Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier: QnYZAPHe982eNncrldwHXnqS96106nVz7MbQxM1cU0Y=
Subject key identifier: E5:AB:7E:4F:A1:8D:4C:09:E2:3D:01:F8:51:C6:4C:9B:C5:17:E2:84
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 019848F74CAC9B32898567E89DBEA8AC22D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number: 0CAE
Signing time: Sat 26 Jul 2025 23:00:23 +0000
Manifest this update: Sat 26 Jul 2025 23:00:23 +0000
Manifest next update: Sun 27 Jul 2025 23:00:23 +0000
Files and hashes: 1: 1qWzBwVhmQ6zdPJi5w7aMEYeKoc.roa (hash: QUUw5IgATMBX8godfHfSxzPR3Se/paZBDUtUUYMUESM=)
2: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: RKKRIj+MlUh90RoIhiRdCcpgAw7GBC+oo8BhmuVhgQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:4c:ac:9b:32:89:85:67:e8:9d:be:a8:ac:22:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: Jul 26 23:00:23 2025 GMT
Not After : Jul 27 23:00:23 2025 GMT
Subject: CN=e5ab7e4fa18d4c09e23d01f851c64c9bc517e284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:9c:f6:3d:1e:8f:f8:3a:17:8d:79:a8:01:
bd:91:c5:55:1d:c9:05:43:05:ef:7a:9a:23:fe:d2:
40:b9:99:f1:70:eb:9c:b9:99:4a:f0:b9:6b:c9:71:
c6:e2:6f:de:48:99:a5:2c:58:55:ab:54:a7:fc:98:
c2:a0:11:b1:58:c0:e6:63:6e:40:68:3b:8c:4a:44:
35:a9:8f:6c:e4:6c:43:3f:2c:71:77:7c:a1:6a:67:
45:35:01:cd:6c:49:c7:2c:a7:a2:e9:8a:da:de:4c:
c1:0a:0a:95:ca:5e:69:37:81:46:da:ea:2f:b0:d8:
d1:2d:5a:ca:93:3b:38:0b:ac:38:c8:cb:08:ca:38:
b1:77:4e:39:54:3b:3b:14:c3:89:02:df:fa:ac:c5:
b1:54:88:0a:fb:0c:6c:1d:ae:09:48:6a:b7:46:5a:
61:66:25:b1:00:7f:62:04:65:97:f3:8a:a0:25:b8:
fe:65:da:b6:a8:9e:10:a3:27:97:7a:fa:8d:a8:b2:
64:b3:42:0f:69:41:ad:df:51:bf:c0:eb:f0:f6:3e:
37:bc:9b:77:02:49:cc:2b:9b:42:6b:37:b4:be:d8:
41:34:a6:07:d5:43:fe:ce:1b:4a:62:b1:5c:f1:56:
de:b1:b9:93:18:2c:4b:8d:50:54:13:a9:c7:a2:d7:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AB:7E:4F:A1:8D:4C:09:E2:3D:01:F8:51:C6:4C:9B:C5:17:E2:84
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d7:95:39:25:fd:4e:ce:bd:a9:c0:a3:c7:8c:48:41:55:5a:
86:93:3c:a9:16:3f:ef:bb:e6:e5:46:6e:46:1c:76:51:41:fd:
46:2b:89:eb:14:d9:79:6b:61:e1:2a:7e:bf:c3:1d:07:1f:03:
7d:cd:92:0f:1e:87:fa:26:17:8d:5b:c7:15:05:fe:ab:f0:65:
4d:10:c7:a8:61:fe:b1:72:90:a5:f0:93:67:dc:af:e9:bf:55:
88:ae:24:26:41:49:b1:02:e6:ed:0f:6b:48:90:d7:f3:a6:98:
93:2e:96:28:f9:4c:25:55:69:43:5b:b1:22:48:a5:e6:c2:88:
f4:25:23:8a:64:d5:f3:66:18:d0:ae:1a:df:6b:52:12:95:87:
1c:74:8d:9d:0d:23:72:e2:b2:4e:15:f8:cb:1f:2f:9b:c6:36:
4c:4b:3f:31:5e:8b:32:36:01:25:74:95:52:99:70:86:9a:61:
6c:07:e4:aa:2d:94:6d:a5:6b:f8:cc:13:30:ea:0e:7e:c0:72:
6f:75:10:fe:19:f6:d8:f4:28:c8:67:c7:16:c1:bd:0f:06:bd:
b6:60:df:0f:18:f5:43:51:a1:f5:69:fe:08:5b:38:83:45:bb:
58:db:3a:04:44:4f:fd:22:36:2c:29:23:99:f8:76:ea:d8:5a:
b0:4e:46:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:37 2025 by rpki-client