Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
File: c9-R-zxozrhlDuGaY85As8WSpWs.mft (raw, json)
Hash identifier: 3moApdF6JSDXwsG4WXJxl4tI8kkDeI/v6sHV/k2mCW8=
Subject key identifier: F7:8C:8C:28:DB:1E:58:D2:75:A3:E6:DF:18:C7:23:46:57:A4:73:17
Authority key identifier: 73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
Certificate issuer: /CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
Certificate serial: 01984B5481DED931788F6C354BABC1912309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
Manifest number: 15FB
Signing time: Sun 27 Jul 2025 10:01:26 +0000
Manifest this update: Sun 27 Jul 2025 10:01:26 +0000
Manifest next update: Mon 28 Jul 2025 10:01:26 +0000
Files and hashes: 1: 0amjr-ykBDXEbQi_cMXvoQKh8bk.roa (hash: pJpLLUDDlGjGkAROaE4HmHEdylVREbndXEfDAHQqlPs=)
2: c9-R-zxozrhlDuGaY85As8WSpWs.crl (hash: QucvPaoCSjJE0gKg9IqftRs3reFvNDnvGm67IAHRV4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:81:de:d9:31:78:8f:6c:35:4b:ab:c1:91:23:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
Validity
Not Before: Jul 27 10:01:26 2025 GMT
Not After : Jul 28 10:01:26 2025 GMT
Subject: CN=f78c8c28db1e58d275a3e6df18c7234657a47317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:fa:0a:6a:db:14:8e:74:4d:6c:08:76:bc:
2f:0e:ba:04:31:4c:f7:42:d0:48:3b:fb:7a:32:a6:
63:83:f0:89:68:e4:1b:40:7a:7b:10:e0:cf:0b:1b:
16:9f:43:2d:c1:7a:fb:1a:1f:8b:42:c3:5b:8e:6c:
f4:2b:e8:e4:dc:03:11:fa:78:2f:15:10:2a:4b:f6:
12:8f:d4:d1:0c:a3:f6:a9:59:cf:d7:c9:bf:06:d5:
e5:cc:be:24:f9:96:6a:27:76:25:63:6a:26:a9:b5:
24:b8:df:77:46:3e:ed:6f:09:f9:63:95:ba:c9:05:
2a:49:aa:b3:d9:12:0a:d3:79:c5:9b:45:b0:bc:31:
fb:f9:98:6e:56:a7:9c:fe:2d:67:7c:c8:56:d4:bb:
34:6e:f3:bd:6d:b0:82:ac:96:c9:51:2f:ef:71:c5:
b4:98:9a:92:ee:fd:75:47:87:ef:7b:e3:bb:9d:d6:
ec:3d:70:bc:18:2b:89:70:d7:1b:12:a2:8f:4f:e7:
d2:01:ca:c5:d5:98:76:33:5c:c5:42:e6:8c:60:f9:
c0:7e:53:45:1d:a4:c5:19:93:4d:cd:b1:e6:25:54:
dc:13:93:8d:47:1f:73:f6:86:05:38:74:85:8c:68:
92:b9:7a:53:25:4a:d4:0b:0f:a9:bc:67:d1:fd:99:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8C:8C:28:DB:1E:58:D2:75:A3:E6:DF:18:C7:23:46:57:A4:73:17
X509v3 Authority Key Identifier:
keyid:73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:74:d1:a6:c4:68:34:3e:d7:ad:b4:76:94:7e:ec:2e:d5:49:
da:f2:45:21:f6:e2:44:ce:6b:cc:85:0b:41:a6:a9:28:86:82:
9f:01:dc:83:6f:95:d7:9b:4e:a4:f6:df:99:5e:58:88:7f:00:
b3:72:80:99:23:0f:73:57:9f:85:f1:d1:66:34:86:5d:9a:bb:
cd:22:3a:8b:61:b1:21:29:19:36:87:76:63:d0:73:17:ff:6c:
13:3d:4f:fb:de:8f:3c:61:e9:87:cb:ef:a2:06:24:c6:be:0b:
df:b5:fd:86:58:b7:fe:94:fd:a6:4a:cf:ce:4d:e8:68:19:9d:
6a:93:95:e8:48:fe:e1:59:3a:29:3b:dc:cf:e4:74:b5:3d:76:
b3:df:83:ee:13:4e:67:f9:aa:a8:91:55:29:d6:39:7c:68:99:
43:b7:40:31:0c:ab:5e:77:53:d7:5d:05:ad:4c:9d:03:cd:b2:
df:40:6e:00:fb:6d:8e:e2:5b:56:9b:cd:7e:85:17:22:ed:34:
5a:72:05:b1:ea:c1:d6:ca:a8:97:23:82:cc:85:0c:d0:7a:7d:
4c:91:d2:32:d7:bb:33:ae:4b:02:24:a5:a3:64:2c:20:02:9c:
3f:14:df:9a:b4:f7:1b:5a:dd:5b:9b:a9:1d:cf:44:7b:b5:4d:
39:fc:0e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:36:10 2025 by rpki-client