Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json)
Hash identifier: fEfhcLnDSvRbTw1n+uhv+Gbni5N47DFj99QRLW7yG+M=
Subject key identifier: 9B:19:B3:52:19:97:9C:6B:5D:99:23:35:5D:58:06:DB:DA:7D:F2:A4
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 0198548DB7573A6A96F5E1CA08DF9AC53C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
Manifest number: 0BCD
Signing time: Tue 29 Jul 2025 05:00:30 +0000
Manifest this update: Tue 29 Jul 2025 05:00:30 +0000
Manifest next update: Wed 30 Jul 2025 05:00:30 +0000
Files and hashes: 1: Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa (hash: 2zE2fETyOiknIdhnDsU5+xLMFz/vO5FngmYcWoMLhMg=)
2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: M8t2ZABxuUmS7FuGSkyd5j3mtnw4IkUnlorREt2FZVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:b7:57:3a:6a:96:f5:e1:ca:08:df:9a:c5:3c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: Jul 29 05:00:30 2025 GMT
Not After : Jul 30 05:00:30 2025 GMT
Subject: CN=9b19b35219979c6b5d9923355d5806dbda7df2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:13:24:a0:52:25:49:2e:a5:f8:5e:2d:1c:
c0:27:59:be:bc:41:b9:19:87:d6:0e:fe:6b:b6:af:
2b:44:78:92:1c:45:0a:d0:79:da:c7:45:4c:6e:87:
40:9a:e0:a6:a9:f5:f7:ad:d8:cb:5c:e5:f9:49:c0:
4d:3c:98:ed:41:fe:70:b5:98:50:62:34:a3:0d:36:
fc:80:8e:02:75:45:65:5e:f5:39:6d:f0:a6:8e:48:
1f:ff:3a:1a:c6:84:ed:a0:d6:66:c6:88:79:77:30:
93:20:c6:86:40:7c:a6:90:90:c0:c7:31:f3:90:b4:
4b:ab:f7:6b:24:ca:8d:af:26:b0:ac:a6:93:64:60:
a9:89:e0:f9:24:0c:a3:cc:aa:0b:4d:1c:7f:87:e0:
22:fd:a6:61:80:51:d1:4e:0b:3f:c6:bb:9c:9f:ec:
d0:25:74:e1:af:ef:bc:3b:05:bf:ca:de:c3:33:5e:
3c:b4:74:61:2b:95:cd:08:04:77:dc:dc:e6:ed:ec:
06:67:23:90:94:5d:0b:f9:91:95:b4:a6:f0:ac:e6:
5a:d6:ec:72:da:13:de:88:28:23:87:98:ce:1d:62:
d4:c9:26:53:d7:64:a7:5a:1e:d3:7c:f1:59:de:54:
1b:e3:ac:91:a5:a2:52:a7:b3:8c:8f:56:f0:de:8a:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:19:B3:52:19:97:9C:6B:5D:99:23:35:5D:58:06:DB:DA:7D:F2:A4
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:86:dc:3a:2c:f3:9b:5d:7f:5f:a8:6b:03:ae:1a:89:c2:d7:
5d:51:b3:49:2c:a4:88:40:f6:45:21:fd:91:94:08:15:ea:90:
56:98:99:96:71:0c:c9:c3:20:82:e1:eb:1a:84:0c:81:20:b1:
7d:52:6e:b6:b2:58:e0:ba:20:23:40:d6:be:e9:52:ef:f3:62:
e2:68:fb:98:cc:b7:92:b7:82:af:13:c7:b0:3f:4a:71:06:85:
ef:3b:af:b1:4b:40:31:45:9a:2c:73:b1:f1:c0:15:a3:ea:c7:
6c:9b:12:f1:41:57:49:5f:9e:46:eb:f7:79:6c:f2:9d:6d:5f:
85:55:53:e4:fc:54:93:81:88:5e:e1:66:74:c4:46:0f:fa:0e:
17:7a:2f:9f:58:2a:7e:58:0a:db:b3:9b:c7:70:35:25:d7:c5:
51:bd:c9:ef:d2:8d:d6:8f:d7:f0:54:42:8b:78:60:3c:3e:0e:
fe:af:14:ac:34:bb:e1:ad:c8:91:1a:24:81:0b:ee:69:40:e2:
25:4f:16:36:99:dc:33:95:69:10:12:f7:b8:14:5c:ab:47:c4:
ad:49:a7:6c:84:ff:f1:bc:b1:2e:55:9a:a4:37:f6:39:02:c1:
5d:1b:27:d6:53:eb:c1:27:c5:5c:ea:66:df:b5:a7:25:27:28:
17:97:ba:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:48:36 2025 by rpki-client