Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
File: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft (raw, json)
Hash identifier: Xi66K0SoL7iQt9ZSk1385zdnZgiucwzdBKxFm/Scv/8=
Subject key identifier: 67:B3:39:9A:50:DF:C0:CE:AC:C5:FC:D4:5B:60:1C:A7:BC:49:11:B4
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Certificate issuer: /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial: 019856EAAA860BBF0C5B163AA3955AE8ED43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
Manifest number: 0A52
Signing time: Tue 29 Jul 2025 16:01:16 +0000
Manifest this update: Tue 29 Jul 2025 16:01:16 +0000
Manifest next update: Wed 30 Jul 2025 16:01:16 +0000
Files and hashes: 1: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl (hash: wE5+90MfgU1nCoV+Nz8Vr6nwIIRyKgMpMW02aID0t8g=)
2: Ecb-mPJB0EgEtmCxBO-R8Q4l8Pc.roa (hash: gJwQTQJlZO5UonEbd+MqbZuAtcvQedjepcRUTfg3vec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:ea:aa:86:0b:bf:0c:5b:16:3a:a3:95:5a:e8:ed:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Validity
Not Before: Jul 29 16:01:16 2025 GMT
Not After : Jul 30 16:01:16 2025 GMT
Subject: CN=67b3399a50dfc0ceacc5fcd45b601ca7bc4911b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:a8:55:52:59:4f:32:d1:c0:98:43:20:e1:
c5:a7:fb:4c:bc:cb:ad:8c:56:4e:d8:09:52:08:98:
89:66:1d:1a:9b:26:f2:f8:5a:ec:3c:b8:d9:f6:48:
1f:64:73:cc:13:f7:e4:56:58:54:d0:92:77:c6:2a:
2d:8e:50:84:07:68:c8:68:42:97:5e:91:9e:9f:ac:
e5:17:8e:1a:51:69:ce:2f:97:08:aa:ef:2a:1d:b9:
b3:f9:b8:9e:8a:f5:9a:b7:1d:89:85:c5:4a:05:9c:
ad:0b:df:d6:8b:bc:5a:23:2b:8f:18:8a:66:72:5d:
30:3c:27:fb:53:4d:fa:ca:aa:49:7c:04:c3:ab:2a:
a2:02:96:86:a3:5c:66:47:7f:1f:3d:ba:e9:61:9e:
f8:f6:ab:61:f1:cc:74:a3:f3:64:b1:ae:68:8c:c7:
44:76:1e:47:fa:5a:4e:8f:2a:21:c0:45:00:06:71:
84:d7:87:1b:92:cc:59:96:e9:e5:b1:c4:b2:27:89:
9c:8f:4c:45:b9:ff:33:4b:bb:cb:f3:ec:1f:93:ba:
6d:6b:f7:6e:b2:62:1d:c9:01:98:9b:af:d4:bf:99:
99:20:0b:14:e1:a3:79:44:08:45:13:9d:75:f7:ec:
4d:d1:9c:93:f2:67:80:c4:74:2e:dd:18:d1:10:65:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B3:39:9A:50:DF:C0:CE:AC:C5:FC:D4:5B:60:1C:A7:BC:49:11:B4
X509v3 Authority Key Identifier:
keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2a:66:e8:d9:56:ee:6d:ab:be:ac:89:5b:5a:bc:67:16:a5:
90:d4:e6:6e:d2:b1:b1:6d:f4:0d:8e:c2:3e:22:9b:56:ff:e6:
60:e1:4b:e4:05:ed:56:ed:8f:1b:11:23:18:52:38:7a:ec:3f:
3d:5e:78:e5:6c:92:9e:e8:91:d6:74:85:88:3c:b5:64:af:f2:
a5:5a:8d:f0:ec:06:52:13:36:43:14:5a:c6:aa:e1:50:11:80:
e8:de:6a:55:54:ec:d2:d1:31:00:a8:e7:d4:f8:65:9f:ac:0d:
e2:28:d4:04:d6:8b:47:39:a1:cb:ce:2c:94:db:8a:f7:bf:d4:
f0:e4:f0:d9:5a:4f:62:9b:9a:2a:96:23:34:11:d6:df:37:f7:
b0:e5:b0:3f:e8:b3:c7:b1:b4:51:44:09:b0:4f:2e:70:0f:f6:
7d:8e:a3:19:79:d2:48:9e:9c:dc:7d:6d:56:ad:cf:5b:5e:46:
ef:ed:6b:b4:ea:7b:21:19:96:c6:a2:ac:5c:a4:e6:c0:35:7d:
a5:71:94:9f:70:6b:36:55:17:16:27:8a:33:66:4b:94:c5:f4:
33:6e:9b:9f:c6:68:fd:3a:8f:63:93:5c:57:ce:42:1b:ea:fb:
a1:a7:8a:8e:b5:7a:da:27:2d:34:7e:7f:d0:4a:df:5e:a1:e8:
f2:b7:dc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:58:32 2025 by rpki-client