1e:7f:11:08:31:77:
8e:68:c0:2a:5c:3b:b3:ed:81:3e:db:e0:7c:55:1e:
97:68:d3:f6:34:3a:8d:4f:75:42:fc:a0:48:f0:04:
fd:99:5c:2f:9f:7d:aa:11:69:1c:bf:63:5d:30:32:
cf:ae:82:f3:78:5a:82:4a:51:04:24:09:0d:2c:37:
ea:39:d7:6b:7a:05:51:a3:97:a2:61:85:f7:61:d9:
61:ec:e8:92:88:21:37:7a:c6:73:a4:39:85:1b:87:
93:52:3a:20:0f:41:88:78:1b:29:88:bd:b2:98:ca:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:25:72:C9:F6:18:92:C8:DB:DC:3D:C6:2A:34:39:2E:23:B9:37:C1
X509v3 Authority Key Identifier:
keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:32:df:dc:93:2e:9d:9a:d4:62:d5:56:df:8f:31:c7:85:a6:
e7:68:a0:d8:9e:53:3d:93:51:04:e8:32:de:40:81:bd:7c:5e:
bf:f0:4a:a4:0a:88:42:d1:51:64:17:66:7c:dc:e4:8f:7b:93:
6a:88:8b:7e:41:b0:df:c6:cc:52:5c:38:a4:17:17:77:c0:4b:
b0:cd:70:33:21:34:7c:33:8f:43:6e:31:21:5a:cd:80:8c:e1:
08:c0:02:d1:ff:39:ed:51:20:00:ba:8b:2b:e9:31:38:dc:af:
f3:23:58:a4:ea:99:f1:54:4e:7b:36:08:05:4b:7e:77:00:fa:
f5:4e:58:6e:94:e2:14:db:00:5e:80:41:bc:e3:56:9b:0a:80:
c9:51:7b:70:00:48:4c:7f:26:ce:a4:1d:0c:db:9d:84:e7:7c:
1d:98:84:bf:7a:4e:97:f1:ba:7d:07:6e:c2:8d:b2:49:60:91:
9e:83:ac:88:a7:3a:58:b5:d0:d9:d3:7f:3e:6b:05:40:0d:5e:
4d:d2:37:7b:ea:59:ec:95:26:5f:49:e0:69:0c:68:b9:f5:b0:
c2:27:7e:ca:8d:1f:f3:9b:5a:28:bc:f4:b1:0d:de:ba:62:74:
ef:b0:04:35:f5:e5:4f:d6:ea:0d:30:48:c0:01:86:4e:85:31:
4d:3a:5c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:42:00 2025 by rpki-client