Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: f50kPQqYFO4I4+6Tt5lEc+5P/1nIGTc+FfxAJfzFe5I=
Subject key identifier: BB:6D:8C:4C:30:42:C3:E5:39:E4:29:19:21:5C:80:C8:D3:31:11:62
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 019846D265BCE489C53E13EE1FE36765ECAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 13:00:50 +0000
Manifest this update: Sat 26 Jul 2025 13:00:50 +0000
Manifest next update: Sun 27 Jul 2025 13:00:50 +0000
Files and hashes: 1: 3gQqwuDknMD1by1_10QyLFjqTSQ.roa (hash: 7rS6ATpFIQATm/1nB63KRTZ9v2IEBgVrsScfZWZHuYo=)
2: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: sWIh2Tkhhp9zcmS+aVtIEvZ7O6K6oPt8mrzNthQgLjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:65:bc:e4:89:c5:3e:13:ee:1f:e3:67:65:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Jul 26 13:00:50 2025 GMT
Not After : Jul 27 13:00:50 2025 GMT
Subject: CN=bb6d8c4c3042c3e539e42919215c80c8d3311162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:8e:05:e7:07:50:c6:af:8c:cd:2b:3d:88:
9f:0f:5a:40:73:c6:ee:72:3c:38:e6:ef:81:2b:c2:
c6:c8:68:1e:d5:8a:ad:42:77:60:b3:f0:89:3a:fb:
f2:6a:1e:91:db:57:48:67:fe:b2:d6:82:ac:a5:4e:
43:a4:97:32:de:ad:72:3d:1f:d4:02:2e:16:c0:1c:
e1:c1:b8:2e:f0:21:b0:11:4e:b2:a4:f1:26:25:8c:
12:49:75:65:95:24:d6:03:0f:9e:d8:7b:3e:c4:59:
09:a1:e6:4e:1a:6e:92:8d:5e:dd:f1:42:5e:b3:a8:
f4:3d:b3:5d:00:81:c0:b2:e8:81:c1:a0:d5:4a:af:
a6:46:3f:90:a9:8d:43:95:10:e0:f0:e5:47:6e:eb:
08:f6:d5:ee:5b:3a:29:42:40:d5:2b:45:0d:3d:c9:
a9:d3:81:78:7e:0e:4f:bf:55:7f:95:7f:c6:ad:7e:
54:4b:f8:e8:f5:24:1d:0d:c1:57:e3:b5:73:10:2b:
56:f9:50:3a:6a:d6:09:65:67:a1:ff:b6:0a:7d:ba:
8d:0b:11:7b:6b:dd:cd:d4:09:4d:dc:89:34:9c:e9:
5d:2a:e6:0c:f4:e4:db:ad:21:2a:66:77:e1:42:bf:
9f:1f:93:d2:0f:07:82:09:03:3d:06:e1:e1:ac:22:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6D:8C:4C:30:42:C3:E5:39:E4:29:19:21:5C:80:C8:D3:31:11:62
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a0:8b:38:55:1d:ae:6f:65:18:70:fe:d0:b0:d7:5b:73:0d:
0c:67:c9:33:cb:e3:47:2d:f4:c9:a4:71:84:21:b4:d4:23:fd:
76:1c:80:2f:f1:c1:14:5f:64:c5:63:c8:1d:d6:1d:e5:2a:5a:
38:8c:7d:d1:fd:bd:ee:d7:1a:9b:cf:12:71:1c:73:35:30:7a:
82:84:ae:da:da:c0:1a:e9:bf:e0:30:b7:9b:47:39:3f:26:eb:
65:32:c5:17:da:a4:9f:88:d3:ff:e8:f6:61:58:db:6b:12:a3:
9b:3a:f5:c3:a8:f7:84:ba:01:41:5d:8f:fb:21:54:2c:fa:83:
30:09:5b:3c:71:f9:62:bd:e0:50:49:03:4b:e2:4b:3c:b1:a1:
c5:fa:0c:94:07:cc:fb:a2:3a:f5:20:14:4a:28:6f:e8:33:e7:
fd:ee:a1:f9:10:94:7f:c7:cc:3c:29:ed:93:c9:8f:b7:46:44:
ef:39:47:65:1a:7f:93:63:ad:06:0e:8b:ac:65:2b:9f:3f:71:
05:4c:e1:58:d4:fc:19:b6:e1:08:a7:f0:04:a1:10:94:d6:a1:
64:22:72:cc:96:80:1d:fe:1d:ed:43:ee:e1:68:be:38:1d:e1:
a5:aa:c3:21:51:a0:c6:7f:ff:6c:fa:56:51:4a:38:14:76:0a:
7b:f1:de:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:53:00 2025 by rpki-client