Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: M6nsAS3e+ZZd2TnenDL5G8tJbsbAr2w8es5cj/Ge5uI=
Subject key identifier: 9B:10:3B:68:70:28:7A:7C:82:0F:73:69:5B:C3:F9:66:6E:53:40:DF
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 01984AE5F0534BCFBD1085C698D20CBD2DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0A7C
Signing time: Sun 27 Jul 2025 08:00:39 +0000
Manifest this update: Sun 27 Jul 2025 08:00:39 +0000
Manifest next update: Mon 28 Jul 2025 08:00:39 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: n8KAMTNbr+6SKLNfzU0g3qF3UA4SWGY5+O5NfkdzveA=)
2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=)
3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:f0:53:4b:cf:bd:10:85:c6:98:d2:0c:bd:2d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Jul 27 08:00:39 2025 GMT
Not After : Jul 28 08:00:39 2025 GMT
Subject: CN=9b103b6870287a7c820f73695bc3f9666e5340df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:e7:16:4b:d5:11:f3:af:e6:e3:fa:ab:0a:
22:83:c3:41:df:57:9b:10:96:c8:01:5d:fe:32:8b:
9e:ea:4e:ca:c9:e9:f7:49:3c:2a:56:fc:23:83:50:
b5:3c:ad:7a:5d:ba:e2:e9:56:e7:1a:dd:e4:22:a7:
c0:d5:e1:5c:02:82:ee:96:d4:c0:5f:cd:70:7e:5b:
12:1f:05:c4:ca:86:2c:76:f3:ec:af:a9:d1:63:da:
88:d6:95:3e:6d:b8:37:ac:cf:dc:1d:0f:39:be:79:
06:a2:05:fa:b0:18:e4:e8:da:ad:2e:7f:1e:54:78:
d0:7e:51:13:fb:b4:89:74:a4:ea:9b:c7:72:c0:3f:
8f:c4:51:82:29:21:05:18:0d:4e:b9:54:ce:c2:0a:
62:ad:55:9f:e3:df:fe:80:00:dd:e5:d7:08:1a:2f:
b6:c1:7b:9c:b6:8a:94:37:81:4e:33:62:f2:b0:63:
de:6e:25:1b:cc:79:5e:3e:29:29:57:78:21:b9:54:
23:7b:6f:c6:86:ab:f7:32:a8:b1:dd:05:b8:00:73:
a5:a3:25:6b:7a:f9:b2:23:24:ed:d3:d7:5e:1c:3e:
2c:b9:b2:2f:0f:ff:76:89:e5:ba:37:65:92:6f:01:
39:38:39:6a:8a:dd:67:ab:40:a0:e1:7a:3e:0d:fd:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:10:3B:68:70:28:7A:7C:82:0F:73:69:5B:C3:F9:66:6E:53:40:DF
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:df:5e:c6:db:11:90:45:0d:be:67:43:6b:62:1a:07:0d:bd:
26:fb:2f:ca:fe:7d:b9:f0:da:08:a4:2c:cc:04:84:7b:59:13:
59:44:db:0a:0d:eb:ea:d4:fc:2d:83:38:fa:2d:75:94:08:e7:
8d:d4:5b:7e:53:1e:bc:e7:e1:ca:1e:a6:eb:fc:72:fc:07:8e:
d2:43:e7:85:8f:15:8d:4e:51:80:47:23:39:4b:75:76:0f:2b:
13:9a:ab:f5:d0:34:d1:78:18:40:53:c7:2e:38:d6:01:5d:c4:
a2:0d:a0:9e:0b:c9:0d:e2:9c:be:8d:e0:3c:86:5c:2e:fe:d7:
b3:ff:bc:72:56:22:a5:ba:1c:57:e5:16:51:b6:e3:82:aa:7e:
1e:26:a6:35:51:7a:bb:e7:11:f0:b8:f9:3a:33:9e:88:19:d7:
4d:3a:89:02:ae:89:34:a4:40:a2:4e:91:bc:18:c3:85:bd:94:
65:0d:f3:ab:a2:49:29:7a:f2:04:64:c8:ee:76:63:2b:86:a7:
f1:8e:9f:6c:42:9e:6c:61:77:ce:18:43:a3:90:98:8d:1f:15:
b8:42:d0:38:b9:df:fc:92:51:6d:dd:e3:a6:a8:0e:b7:0d:4a:
3c:ae:a9:f2:e4:84:53:af:ee:b2:ed:70:79:77:1e:66:a6:68:
e1:3e:9c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:41:45 2025 by rpki-client