Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
File: ct9pdDDLtXxJoKGZMCTW0yn35WU.mft (raw, json)
Hash identifier: 0QwtsY/oVKNxF7Pt6Az0FfRJ73qyqG8id/nGfdNgpQA=
Subject key identifier: 63:B3:0F:4D:EF:AD:44:9E:70:41:00:28:0F:9B:F4:FF:DD:C7:95:1E
Authority key identifier: 72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
Certificate issuer: /CN=72df697430cbb57c49a0a1993024d6d329f7e565
Certificate serial: 0198499C6BFDAECED428F399231806118F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
Manifest number: 10AD
Signing time: Sun 27 Jul 2025 02:00:44 +0000
Manifest this update: Sun 27 Jul 2025 02:00:44 +0000
Manifest next update: Mon 28 Jul 2025 02:00:44 +0000
Files and hashes: 1: ct9pdDDLtXxJoKGZMCTW0yn35WU.crl (hash: 3412xl0+uZRmnNTN9aRXs4ghBGKwhCa2c9XlPEffacY=)
2: hcuixNDtZTOahJr2Izkq1PkvB30.roa (hash: 0Y98rWR7z+ovo4LddJHUN4JqVyjOhGekgLOw4fEG1XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:6b:fd:ae:ce:d4:28:f3:99:23:18:06:11:8f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72df697430cbb57c49a0a1993024d6d329f7e565
Validity
Not Before: Jul 27 02:00:44 2025 GMT
Not After : Jul 28 02:00:44 2025 GMT
Subject: CN=63b30f4defad449e704100280f9bf4ffddc7951e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:aa:cc:52:77:f5:a1:24:fc:0b:4b:55:e0:
d7:43:b3:cb:d0:70:d4:5a:17:31:51:6a:65:b8:fa:
42:e1:06:8b:53:1b:87:5d:54:b2:ed:28:22:19:df:
bd:c1:4c:a4:fc:82:02:49:af:e3:02:8f:ba:e3:14:
ca:a2:72:74:ec:bc:17:35:d2:99:9c:95:66:52:0a:
44:0a:7c:5d:5a:5a:e0:ae:14:af:6f:23:32:e8:c0:
52:75:ba:13:2e:77:da:bc:2c:69:7d:7a:96:9b:f4:
07:33:c9:02:4d:13:ec:e7:65:fc:48:0f:74:80:6e:
e5:db:e9:bc:15:c9:08:73:7f:66:f6:22:d1:c4:ea:
0a:d6:45:8f:08:99:7d:68:8e:58:dd:11:7c:02:51:
18:92:21:a9:53:54:a9:b4:7e:36:c2:e3:f9:c6:21:
45:d0:7c:1e:71:c6:48:87:a9:57:d9:de:9a:b4:96:
5c:72:d4:27:52:88:54:1c:d1:d2:28:4c:a3:3d:ac:
fb:1a:e6:d9:f0:d3:f0:51:5b:0c:ad:21:b7:20:33:
31:5e:e2:6d:29:91:66:b0:c8:85:48:19:2f:4e:a6:
33:e9:2c:b3:1b:fa:b6:52:de:23:40:2f:81:8a:ac:
6f:7a:40:b0:29:06:d0:aa:dd:d9:ce:08:05:ea:d8:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B3:0F:4D:EF:AD:44:9E:70:41:00:28:0F:9B:F4:FF:DD:C7:95:1E
X509v3 Authority Key Identifier:
keyid:72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:09:ac:c7:1a:3a:96:0d:52:6f:e5:40:9d:44:7c:fc:7a:1c:
6f:9f:01:f7:81:56:70:e8:c9:7c:20:e4:01:8a:54:e0:ce:f7:
46:fa:fe:3b:b2:c8:08:38:87:cf:a2:d0:f7:dd:db:74:b3:06:
ee:a3:5b:02:a1:d1:55:28:e0:a4:73:cd:41:71:64:08:d4:f5:
7b:b4:6f:31:3a:9f:87:06:7c:17:cd:8d:a5:a4:56:bc:42:99:
e8:a3:0f:14:28:a5:8e:50:13:97:c5:16:5a:1e:0c:cb:01:b1:
92:59:56:87:4d:c7:93:b8:61:88:81:9a:f8:b5:e3:66:9a:03:
6f:e3:5b:87:39:db:29:97:eb:73:4d:64:17:84:2f:3b:2a:8b:
7d:85:25:5c:af:07:5b:3d:97:c5:29:bf:ec:0c:23:91:67:39:
ce:e4:a4:ad:9f:81:10:23:97:e9:c8:e9:70:95:70:5e:5b:fc:
6b:b8:36:a6:fd:7c:ac:22:72:0e:72:d2:26:90:ae:0b:ba:ec:
7c:97:45:bc:35:a3:64:da:fa:c8:c5:0e:c3:7f:40:18:28:c3:
fe:85:56:a7:04:99:b3:19:d2:66:32:4b:b6:ab:a5:fd:69:b2:
e3:2a:12:f2:f9:9f:9a:95:9c:d0:4c:2b:e3:61:f9:2b:2c:cf:
6b:90:a1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:20 2025 by rpki-client