Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
File: V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json)
Hash identifier: wyc/ul3hVg0V0Kf3aUUOR81d19qrCBvomeDBNM0DtWE=
Subject key identifier: 8C:C8:89:A6:A6:5C:86:49:59:B9:D0:B5:FC:04:C6:90:3F:06:93:4B
Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
Certificate issuer: /CN=57db143c17fb051944426a79f24334c25cdbc234
Certificate serial: 019849D3B5C047221B440803D4A5C9D3DC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
Manifest number: D6
Signing time: Sun 27 Jul 2025 03:01:08 +0000
Manifest this update: Sun 27 Jul 2025 03:01:08 +0000
Manifest next update: Mon 28 Jul 2025 03:01:08 +0000
Files and hashes: 1: LGPCXsstqIHfBFoiMfK-mbsBUjw.roa (hash: 7stOVhfnEQBs17GDG+FcbDZCYanm4iM/V5R3N/Vll+k=)
2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: SJ1hByvBW1FFgoUxu/y/LUDYo4Pi1B4gCD+heQmUpiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:b5:c0:47:22:1b:44:08:03:d4:a5:c9:d3:dc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234
Validity
Not Before: Jul 27 03:01:08 2025 GMT
Not After : Jul 28 03:01:08 2025 GMT
Subject: CN=8cc889a6a65c864959b9d0b5fc04c6903f06934b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:38:f0:b2:4e:a1:00:25:37:e0:02:6e:de:
69:a1:03:6b:72:4f:fb:14:2d:01:79:11:70:72:34:
54:b0:20:df:79:10:96:51:96:06:4b:ca:55:3c:59:
b0:0e:8b:70:f2:ff:e3:59:17:2b:39:19:85:ec:94:
be:e1:6f:66:57:3f:58:c9:b7:b4:c4:64:20:81:30:
be:bd:56:58:01:98:e3:7b:3a:69:74:f0:23:ba:6e:
3f:46:82:d6:41:ee:29:c7:bf:21:92:77:d4:7d:8b:
28:a3:de:97:51:06:22:5d:f0:40:8f:58:dd:b6:ba:
b1:cf:b7:69:de:8f:92:f3:1f:e9:8b:e4:4c:e7:9a:
96:30:92:87:d3:61:2a:8f:36:c9:94:e2:5c:d4:07:
df:0c:b6:d8:c8:a7:17:63:8e:1f:57:7e:c2:0c:84:
82:ac:f9:19:2d:17:f7:df:42:e9:68:eb:d5:0a:e3:
29:20:dc:e8:02:ae:d2:4d:ca:00:9c:b8:1e:2f:3f:
c1:3f:93:18:38:1b:30:82:72:42:4f:76:62:18:4d:
52:84:07:12:b5:e0:8a:a3:74:70:8d:9a:84:7c:7a:
83:f2:47:b6:f1:08:80:5c:58:a4:50:40:1b:eb:65:
68:83:4f:56:46:f8:e8:84:b0:e8:c7:ba:35:e3:1c:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C8:89:A6:A6:5C:86:49:59:B9:D0:B5:FC:04:C6:90:3F:06:93:4B
X509v3 Authority Key Identifier:
keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:5b:b9:98:4b:15:01:10:c3:38:59:de:a5:2f:7e:da:da:66:
b7:b8:90:2d:eb:e8:27:74:7b:ee:44:13:70:db:cb:ed:19:05:
6b:54:52:f3:04:a7:25:98:96:48:f1:70:22:28:cc:e0:16:4c:
03:8f:3f:81:e6:26:61:f7:f9:9e:e2:6a:8d:f4:89:38:31:8c:
6e:89:eb:8e:34:df:28:66:e7:cf:d3:4e:41:82:7e:26:8a:04:
e8:af:9f:0e:ec:51:7e:61:33:28:2c:fa:1d:ed:ec:c5:b0:c2:
05:8f:a1:fe:a9:19:1e:d9:a2:27:67:3d:4d:e3:7c:a4:2d:e1:
13:60:41:38:76:fc:c8:3c:46:d9:09:5c:48:46:e6:29:e2:fa:
d9:29:e4:7f:3c:85:18:49:12:03:89:37:3e:cf:03:b2:a5:40:
02:ad:13:ea:a7:9d:3e:3f:3d:52:32:e6:b4:ff:c6:8e:97:bc:
85:bf:ea:02:c4:ff:a9:10:24:0e:c3:3b:99:9c:2f:11:03:53:
dc:6d:a0:d5:f2:8f:11:67:10:11:67:20:33:21:2d:3f:2f:b7:
11:db:57:ec:fb:1d:f8:67:49:99:94:0b:90:0e:5b:9c:0b:27:
b0:bd:3a:82:8b:fc:67:1c:d6:cf:ee:9e:48:55:ac:c6:b4:0b:
ca:7d:21:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:17:01 2025 by rpki-client