Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier: DnL6ZxJkzQUE8PMkJPbnSow1B1uTe6+zg5o2gMwIEys=
Subject key identifier: EF:E7:52:7C:67:FF:27:B5:6D:EA:A2:87:B8:16:9C:50:48:16:0C:6D
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial: 01984AE5CC3586A71580445FE9D547465A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 08:00:30 +0000
Manifest this update: Sun 27 Jul 2025 08:00:30 +0000
Manifest next update: Mon 28 Jul 2025 08:00:30 +0000
Files and hashes: 1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: yDVGuGST5xHDcs6tctd9h84znttwPSzvysnJpAnrEmY=)
2: Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (hash: 5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:cc:35:86:a7:15:80:44:5f:e9:d5:47:46:5a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Validity
Not Before: Jul 27 08:00:30 2025 GMT
Not After : Jul 28 08:00:30 2025 GMT
Subject: CN=efe7527c67ff27b56deaa287b8169c5048160c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:cd:58:26:92:2f:e5:7b:c1:dd:11:e7:02:
76:b5:1d:70:bf:68:6d:93:6a:b5:d4:62:cf:09:42:
95:1a:bf:b9:dd:1b:cd:7b:1f:b2:6e:d5:60:52:75:
85:10:31:b0:1a:2f:67:8e:ab:c4:79:95:ad:d0:e9:
1d:5c:fd:ff:d4:c1:b2:da:b4:29:26:4d:e2:06:b8:
20:e2:fb:2b:26:91:b5:e1:f0:45:8e:1c:93:84:e1:
eb:7c:2f:21:3c:bd:6b:ae:9f:77:36:c7:3a:ef:41:
0a:54:a4:23:79:4a:7a:73:1d:ed:9d:8b:2a:e1:0f:
00:e8:6f:f4:51:53:f4:2e:3e:7b:6a:97:79:15:f1:
57:f8:58:26:82:9f:31:93:2b:49:be:9d:ef:93:3c:
01:43:e0:30:44:0d:e3:d6:0e:8e:6e:0c:16:e4:23:
15:b3:fa:e6:9a:c7:74:d1:84:c5:b9:7c:56:0c:67:
59:24:0f:d0:94:f9:d0:cf:0f:22:28:2d:87:ba:cb:
c0:b3:c3:a3:9b:3a:be:b9:da:ea:e6:8d:58:44:4e:
a2:af:e8:cb:15:ce:fc:1e:67:c2:6c:bf:d6:fa:29:
69:b4:4b:2a:f6:ee:89:85:7d:0f:e4:17:a6:9f:5b:
a7:15:7b:ea:e1:2d:6c:dd:fa:74:5f:c3:86:11:26:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E7:52:7C:67:FF:27:B5:6D:EA:A2:87:B8:16:9C:50:48:16:0C:6D
X509v3 Authority Key Identifier:
keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:70:d8:00:8c:14:4d:b1:13:53:a8:e0:ea:93:69:d7:7f:95:
a3:a2:96:cf:bc:ac:eb:1d:ef:33:7d:65:df:d6:8e:a7:74:28:
2a:8f:b9:9b:88:3f:98:5d:e6:68:2d:b2:2d:ca:72:c2:fe:34:
17:22:dc:35:d0:c1:01:14:5e:e1:c1:d2:a7:3a:cf:30:ec:86:
93:df:2e:1f:c6:4a:72:b8:c0:98:4e:41:7d:00:52:b9:67:1f:
50:48:ac:5f:96:9f:a7:92:e1:af:f8:1c:52:63:82:22:35:47:
0c:75:30:03:90:44:a7:43:45:4d:db:ce:a4:69:e0:28:f2:59:
08:ed:d3:7a:6b:69:5a:b3:c1:ec:7a:23:e2:e4:cf:bd:ff:a7:
7f:cf:2c:a6:af:87:7d:2f:75:8a:24:92:8e:a8:fc:c9:c5:80:
31:b8:90:3b:a9:1a:2e:9d:75:f6:fa:9c:c6:14:34:54:64:77:
38:24:78:5a:a8:ba:7e:9e:34:e6:61:10:39:af:e6:4f:46:20:
d7:1e:28:41:10:0a:58:a3:b8:a1:c1:26:22:61:38:6a:d5:f1:
39:ad:98:d3:51:e5:7e:33:39:1f:a5:10:2e:f3:65:ce:ff:2b:
fc:c0:1f:8b:32:23:f9:a2:7c:30:de:0c:9d:e6:86:4a:7d:21:
af:dd:60:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:23 2025 by rpki-client