Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: 1G7qgcTYAzPnX3IScOPHDUaHu8sXKIeQGIYV01ZHFP8=
Subject key identifier: E2:5B:76:46:99:97:15:8B:51:72:01:24:91:00:D9:EA:42:DB:9D:5D
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 01985AFDCE201BB299992587ECAE2AF5780F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0B3C
Signing time: Wed 30 Jul 2025 11:00:39 +0000
Manifest this update: Wed 30 Jul 2025 11:00:39 +0000
Manifest next update: Thu 31 Jul 2025 11:00:39 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: hXybyno4jNoiM9XL+nCSiNP2U7d/FQ9l6dLSQE/hXtA=)
2: goWXgCcrT8sdpWvs98SjkshS1QQ.roa (hash: pL/QBtJXrUgZbyv/2j+3PUPuF0UtD1Pg09swJJxayTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:fd:ce:20:1b:b2:99:99:25:87:ec:ae:2a:f5:78:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Jul 30 11:00:39 2025 GMT
Not After : Jul 31 11:00:39 2025 GMT
Subject: CN=e25b76469997158b517201249100d9ea42db9d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:65:58:06:c4:f0:08:96:27:7b:32:93:f4:e1:
fb:60:10:92:19:37:9f:c4:71:06:dc:10:47:42:8a:
60:82:86:83:8d:23:41:0a:ce:4c:74:f5:aa:8b:0a:
3d:e0:bb:f8:49:85:65:cb:c1:d8:5b:9a:e3:c4:c6:
1a:76:a0:e5:d2:c3:2f:52:59:77:24:3e:05:cd:e0:
fd:8d:f6:75:04:41:e9:ac:1b:f5:e3:44:7e:06:92:
d4:92:10:fc:61:ec:60:19:6b:a4:24:61:83:e4:f5:
84:0d:1f:05:cc:42:a6:4d:bf:8b:34:db:44:9b:6d:
81:7a:e8:13:24:77:87:c4:28:6b:10:c0:f1:ad:ec:
ad:d8:c6:09:3a:fa:66:b6:97:fc:14:cd:5b:d1:91:
00:ff:78:6a:10:bf:a6:c0:45:77:7d:8f:ad:6f:78:
86:47:93:f4:4c:c5:be:2d:8d:86:7e:46:a6:18:b4:
20:e8:4d:84:f7:b9:05:7d:4a:0c:9c:76:b6:a3:c5:
b9:90:1c:77:a7:34:7d:e7:f7:a8:83:a5:55:bf:46:
47:e9:de:de:cd:bc:d5:5f:43:7c:02:94:c1:f8:3c:
bc:d2:76:09:11:d7:42:f5:e5:f5:64:ba:83:69:2f:
ee:12:eb:e7:b6:46:6c:f5:ec:f2:96:20:8c:fd:1a:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5B:76:46:99:97:15:8B:51:72:01:24:91:00:D9:EA:42:DB:9D:5D
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:09:6a:a7:3c:8f:82:86:a6:f7:6a:82:e8:b4:2a:74:66:25:
42:d7:f9:91:bf:a7:83:f1:1b:be:2a:bc:c9:28:e1:f8:84:c6:
6c:a0:69:c3:2b:79:5b:6e:f8:39:97:4a:0e:95:a9:c7:56:52:
37:bd:47:63:4b:78:7b:00:47:ba:ad:57:9b:3e:3c:7a:d5:b3:
2f:c1:a1:83:5d:44:41:27:50:67:4a:67:bf:44:ae:62:88:e8:
e5:d6:c2:3d:f7:39:20:6c:81:c1:ba:cf:0e:6e:20:eb:43:37:
cf:2e:77:9e:38:8a:bf:fd:a4:58:02:31:dc:ee:86:a1:c1:52:
74:7e:25:9c:98:c1:f2:51:51:8f:4c:b0:9c:6d:d9:96:b3:df:
cf:83:e4:95:89:22:cc:6f:87:1b:11:10:d6:c6:6d:fa:bb:81:
ad:14:f2:20:69:d3:42:96:78:ed:54:e4:30:a2:be:65:19:3e:
ca:78:91:f0:39:a3:e8:b8:0b:d6:f8:86:c9:22:9c:52:b5:c2:
93:be:62:0b:60:62:67:bb:df:a9:4f:9c:23:7a:11:b7:f7:6b:
37:ab:6a:72:ae:0a:6c:bc:16:db:3f:a5:0b:3e:7e:b2:7f:c0:
d8:78:4a:84:90:d6:5b:8b:6c:3d:7f:bc:0d:8e:69:af:51:4a:
c6:98:28:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 17:40:54 2025 by rpki-client