Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
File: 9-5cHIBMM_3jPZsIuRn3PTHQttk.mft (raw, json)
Hash identifier: 1+rJ/BzAIvRiRuQYzqyWyrgrD+KZJG4Cn3kKHeC6zPg=
Subject key identifier: 48:6B:BA:58:73:DB:46:E3:C9:9B:18:FB:89:48:3F:10:27:BE:F0:E4
Authority key identifier: F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
Certificate issuer: /CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Certificate serial: 01984A4111EB8E51997E616135F999220CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
Manifest number: 0A78
Signing time: Sun 27 Jul 2025 05:00:35 +0000
Manifest this update: Sun 27 Jul 2025 05:00:35 +0000
Manifest next update: Mon 28 Jul 2025 05:00:35 +0000
Files and hashes: 1: 9-5cHIBMM_3jPZsIuRn3PTHQttk.crl (hash: W6+ZE1Mz0XZ1DU9gIzPg8TxqlF7FzpTfERVf1r93zA0=)
2: VIIA5VZpizTIGxWzHyr_ZNDV3cA.roa (hash: cehPDwufBxU4/kiVLRiGeuXvq0MlYpc57MWfPb+PZlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:11:eb:8e:51:99:7e:61:61:35:f9:99:22:0c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Validity
Not Before: Jul 27 05:00:35 2025 GMT
Not After : Jul 28 05:00:35 2025 GMT
Subject: CN=486bba5873db46e3c99b18fb89483f1027bef0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:85:26:d3:96:0b:12:9e:28:b0:5d:8b:62:
85:f4:c6:84:b6:f7:94:07:10:53:e0:76:40:90:05:
f5:3f:c5:4d:96:6c:ce:eb:93:c8:b3:a8:e5:8a:de:
44:23:3a:02:a6:cf:97:3c:ed:6a:18:9e:88:ca:0e:
72:bf:60:c0:2b:99:bc:48:eb:00:0d:4e:f3:1e:9e:
d5:99:3a:d5:e6:d7:25:08:b3:33:05:38:05:2f:f8:
fc:c1:b0:25:37:63:15:5e:07:8b:6a:4b:5e:86:bd:
95:fb:20:85:f3:99:22:a6:0b:0e:c3:01:b5:25:16:
ce:dd:d3:6f:c6:a4:c6:31:cb:58:20:50:ce:f4:69:
53:3e:32:d7:a6:35:a0:d2:1e:26:58:16:7c:cd:ef:
be:90:cc:45:03:2e:2e:60:67:84:27:77:cb:10:85:
47:e7:ef:69:db:a9:8f:aa:0c:92:db:05:98:0c:e4:
65:b2:24:f3:93:9f:67:48:02:21:5e:01:6f:57:5e:
51:13:4c:35:cd:74:f4:57:e0:97:c4:a9:f9:5e:9a:
88:51:ec:8d:dc:5f:ac:49:c6:db:04:3b:b0:5a:95:
3a:c2:13:dd:57:d4:61:5a:24:7b:46:cb:8b:22:b8:
d6:e4:d2:87:0d:53:85:eb:71:90:af:9e:e5:0e:99:
99:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6B:BA:58:73:DB:46:E3:C9:9B:18:FB:89:48:3F:10:27:BE:F0:E4
X509v3 Authority Key Identifier:
keyid:F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d9:76:92:02:ed:83:a7:a6:a3:0d:c6:7b:fe:48:db:46:9e:
8e:2d:11:c8:b1:33:86:fd:0c:e7:14:9d:73:b0:20:e7:a9:d0:
9d:b4:95:78:35:7e:65:f1:54:45:d4:3e:09:34:be:f8:58:02:
3d:d7:65:6f:77:bd:9b:f2:bb:b8:00:42:cd:ce:e6:fa:22:a6:
89:ee:bd:79:10:c8:6e:74:27:a2:ee:94:3b:a5:ea:ac:0a:d6:
a4:a2:b9:2c:66:33:e9:41:03:63:b1:9c:16:61:b6:83:f1:69:
f7:7f:12:82:90:b9:4f:f1:77:09:c2:a9:e0:cb:83:73:0c:19:
82:e1:c4:ae:e6:dd:c3:14:c3:05:66:66:2e:d2:ef:c3:ca:8e:
b4:ad:bd:98:df:aa:6c:43:77:52:40:32:15:f8:d9:5e:03:16:
ed:58:7d:c1:e2:9b:b6:aa:82:8d:0f:94:86:1a:ac:62:c3:0b:
8d:26:ea:f4:6a:37:1f:c8:1a:b7:cb:6f:d8:cc:6b:d7:6b:56:
2e:17:fb:ed:a6:de:4e:a2:99:db:37:a5:91:7c:43:7a:64:b5:
ab:f1:7c:37:9b:71:60:0e:7b:37:f8:73:2d:5b:70:36:ae:aa:
b4:0e:82:cd:54:6f:16:96:17:20:23:46:40:68:f4:83:15:19:
aa:0a:c0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:19 2025 by rpki-client