Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
File: UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft (raw, json)
Hash identifier: 1DOEdomcBxw07te68gg95ksoQvP6xFN7YqaU4MrkMjI=
Subject key identifier: 00:91:59:3E:6D:8E:A4:92:CF:35:57:1F:6C:E1:DC:C7:82:CB:41:EA
Authority key identifier: 50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
Certificate issuer: /CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Certificate serial: 01984AAEA58AA3E5D4779B1F33CA3889A3E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
Manifest number: 09BB
Signing time: Sun 27 Jul 2025 07:00:16 +0000
Manifest this update: Sun 27 Jul 2025 07:00:16 +0000
Manifest next update: Mon 28 Jul 2025 07:00:16 +0000
Files and hashes: 1: UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl (hash: Nfq3QfkEum6MrsghDjWWMzJKSIxTKJTB437MijTKllk=)
2: rB2uaCwrLsHd8QP3gzLrvvAfPiA.roa (hash: rFl9lkx1744U+43ipMxs7m2ICQoiTAYXwAH+fMGwgoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:a5:8a:a3:e5:d4:77:9b:1f:33:ca:38:89:a3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Validity
Not Before: Jul 27 07:00:16 2025 GMT
Not After : Jul 28 07:00:16 2025 GMT
Subject: CN=0091593e6d8ea492cf35571f6ce1dcc782cb41ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bb:20:e0:de:5e:3f:55:6f:af:ce:1b:6c:c5:
81:26:e8:ba:25:d7:fb:63:85:36:a5:a9:49:4c:e5:
60:23:8f:2f:e7:b6:0c:0d:31:aa:f2:c2:b6:47:37:
f1:bc:e8:10:18:d8:36:37:9c:72:97:a6:d9:cc:27:
78:9c:76:ea:db:c2:4b:bf:22:64:d9:56:12:39:bd:
67:9f:fa:5d:b4:6b:d0:75:6f:57:d2:a2:c1:cd:e4:
eb:cd:49:34:d3:40:8c:38:4b:92:ac:a8:03:a6:89:
dd:ed:0e:8f:33:c4:7a:81:f4:b6:e0:97:d4:7e:5f:
c9:aa:d5:3d:e8:67:34:0e:9c:43:4a:ff:a7:89:2b:
2a:b7:1e:4f:9d:69:bf:14:f7:c2:34:34:b4:33:54:
db:a1:8c:41:08:bc:18:d5:37:ed:6a:47:65:78:0c:
af:ab:0d:7d:07:f9:26:37:2d:6e:ad:83:f6:5e:37:
b0:2b:cc:73:ab:54:6c:4b:bf:70:1d:38:b3:57:c4:
35:0c:d6:af:17:e2:a9:73:4f:42:f4:03:7d:f4:cb:
c3:9f:89:b9:e4:00:36:b0:d4:7d:48:bd:5b:8c:fe:
0a:6d:04:fd:27:5d:6c:66:84:e9:5c:c2:24:78:11:
c1:93:39:1e:62:01:c4:37:d4:92:0d:fe:6e:1d:8b:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:91:59:3E:6D:8E:A4:92:CF:35:57:1F:6C:E1:DC:C7:82:CB:41:EA
X509v3 Authority Key Identifier:
keyid:50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ee:cc:0c:9a:f3:29:4f:b1:71:bd:d7:dd:2f:c5:b9:fe:1f:
24:41:59:56:08:7a:06:54:07:91:d6:e8:eb:83:c9:5f:7f:16:
68:24:13:32:9d:36:56:26:5e:6e:7e:63:ba:7e:48:11:07:d2:
84:91:ce:0a:ab:3d:36:7e:93:7d:8b:d0:c8:2c:82:76:60:c0:
42:01:7c:b5:7e:db:60:30:9e:92:77:aa:05:8b:7f:4f:27:3f:
ec:53:ac:2c:68:d3:5e:4d:d8:80:23:ef:54:fe:e4:a4:03:57:
6b:b6:b7:4c:fd:e9:8a:58:5b:44:b6:b1:c8:de:f5:98:bd:4c:
79:7c:4e:38:8d:ad:3f:bc:e0:09:af:fc:9f:62:1f:c3:16:65:
49:1e:3f:09:15:e8:a2:4c:ad:95:cb:42:56:94:fd:d1:68:cd:
5e:8c:c5:8d:b5:6d:d7:72:3b:86:c8:c6:73:95:1e:fa:a5:d8:
0a:2f:1c:47:33:da:60:2e:f5:3a:46:19:ac:aa:78:3f:af:92:
1c:17:48:d8:a9:54:2f:10:de:fa:83:7c:54:5e:da:31:7b:05:
32:9d:2b:8a:91:6c:27:7b:70:fa:6d:bf:d7:b8:fa:34:3e:be:
af:21:f0:66:52:51:9f:42:f7:bf:16:6f:a5:96:76:cb:c0:cd:
15:7a:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:10 2025 by rpki-client