Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: NhwBT/4vSCp//c3lPftJM/zNgcRiyxv5QUiMXt8z0II=
Subject key identifier: D9:57:BD:EC:6E:31:1F:EB:76:3B:9A:54:C7:CD:A7:95:60:D2:0E:4D
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 019849D30FA9477BFFE26789686A4A942601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 0CE2
Signing time: Sun 27 Jul 2025 03:00:25 +0000
Manifest this update: Sun 27 Jul 2025 03:00:25 +0000
Manifest next update: Mon 28 Jul 2025 03:00:25 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: ++3kjyA/oZgNK6KA/ykSoPpmW/dDqQ6+XkMxnVccoHk=)
2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:0f:a9:47:7b:ff:e2:67:89:68:6a:4a:94:26:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Jul 27 03:00:25 2025 GMT
Not After : Jul 28 03:00:25 2025 GMT
Subject: CN=d957bdec6e311feb763b9a54c7cda79560d20e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:99:79:fc:ac:12:a8:66:73:9e:9f:38:6f:
5b:3f:fd:09:94:e0:4d:84:d5:86:d6:88:db:2b:d7:
ce:64:83:8c:3c:23:3e:95:82:4d:f2:99:46:83:e9:
0c:34:f6:18:0a:b5:66:48:84:9c:d7:1f:4c:e1:e8:
b3:1e:66:03:a1:f7:71:a0:ff:c3:74:02:89:97:4a:
5e:39:df:56:06:19:3c:74:83:2b:ef:02:5a:56:05:
41:24:62:5a:56:cb:90:ce:15:d9:e5:46:ed:93:e6:
4c:e1:17:eb:69:9c:da:f6:8b:fd:04:4f:6b:c2:71:
5b:3a:6f:a0:fe:fd:9d:77:92:cb:b3:89:03:0c:77:
27:6f:2c:ad:21:0c:4c:af:b0:99:d0:24:e0:bc:18:
f5:6f:22:dc:2a:bc:d4:87:a2:8a:c1:43:fa:92:55:
93:06:8a:9c:83:48:ef:86:c8:c9:dc:40:9a:4f:6c:
d7:00:a6:20:1c:de:a2:34:74:83:4e:a2:89:e5:f8:
4c:8d:41:b9:40:53:e6:57:9a:f9:32:ba:b2:ff:6f:
f4:28:e5:ed:f1:9a:04:03:cf:86:e7:ac:a1:1a:10:
3a:33:44:ed:05:11:35:9d:23:30:5c:96:a2:11:bd:
0b:9a:b7:49:1e:d4:e7:3b:2b:0e:6d:06:40:10:ff:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:57:BD:EC:6E:31:1F:EB:76:3B:9A:54:C7:CD:A7:95:60:D2:0E:4D
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:a0:bf:05:68:43:57:80:58:c4:2a:cc:4a:9d:fa:1d:41:83:
35:22:21:fa:00:9e:3b:a4:50:98:cb:f7:d9:ee:cd:69:49:c4:
7d:35:c0:5f:04:9c:25:9c:95:50:b1:ea:c1:8d:85:45:04:23:
22:5f:d4:0b:17:3c:dc:72:fa:47:05:50:ee:d2:0f:76:e6:04:
55:ce:92:b3:72:13:0d:aa:67:27:73:f5:9c:bb:51:98:7c:14:
61:2c:01:b0:89:25:83:71:63:3c:3a:40:c5:1c:c3:40:48:fb:
18:2c:5a:90:b0:40:67:a0:8a:43:70:9d:bc:b4:3d:ac:e9:fd:
d1:e8:b5:ab:13:41:98:91:b9:8a:ae:16:2b:08:cc:da:35:aa:
bb:de:34:32:2c:b5:91:fa:b1:57:b3:34:53:be:e2:91:8f:36:
2d:69:b0:a3:31:3d:c9:10:53:0f:bb:e2:47:e5:39:7b:91:5e:
72:34:94:06:06:e1:b4:75:a1:78:13:3e:87:01:f3:52:89:87:
82:e3:30:a4:5a:00:2b:fe:31:04:91:eb:0c:83:4c:5c:88:90:
02:bf:5a:6a:1d:2e:bb:3d:63:e9:ba:4b:8c:18:81:60:e2:a4:
df:e7:12:63:12:f1:d4:51:9b:63:ff:23:21:36:86:6a:90:ed:
1f:cd:cf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:34:43 2025 by rpki-client