Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
File: 9VW6bis9tVIdvHBipYwW3aG58i0.mft (raw, json)
Hash identifier: fYDOy4DZ7tBaI8+py4XjBaUWLr2kup4CnJssaJl3/tQ=
Subject key identifier: 8B:1D:F9:D0:6C:21:1E:EE:AA:3A:74:D5:79:D9:55:63:95:F9:71:7F
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 0198578F2AB388FAD22C136947C36B8C95B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
Manifest number: 03C9
Signing time: Tue 29 Jul 2025 19:00:56 +0000
Manifest this update: Tue 29 Jul 2025 19:00:56 +0000
Manifest next update: Wed 30 Jul 2025 19:00:56 +0000
Files and hashes: 1: 2n7OMl3jQfBIql5u4fGHwPSLtNw.roa (hash: 1rKFkHzCGzWhEvrCyPc6hzfuk0GlXlkcWKE6261l+UI=)
2: 9VW6bis9tVIdvHBipYwW3aG58i0.crl (hash: QfUUuQIQtLhDO21+Ie9xJqo15kw110ocv94pEUv0RaI=)
3: R9C9RHOYfHsQX3_4qdQpXgxkEVg.roa (hash: TG8phgVc45ubyKw+a5c8BVXvVbA9fhRO3sFvs8XmDD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:8f:2a:b3:88:fa:d2:2c:13:69:47:c3:6b:8c:95:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Jul 29 19:00:56 2025 GMT
Not After : Jul 30 19:00:56 2025 GMT
Subject: CN=8b1df9d06c211eeeaa3a74d579d9556395f9717f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:00:a5:e6:02:28:a6:07:a1:3d:6f:30:30:
c2:6e:9e:be:a6:3b:89:6e:9e:e0:b1:5e:c7:77:6b:
fa:ef:78:14:b3:70:ea:2d:95:69:80:38:95:90:a0:
9f:f6:92:af:0a:bd:78:b8:32:70:0b:6b:5e:87:bf:
69:94:12:96:f3:b0:08:d0:a8:09:5b:3e:81:2e:0d:
b1:68:3a:d3:76:62:a0:81:23:33:d0:2c:02:3a:f7:
93:ef:c2:2f:71:a3:fc:4a:99:d1:13:cb:66:65:f9:
0a:f6:b3:18:9d:fa:1f:82:f0:46:e1:ba:3e:65:a3:
be:c9:07:ef:e7:af:f2:36:11:38:0c:36:7c:5c:a9:
31:1b:6c:bc:e4:59:5d:f2:a2:e1:d3:f4:82:16:3f:
23:05:cb:90:ff:a9:e9:d9:61:44:d6:e2:c6:43:74:
58:b0:0e:cb:bf:a7:6e:ab:89:7b:cd:0d:a9:e2:f5:
1c:03:61:cc:05:fd:92:4a:c0:1a:2d:bd:42:e1:44:
13:12:c0:85:86:44:7d:97:26:db:92:bb:af:37:c4:
93:d4:af:1e:3b:de:cd:35:34:1a:f9:b9:4b:38:01:
0b:e8:b1:4f:61:21:c5:ad:50:aa:85:f7:b8:85:67:
2e:ad:f6:d1:e4:10:5b:40:68:57:62:cd:59:68:2d:
7a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1D:F9:D0:6C:21:1E:EE:AA:3A:74:D5:79:D9:55:63:95:F9:71:7F
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b1:e9:21:ad:80:9e:e7:a1:6d:8b:21:43:95:2c:5f:04:8d:
99:47:48:dc:e5:4b:ce:65:75:73:56:de:a2:c1:ad:79:83:64:
74:2e:6e:a5:b0:57:77:e1:51:46:e8:06:cb:35:a6:99:06:88:
dd:6f:5d:83:a8:68:17:79:1e:15:9a:c5:2d:5d:08:64:1a:91:
48:81:65:f7:b2:eb:6c:23:0a:2a:2f:24:9c:40:c7:f1:54:d4:
38:2c:ca:0e:f0:29:5a:c8:7b:df:9b:ef:fb:cf:ec:95:14:49:
f7:4f:41:e8:81:a0:01:be:5e:c7:a7:7c:c1:c0:15:1a:22:75:
bb:6e:e3:8c:30:cf:16:4f:8c:b6:19:01:bc:44:7b:e0:25:55:
58:19:4a:24:f3:5e:b0:32:04:ea:b2:54:10:4e:17:e6:7b:ae:
6e:42:3d:df:bd:d8:12:83:aa:82:d0:3e:ba:63:ed:c1:28:d5:
c5:83:6d:a2:9f:53:24:d4:3d:a4:69:66:52:80:fe:67:3c:33:
7e:b3:15:19:80:cd:02:e7:a9:02:89:eb:69:f6:e5:c3:9d:d1:
29:a8:9a:fe:a8:52:77:67:1f:73:1f:a8:4c:b6:bb:bd:e7:8c:
c4:f4:55:f1:e0:c8:22:15:46:2d:fb:97:cf:6f:e9:7d:8e:f0:
00:b0:77:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 22:12:05 2025 by rpki-client