Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: ITGuUuYapyTnFEmvj2i3Y+7pY87j7LT5+uhMNqeS08U=
Subject key identifier: D1:E6:6B:B3:A4:F7:51:38:07:36:C3:A5:54:B8:2C:C7:05:74:9A:7D
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 01984BF8ABB48E7A011E940623A3878DB823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 0AD3
Signing time: Sun 27 Jul 2025 13:00:44 +0000
Manifest this update: Sun 27 Jul 2025 13:00:44 +0000
Manifest next update: Mon 28 Jul 2025 13:00:44 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: BgJzVW7BnG6KsRlkiU0k9xKvCetG6Q5wc0SmCLnroYc=)
2: TvqtU6kGEWNG1Cpdb9p7065y7Us.roa (hash: feIhe0HlEu5dhdmycewb1eBF/nryf3+/l635UbwMTEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:ab:b4:8e:7a:01:1e:94:06:23:a3:87:8d:b8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Jul 27 13:00:44 2025 GMT
Not After : Jul 28 13:00:44 2025 GMT
Subject: CN=d1e66bb3a4f751380736c3a554b82cc705749a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9b:90:e2:ad:bc:c8:3d:ac:d5:d4:e1:e9:d2:
51:f9:9a:d2:c0:2e:4f:fe:91:a3:09:48:54:d5:11:
58:73:6d:d2:91:96:c1:8c:15:f8:1d:c5:50:86:e5:
84:c0:29:45:eb:b6:51:78:3f:47:d0:98:dc:c4:f7:
fc:8d:e7:cc:a3:2d:48:ed:eb:be:a3:d8:7e:01:68:
45:ad:ae:ef:ef:ec:63:90:cd:2b:2e:10:15:19:5b:
0b:b7:c1:1c:fa:b9:c5:f6:5a:02:cc:81:17:9c:ea:
d9:22:46:56:ab:e0:92:21:07:e9:72:f1:2f:f1:bc:
54:42:b1:7c:d4:cd:3a:22:0e:55:5c:50:8c:3a:07:
54:b0:42:7e:1d:18:18:12:fd:d8:43:11:c7:5e:7e:
31:86:cd:d7:72:45:34:55:8b:87:e2:3f:b3:75:88:
a0:55:cc:2a:c9:2d:cc:99:1a:6f:3b:28:4d:74:2f:
ce:65:3c:e2:6f:99:54:9e:83:1c:06:09:8d:65:71:
82:73:cb:82:ee:a9:f5:2e:db:f1:35:b4:46:86:a9:
b9:0a:60:90:68:af:b3:f5:7a:4e:93:75:8e:d1:df:
35:da:35:6d:e5:d3:90:cd:92:30:16:1a:d2:25:f7:
74:37:df:5c:47:c2:28:95:84:85:68:45:76:d8:0b:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:6B:B3:A4:F7:51:38:07:36:C3:A5:54:B8:2C:C7:05:74:9A:7D
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f6:5a:28:67:99:5b:67:d9:f5:c3:93:59:7c:27:60:1e:a5:
74:eb:71:6f:8d:6b:95:55:a4:9a:23:7c:b5:54:de:af:54:9a:
5b:71:b0:22:52:b2:07:fb:91:d4:ab:fb:42:5b:7f:9e:20:fd:
e1:4e:a4:76:c8:28:80:7d:7c:2e:56:c5:e1:4e:30:1e:c6:cf:
20:99:b2:fd:82:d5:23:1e:4c:5e:b9:f2:03:74:9b:5d:ea:a1:
55:31:f2:87:ee:32:97:dc:fc:29:d4:ab:eb:cc:6f:9d:f1:91:
17:9d:c1:4d:94:d4:97:5b:be:e9:c1:b0:a8:56:0e:fb:d9:78:
de:7c:b4:a8:e8:44:08:22:13:10:52:32:2e:b2:da:8d:71:e1:
06:9b:6d:f2:10:4c:a8:75:ef:13:7f:67:7c:12:44:96:40:21:
e5:f9:9e:e9:ce:f7:ce:d5:41:ea:dd:4d:69:be:b2:66:a5:f9:
e9:4b:16:62:a8:44:f2:6e:85:fb:ca:5d:b4:f2:dc:0e:1f:4d:
d6:18:96:a4:65:5b:f4:ea:c7:ff:54:63:16:da:f6:3a:73:50:
d4:30:55:70:ce:5d:78:29:c9:d7:8e:b7:aa:83:bc:74:e6:61:
55:00:8f:b1:ec:be:32:4c:d2:9e:27:ec:35:e6:5c:a9:06:c5:
f3:2d:f8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:54:38 2025 by rpki-client