Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
File: 9qD_yrRKardihf2LFfuprgRywAo.mft (raw, json)
Hash identifier: /z0rZh0ULjJHDHxVxb3HKapmI+H1PLFoX/dQXViUGto=
Subject key identifier: CD:23:CC:9A:E6:1C:0B:B3:10:71:F2:53:AC:D5:5B:75:86:F0:29:2D
Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Certificate issuer: /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Certificate serial: 019922FA3121226CE78A4629A34C5384BDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 07:00:45 +0000
Manifest this update: Sun 07 Sep 2025 07:00:45 +0000
Manifest next update: Mon 08 Sep 2025 07:00:45 +0000
Files and hashes: 1: 9qD_yrRKardihf2LFfuprgRywAo.crl (hash: CeAQ1Hd7RGF1cpyyL38yfFSlMG0IsskIoB27Wm9PGcA=)
2: XPkwDLJHT478MATdbgeUa5gcEiA.roa (hash: DoMDYSGNMC9OU+9UBRPPXJnhTtSu9q09Id+HJ989GvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:31:21:22:6c:e7:8a:46:29:a3:4c:53:84:bd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Validity
Not Before: Sep 7 07:00:45 2025 GMT
Not After : Sep 8 07:00:45 2025 GMT
Subject: CN=cd23cc9ae61c0bb31071f253acd55b7586f0292d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:a9:5d:87:03:07:27:76:7e:0a:5a:99:80:
34:36:8d:ba:84:7b:d2:b4:5e:d5:1c:29:cf:b2:18:
e8:21:f6:ad:43:9e:fa:a9:ac:51:11:54:3b:6d:25:
13:3e:9f:22:bf:51:36:f7:ba:cf:a8:e3:7c:2b:e7:
5e:2b:5e:91:f6:65:20:ef:bd:6c:b1:53:0b:73:bb:
f2:83:2d:69:08:dc:29:59:72:f5:6e:28:16:55:30:
c6:6a:7c:86:eb:e3:be:a4:86:04:02:de:61:e6:c5:
f2:d9:8d:74:b9:d6:9f:5e:6a:6a:92:f4:d1:43:cf:
8d:39:8a:47:3a:1b:9d:e1:a1:11:e1:9f:8a:8b:7b:
c2:7b:8a:f6:2e:a8:1f:bf:74:80:7a:d3:d0:41:12:
51:f3:8a:7a:09:9a:33:42:34:f3:5b:4e:46:c3:9e:
f6:3d:21:e5:bd:1d:6a:d6:3d:7c:ed:65:65:48:a1:
1f:09:94:04:5a:6b:42:a3:60:5d:c6:06:36:db:18:
cf:11:32:f3:d0:d3:ea:00:9a:d3:ea:94:b0:f5:0b:
2a:4f:d0:d5:d5:70:e1:97:94:10:f0:53:a9:a8:0c:
a6:4e:82:a8:4d:57:90:c0:9e:6f:54:be:c2:2e:43:
51:bb:97:87:41:a9:a4:ff:37:53:c2:ff:22:0f:94:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:23:CC:9A:E6:1C:0B:B3:10:71:F2:53:AC:D5:5B:75:86:F0:29:2D
X509v3 Authority Key Identifier:
keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:21:bb:cd:0a:9c:35:4f:8d:23:3a:d6:43:e4:70:73:6f:b8:
cf:52:69:cb:47:f9:a3:ff:a2:14:5f:66:eb:79:51:61:ff:45:
55:17:09:52:97:4e:71:76:71:72:73:5d:6f:17:08:19:0d:82:
63:c6:e0:54:0f:5d:f0:e5:4e:f2:7d:3f:07:f9:65:ae:0a:cd:
3c:74:50:de:06:94:37:69:6f:cb:f4:3f:dd:1c:9f:5b:6a:fc:
83:0e:99:a9:78:19:e6:df:57:14:ab:16:12:0e:bc:7a:c1:ee:
5e:8c:cc:49:c6:2f:51:db:0c:8f:36:c6:30:1d:4f:0a:e9:9a:
e7:43:b1:45:47:d5:c6:f4:1c:c0:b3:60:1d:b9:e6:76:37:86:
8a:01:45:7c:92:7b:52:b0:90:b3:61:2b:29:68:b8:bb:da:64:
79:28:f0:5d:b8:b5:f0:17:06:e3:a9:d9:01:4d:7b:bb:57:bc:
fe:13:50:22:b2:68:4e:de:b0:18:61:5b:61:1a:24:f3:b8:7e:
c4:88:41:60:b9:7a:79:65:d3:83:87:d1:51:23:6e:45:7e:8a:
9a:64:24:b9:2c:96:4c:e7:61:73:06:60:b4:10:40:b0:93:55:
e7:b2:d1:25:a6:d0:2d:6a:91:2d:4f:a6:82:da:0f:a2:0d:75:
9e:41:ff:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:01 2025 by rpki-client