Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
File: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json)
Hash identifier: 4PF+EPU4v66lomtL6+/cvS4xxd0ZPqhHcZU7Z3Nk+KY=
Subject key identifier: 08:2C:89:78:F5:12:C8:D1:6A:3E:D4:54:0E:67:C5:DF:BE:53:55:21
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Certificate issuer: /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial: 01983382CABCC8292DACE633A3321B0BC12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
Manifest number: 15F3
Signing time: Tue 22 Jul 2025 19:01:06 +0000
Manifest this update: Tue 22 Jul 2025 19:01:06 +0000
Manifest next update: Wed 23 Jul 2025 19:01:06 +0000
Files and hashes: 1: 1-qQeR-EbZDs_qM5ldnB8c124Szc.roa (hash: ofMkv+rY3TqWIfaJFchO8QPgkzQdWyH95GmuYP6Ctek=)
2: 1GAA9RXUZFiO200bDHHgj0azbq4.roa (hash: tS4ee1uFzhVa+UdElOzwvh+A6ENy1LuuOQxxEe9qEtY=)
3: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: VFD78B47zl0uKc2ixobovP4teP1fIAIrIl2cN9sJrHU=)
4: S8bkAVPKOZ-Wv8bcLyLv58IY5XI.roa (hash: WjxXP1OmvNWD7wvgFTcDicv8zRYqIUNqNm/DyzGISFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:82:ca:bc:c8:29:2d:ac:e6:33:a3:32:1b:0b:c1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Validity
Not Before: Jul 22 19:01:06 2025 GMT
Not After : Jul 23 19:01:06 2025 GMT
Subject: CN=082c8978f512c8d16a3ed4540e67c5dfbe535521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:73:2a:6b:47:45:ce:59:cf:83:65:34:a8:
fb:51:0e:0e:82:20:c9:d6:b5:24:16:13:98:4b:0f:
28:2d:c8:29:7b:9c:ea:74:98:c7:4f:74:7d:3c:b0:
4d:6a:b7:d4:80:df:ad:1b:fd:f1:10:d5:f7:bc:27:
a4:2c:7d:11:f3:21:ce:dd:50:8d:88:5c:f5:41:bb:
21:b6:ac:b6:17:9e:72:11:64:89:ec:d5:3a:c4:fb:
11:26:c7:9a:77:49:be:30:70:93:ef:bc:27:b5:53:
c0:f4:f5:fe:95:30:6b:b5:ea:80:e7:36:d6:fa:3d:
77:f0:73:d2:d4:f3:ac:8e:ed:c9:1a:f6:5e:8d:2d:
05:e3:a7:f5:e2:c5:10:42:de:f6:52:c6:3c:79:95:
68:43:b4:a1:e2:20:c8:b1:43:ca:a2:a2:29:cb:03:
46:7d:75:9c:1d:37:a3:5c:ec:57:f9:e3:91:28:d2:
e1:15:e6:36:c3:26:d6:b9:f3:76:8b:db:b2:3c:37:
98:3c:28:90:e3:94:87:73:3f:e5:74:87:c7:05:69:
d7:91:25:e7:94:c3:7c:08:3e:67:f0:9f:2d:76:74:
c2:40:4a:df:f6:37:be:1f:93:8b:55:15:45:55:61:
12:f2:35:b5:65:46:a6:42:88:e3:81:2f:6f:5a:7b:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2C:89:78:F5:12:C8:D1:6A:3E:D4:54:0E:67:C5:DF:BE:53:55:21
X509v3 Authority Key Identifier:
keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1e:0b:34:15:de:04:92:6d:2d:0b:2f:1d:56:7b:c4:63:bb:
90:5e:df:fd:7d:46:49:71:25:79:13:24:d7:66:07:24:bf:52:
bd:29:2f:40:ad:02:38:b5:8a:60:c0:d9:ca:9a:dc:37:77:6b:
6f:00:0e:cd:fe:a6:6a:e5:5d:b2:42:ba:f8:8f:de:9a:a0:12:
f6:13:2c:7e:b8:ae:71:cb:c9:0f:e6:22:d6:8b:03:a4:27:d7:
bf:5f:df:80:c8:44:70:26:0a:9d:55:f0:d0:23:2d:76:f2:3d:
ab:49:71:33:eb:03:d9:f9:65:4a:7f:d1:d1:3c:3c:d1:40:4b:
b1:56:e4:14:e3:52:c2:79:2a:b0:4a:27:b6:92:d8:ad:bb:1a:
4d:f1:f5:8a:ad:59:13:ce:ed:35:6f:4d:65:11:64:3e:15:15:
88:f9:29:ff:01:23:dc:1f:b5:4a:aa:a7:b4:ac:ad:b4:d9:30:
78:62:c0:6b:d2:05:69:ad:69:c3:39:b8:90:8d:10:9f:de:7d:
0a:40:35:ad:f7:55:7c:fa:33:c9:72:b8:fd:ce:89:66:d0:1e:
38:eb:08:c4:b1:09:cd:f2:f1:4d:d9:bf:5c:95:75:43:20:96:
72:84:39:10:cb:13:00:26:7e:a5:c4:0e:d9:61:5b:56:7b:2d:
25:98:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:06:58 2025 by rpki-client