Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: LDcC6WaehzSfPy0Al18uOmlebC37S5IjNrBAyEsfDPQ=
Subject key identifier: D4:66:D5:8C:E0:D0:53:41:3B:EE:47:70:40:FE:17:D2:21:58:DC:FF
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 019826A2BAF95A2C6A27BEA85EBFF82E8D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 1580
Signing time: Sun 20 Jul 2025 07:00:55 +0000
Manifest this update: Sun 20 Jul 2025 07:00:55 +0000
Manifest next update: Mon 21 Jul 2025 07:00:55 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: RtiTWgTcNvMq2d78xPBfWNVQTPptFMF6YIcqiUQVTlc=)
2: DSwyNAuAz2bJdfrLonxlYBob04I.roa (hash: 3+/CvQ/0iqsF5SqvqkyipksHlcWBh/rqDJFf0zM3tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:a2:ba:f9:5a:2c:6a:27:be:a8:5e:bf:f8:2e:8d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Jul 20 07:00:55 2025 GMT
Not After : Jul 21 07:00:55 2025 GMT
Subject: CN=d466d58ce0d053413bee477040fe17d22158dcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:09:22:c9:b4:4c:aa:66:f3:18:42:23:c1:
26:9c:3b:df:4c:8e:5c:8e:42:f0:65:8f:ba:1d:27:
8f:16:8d:55:fc:4c:97:f7:0d:19:9d:60:b1:03:c9:
ec:9a:b5:81:13:8a:85:bc:f6:5b:b2:8b:59:98:9b:
1d:6b:a7:6d:46:6c:3e:e9:15:f2:4b:6c:22:3c:3a:
e0:13:33:7f:05:49:a5:f0:25:43:a5:74:1b:06:a6:
24:33:0e:c7:f2:57:35:6c:81:c3:b6:1a:50:53:d0:
9d:6a:74:98:b8:4d:49:5b:a0:f0:14:01:8c:2e:41:
5e:88:7f:a6:92:62:97:ab:17:05:0b:5d:f3:54:a7:
d9:4a:d3:84:62:f1:87:f5:c6:05:2b:fa:22:fc:be:
d2:31:67:00:a2:46:dc:04:84:de:d6:83:6e:ca:18:
61:08:69:f0:d9:f4:6b:8c:6b:bf:c4:c7:f0:ed:10:
ef:46:83:d4:68:1c:89:86:4b:f0:1d:33:97:e4:06:
4d:df:e5:7e:eb:26:31:f1:5f:35:6b:63:9e:8f:59:
7b:5f:10:2f:c7:86:47:11:c1:0b:3d:45:d9:09:37:
3d:04:84:2e:ad:d6:fb:8e:de:d4:bd:05:a0:a9:47:
ff:f8:80:23:fa:35:80:4d:24:ee:09:0d:6d:48:5a:
fc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:66:D5:8C:E0:D0:53:41:3B:EE:47:70:40:FE:17:D2:21:58:DC:FF
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7d:56:1f:23:7a:71:b8:f0:c7:f7:17:a1:5f:0f:de:ad:30:
cb:1d:27:06:dc:d0:58:47:36:52:41:da:c4:d8:9f:cd:88:0b:
24:7a:1f:d3:3c:49:2b:2d:2b:7c:f5:8e:ef:e3:88:1a:7e:77:
8d:61:c3:c4:ca:82:cd:40:26:1f:ac:1c:77:00:4c:2e:16:ea:
64:c5:a8:8b:8c:53:33:81:e4:6f:da:4e:e8:d3:a2:07:10:bd:
0d:76:52:a9:8e:a5:cb:31:c8:c8:08:df:9e:8d:4b:ad:99:b8:
e8:b0:d5:c5:6d:3d:b1:1e:0c:26:30:d3:d4:98:a5:f0:da:34:
d5:12:c6:6a:3e:1b:da:98:ac:7b:63:04:7f:b8:76:eb:c4:df:
65:87:3c:8e:4d:56:06:77:de:db:3f:4c:1b:3c:01:3b:ea:3c:
10:73:45:fc:f8:84:b0:49:96:00:18:84:88:28:44:99:1b:09:
3b:7b:f0:f5:c8:bf:2b:a9:f2:bf:11:db:6c:9b:d2:02:1f:d6:
9a:69:b7:bd:92:b0:22:01:8f:85:fe:5a:6a:68:5b:b0:2e:2b:
e6:b8:ab:e7:77:fd:4b:1a:e5:10:0a:9f:5c:e6:08:1e:92:46:
2e:80:94:2b:3d:b5:ef:6c:0c:b1:c4:a8:4f:9b:65:99:58:6e:
3d:23:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:25:55 2025 by rpki-client