Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: rKnEU9bJYYKPDyVFEwujyFOUqMEdQljucEU5vqxeydk=
Subject key identifier: E1:DC:97:31:94:1C:E3:80:E8:9E:FF:F9:C7:D3:D0:F8:A1:12:D6:9A
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 01983DCEC2344B42DA72758FDCC970D7C24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 15FB
Signing time: Thu 24 Jul 2025 19:00:16 +0000
Manifest this update: Thu 24 Jul 2025 19:00:16 +0000
Manifest next update: Fri 25 Jul 2025 19:00:16 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: aBVK7B8h8mTgDAAP0wIgae7jIN1114J8Mhm9mHtVk8M=)
2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:ce:c2:34:4b:42:da:72:75:8f:dc:c9:70:d7:c2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Jul 24 19:00:16 2025 GMT
Not After : Jul 25 19:00:16 2025 GMT
Subject: CN=e1dc9731941ce380e89efff9c7d3d0f8a112d69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:b8:2e:6c:7a:55:25:88:c7:37:d5:6b:91:
4d:3b:38:90:fa:67:16:78:60:c0:83:f8:ac:01:f6:
2e:27:9e:12:95:f1:97:d9:39:8b:d2:8f:61:cf:99:
ac:0c:0f:29:70:aa:c4:3b:5d:78:42:70:74:51:bd:
74:6b:51:58:c0:f9:0e:40:07:47:f3:41:b7:b3:24:
66:0d:f4:93:07:96:4b:1d:cd:8e:b3:bf:00:f1:be:
f1:7c:e7:86:2e:2e:a1:f7:89:16:11:53:66:0b:a4:
21:9b:87:ae:4c:83:d2:9f:7c:df:8d:e5:10:82:4e:
08:1e:43:05:25:05:f7:5a:36:c3:57:34:29:c7:3f:
76:4b:0c:8a:d9:72:97:4f:5d:5f:56:17:d5:51:0f:
2f:46:63:ff:f1:62:e2:ae:52:95:b0:3d:40:f1:2b:
54:77:65:ce:b0:0e:79:e5:d8:2c:94:4f:a0:f8:13:
26:61:b8:85:4a:72:5b:3d:3f:ff:ff:7b:46:89:6d:
f3:1b:ab:bf:90:04:85:bd:9f:d6:6f:cc:7b:bf:5c:
07:5e:ad:ca:61:13:43:0a:d4:ab:c8:48:3f:ec:42:
fb:8b:54:77:e3:b3:3d:43:b5:a7:98:9c:8c:95:4c:
0b:b5:33:20:05:3d:de:98:7a:14:04:4e:c9:7b:b1:
1e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:97:31:94:1C:E3:80:E8:9E:FF:F9:C7:D3:D0:F8:A1:12:D6:9A
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7a:f7:cc:85:76:87:45:40:ff:8f:9d:60:71:38:cb:8c:46:
39:ef:20:d7:e3:85:80:9b:96:d3:a4:e2:36:0f:af:ce:5c:72:
9b:8a:43:94:86:60:53:6c:cb:aa:2e:40:c7:37:cf:bc:24:6f:
70:4e:52:08:81:32:1a:57:84:9d:4c:a0:32:39:65:55:59:b1:
3a:39:7b:f2:34:04:87:0b:e6:a3:5d:70:d7:13:03:bd:97:7f:
c8:e6:40:04:27:d0:92:a0:64:cd:e6:2d:b9:70:96:f9:56:22:
96:0d:18:05:0c:f6:63:6e:7a:8a:e5:0a:18:ca:e0:78:82:cb:
d4:e9:40:85:c4:c6:ce:87:6a:2a:5b:fc:8e:bb:c0:7e:fc:36:
6e:fe:77:5f:61:50:22:94:63:c2:7a:28:8b:7d:ef:83:e5:bd:
2d:13:a4:54:b3:c7:fb:ff:8a:fa:b2:5b:b1:ef:03:21:7b:5a:
d8:fa:af:ab:ed:19:d4:48:65:2b:c0:ef:75:4f:0c:1d:4e:eb:
e6:0b:46:a2:1b:46:58:7b:2a:6d:0b:65:65:2e:2e:aa:d2:5e:
8c:db:1e:a7:20:dc:d6:8c:ff:b2:ca:60:a2:fc:6d:89:ad:85:
0a:95:7c:49:3d:7c:1c:c5:e7:f1:ee:9d:a8:52:25:3b:17:be:
b8:95:80:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:52:57 2025 by rpki-client