Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: f7fmrnFq0cmQ9JVKl9nqUGDYc286iOBxcgKShQv+k5Y=
Subject key identifier: C2:73:73:FE:A4:C4:C6:51:4C:85:66:18:CE:1F:B9:13:FA:B0:95:8F
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 0198529F5A157ADB29880D6626DFB3F19789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 160E
Signing time: Mon 28 Jul 2025 20:00:31 +0000
Manifest this update: Mon 28 Jul 2025 20:00:31 +0000
Manifest next update: Tue 29 Jul 2025 20:00:31 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: 3PdrQZsFo383yUTuYO7Dy++BMYQ/ORvdwuxZUUN18J4=)
2: h04E6GUTfk7g-nszYeXV5v59Z7g.roa (hash: D0nODnBLfeAlBTbUkjxGcmmT4S/QYeiGnt9Aow5Sjx0=)
3: xJetAjXRbPTX957PRc-ZRikOCag.roa (hash: zIdEISxA+75bDRZATAE0MJ7G/Gr2I74NP3sEuTFZFW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:5a:15:7a:db:29:88:0d:66:26:df:b3:f1:97:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Jul 28 20:00:31 2025 GMT
Not After : Jul 29 20:00:31 2025 GMT
Subject: CN=c27373fea4c4c6514c856618ce1fb913fab0958f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:75:16:10:d2:3d:84:7b:0f:e5:5a:99:d1:
e9:d2:e6:b9:7e:9a:1b:29:62:ac:27:c4:37:be:66:
8c:3a:15:6b:fa:5a:73:fc:41:65:48:e1:b5:93:be:
72:15:2d:17:27:15:a7:48:6f:cf:5d:3b:39:b0:4d:
83:e3:04:ec:42:bd:62:ff:2b:45:96:83:01:4c:66:
f7:62:9d:ce:4a:7b:8f:13:e1:35:8c:77:14:a8:78:
3f:d3:f3:0b:2c:e4:04:c3:f4:b0:40:13:0e:9a:9c:
df:bb:61:24:6e:54:ac:21:df:a0:f1:64:01:fd:e9:
be:09:dd:08:7d:63:c2:6e:6b:2b:81:80:01:59:62:
59:54:51:84:46:84:bf:af:39:48:39:1d:77:25:3a:
d2:f9:e3:41:d9:00:6c:60:e5:02:13:4f:db:0d:b8:
83:fc:ef:cd:f5:c9:25:d1:95:d6:37:3b:b3:7a:40:
1f:9b:9b:79:d3:06:e6:34:2c:5f:15:e8:83:42:61:
3f:62:a5:30:37:01:14:31:ed:f8:8f:91:e6:8d:fa:
42:a7:7f:ed:79:2a:d9:71:47:96:a9:f0:9f:ce:4e:
0c:c4:07:54:e7:af:60:f9:ce:31:90:af:5e:ad:85:
5f:9f:b2:5b:bd:90:cf:08:2e:79:64:02:30:d6:f3:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:73:73:FE:A4:C4:C6:51:4C:85:66:18:CE:1F:B9:13:FA:B0:95:8F
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9a:e5:76:3b:96:c8:a9:c5:d3:aa:f7:d3:e4:18:13:33:d8:
f7:19:63:a2:f8:e3:b7:82:97:ef:41:71:1f:5b:ce:77:f2:f4:
cd:b7:36:2b:03:2e:0b:6d:6b:77:46:15:3a:e3:28:95:9c:47:
e7:0c:0e:45:b7:32:75:8f:c8:96:5b:61:a1:09:09:ea:0e:81:
83:58:86:28:36:2b:c8:69:33:c7:e5:8f:36:3c:e5:d0:91:7b:
57:3c:5f:20:ad:60:8c:45:52:7a:0f:4e:fa:20:af:c3:b9:8e:
88:b3:65:04:fb:b3:c6:4b:d6:04:7c:58:83:bb:37:f4:92:c4:
02:08:dd:5c:61:ed:8f:69:41:b0:51:66:59:22:88:68:64:3e:
16:40:2a:33:cb:bc:df:e2:05:1f:62:a9:da:40:81:28:df:e0:
53:ce:07:ef:51:e5:4c:64:72:16:3a:d7:ab:87:a0:2e:5e:26:
a0:de:47:f4:d3:95:44:9a:63:57:a6:84:08:6f:62:d6:f4:02:
94:cd:de:09:26:fd:0e:06:55:9b:e8:68:f7:0e:0a:3e:9d:45:
a9:1b:7b:cd:56:f9:58:39:94:7b:f8:b1:81:6d:37:47:d7:51:
e0:8d:11:c6:a1:da:53:d5:4e:e0:93:02:3b:6f:b3:cb:f4:e5:
91:81:31:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:14:38 2025 by rpki-client