Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File: 9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier: CpI5kee/cXxGDyAhleMAOxEVcUfhGmcJ5SZ/8JWs7P8=
Subject key identifier: 33:46:3D:D4:B1:2B:CE:E0:81:FD:98:82:B0:5B:1A:88:21:99:64:BB
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial: 01995040980C56A1461A84FD988F66DAFD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number: 1688
Signing time: Tue 16 Sep 2025 02:00:34 +0000
Manifest this update: Tue 16 Sep 2025 02:00:34 +0000
Manifest next update: Wed 17 Sep 2025 02:00:34 +0000
Files and hashes: 1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: uKL+YoQ3U41ESWfGcPPmNWvvD7yWo0RjpFPyT872RuM=)
2: EtJkvePPPWppk5nFnry3B6dGLBk.roa (hash: 7c42tElOeuBdoKmi4aSTV9LcX+EZc0MFBsv/1Jeuh8k=)
3: KYw5Kj_weN6Qm3KwiIVIrurQ0bc.roa (hash: EGFVxLdkIPiRC9X72BBMFwRMiHt1kYN13kO+xHp1ecQ=)
4: LttXh5eMv2jde6QYSngEubF_oow.roa (hash: Yan1EozpbgDCzFrwbK/bTYuqkgAj1nMSodRgwp+TLbk=)
5: d-0FuXxrgivXV_LPUKq93b_p0rk.roa (hash: IyU9YdBTUk2hBlGdTATB3ZTrCwmx/c6jIoibeyre6pQ=)
6: jlPcCTRsHvziUq2lkqlj4JDAVB4.roa (hash: WbQ2Xq5XOzyGj/4mNA7e9pYuBIwnNuiU8FsqrdgzPqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:40:98:0c:56:a1:46:1a:84:fd:98:8f:66:da:fd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Validity
Not Before: Sep 16 02:00:34 2025 GMT
Not After : Sep 17 02:00:34 2025 GMT
Subject: CN=33463dd4b12bcee081fd9882b05b1a88219964bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:41:a8:2a:ac:78:f5:db:92:db:40:c9:d6:37:
d9:6e:66:2c:67:16:a3:5c:b7:f5:71:1f:6c:9a:93:
29:f3:dc:4e:c1:bd:49:ac:c8:41:ef:92:32:26:6d:
bb:11:64:dc:2e:d8:d9:b1:63:c7:fc:5c:c7:22:c1:
da:4f:e9:48:15:6e:81:c9:9f:d5:0b:7e:61:92:8e:
85:97:1f:45:19:b8:d9:7d:70:ca:ff:6e:93:ee:c0:
58:26:58:13:a5:d1:89:e0:f5:f2:69:d1:a4:79:5b:
a4:b0:8d:ad:e8:95:db:eb:98:59:90:07:8b:fc:89:
61:66:a8:bd:88:94:46:5a:bb:94:ab:95:0c:1a:a6:
0a:3f:15:3a:ce:79:d7:71:51:41:dc:5f:89:ad:64:
2a:d6:44:8d:ec:8a:ac:d4:f4:d7:16:d8:a8:c9:5b:
e4:a3:b3:5b:12:50:2e:68:a7:ce:0f:c5:0a:25:ad:
de:af:0f:2b:82:b6:1a:fd:5d:fa:8b:c4:1f:5c:9b:
70:3f:d2:6a:17:98:c9:79:ba:6f:be:7a:e4:1a:f1:
5e:db:a1:21:d4:fd:8e:9f:57:b7:be:0e:a4:b7:4a:
e1:76:33:d0:f2:80:b6:a9:c6:eb:06:d4:61:cf:b1:
cc:db:58:db:0a:a5:f4:79:6b:75:fc:44:9f:44:2b:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:46:3D:D4:B1:2B:CE:E0:81:FD:98:82:B0:5B:1A:88:21:99:64:BB
X509v3 Authority Key Identifier:
keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ec:00:f3:13:7e:75:94:a2:8e:f2:d3:77:c0:2e:5b:2e:04:
d1:17:1c:0d:80:7c:b3:d6:52:7b:87:fb:9e:1b:4a:a2:bd:5c:
fb:cb:a1:12:24:c0:e5:9e:9e:92:ee:20:9d:7b:1d:84:70:cf:
b7:a9:84:2e:5c:ad:0b:1e:4e:7b:f5:48:e9:00:dc:fb:25:6b:
ac:ae:a0:9a:a5:57:d1:e3:f9:f6:79:69:52:22:cc:c8:a6:26:
cc:d4:8f:6b:fd:36:76:98:08:f9:43:5d:15:f8:38:07:27:d5:
af:e0:81:17:e6:67:14:6f:a7:be:7b:1c:4a:52:72:c4:bd:07:
ea:fa:30:78:8c:30:6e:b1:b6:41:20:ff:56:02:af:05:ce:b1:
9a:3c:1e:fa:cf:9c:0e:19:ab:99:e2:82:48:31:86:13:be:4e:
90:0d:dc:d9:63:e9:a3:40:d6:f4:81:bb:be:76:3e:04:95:ae:
16:cc:df:ae:0d:03:ba:7c:8f:51:10:46:bd:b2:54:39:fc:8c:
82:3f:f8:cf:7a:25:46:1b:f0:01:10:78:39:43:2c:36:b9:45:
23:8d:b9:b5:f6:1f:b9:03:13:e0:65:8d:4a:49:09:25:a1:0f:
79:46:51:b8:21:b2:93:49:cd:38:19:3b:46:00:43:f9:09:55:
01:5b:3a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 07:41:10 2025 by rpki-client