Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: p7uxHaQorJaCRl4P58wV8XRcpgMCatBnRcEbtTti57o=
Subject key identifier: CA:25:51:0B:0E:38:23:8F:68:CB:C4:F6:54:D2:9E:D3:03:09:08:06
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 01991D2F5EA4A13BD305BC15F8B6B8438050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 1683
Signing time: Sat 06 Sep 2025 04:01:07 +0000
Manifest this update: Sat 06 Sep 2025 04:01:07 +0000
Manifest next update: Sun 07 Sep 2025 04:01:07 +0000
Files and hashes: 1: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: ygsVgbKup5VJAu+LCx1sXH7c1rPYY0mJA6DlB4ia300=)
2: DY7axdNUahmM11yaDw51VfAp67s.roa (hash: bUYyC3SF16Sa424fYOC0qhaN4vyFKANSqCH+D1gEZQg=)
3: HEoZmTdVM-DeFe9X3PrPHHx8iEk.roa (hash: 9udpTWaNqTHQ+GFwYOitrLQw23wqjYK6MW1sHvnpqd4=)
4: PrNUxz0yba76t8wY55c1zKXm_Oo.roa (hash: m1KBoMWL6Rj5bP0aLVgjFWVkvzcAuAcBVIFoqutIMt8=)
5: iO7A1owMbqCMA0Lg3ovjgVWh5Dg.roa (hash: nx9vqvzmG0weAt/3Wd6gNUhHUSRbH2clt0yaQ7fWpF4=)
6: oAbqR3kG7LoiZXxF1UQ_LftT7BQ.roa (hash: 5h2TCAddmyCEmv2EclM4C4a677ny0YxlmBdSG7ml6N4=)
7: vmadOBoOk6niwocbLQBsll2qRrw.roa (hash: zQDs58AuBVhnIjhnpftladMye3nflU9pDFBdocMEldo=)
8: z2wQNkzDkZfaAKh_ssLZfxbhYgc.roa (hash: ccA776YRey2wE5rLtAhOmx43QdG5Twqc3fRZfQPAbDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:2f:5e:a4:a1:3b:d3:05:bc:15:f8:b6:b8:43:80:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Sep 6 04:01:07 2025 GMT
Not After : Sep 7 04:01:07 2025 GMT
Subject: CN=ca25510b0e38238f68cbc4f654d29ed303090806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:c1:b2:1b:38:f5:cb:f6:85:4d:6b:7f:6a:
79:f3:f5:b7:21:9e:f5:5a:df:03:90:84:c5:83:de:
5e:9c:a0:7a:2b:25:ee:eb:90:8f:1c:4b:35:c5:f9:
48:58:21:50:55:56:2f:21:54:49:77:74:c5:ad:8e:
36:ce:b1:e2:6d:60:46:c2:bd:33:a4:bd:d8:79:f4:
f2:70:9f:a6:0a:c7:cb:19:93:f7:9a:10:de:39:16:
b7:9d:fd:c9:3d:a6:0b:b3:6f:ba:4b:22:3c:7a:82:
89:a2:04:58:b0:62:9e:6d:36:f0:69:6a:fc:06:3d:
d4:b5:ab:64:56:2a:88:ae:2b:b9:dc:94:98:9b:3b:
0c:c0:01:24:4b:1b:1e:47:d7:17:d3:ea:9c:82:d4:
20:21:15:77:c2:26:3c:05:f6:c9:41:c5:8d:3c:46:
2f:e0:c6:dc:9a:3e:3c:59:0c:17:09:f2:5b:1b:88:
0a:a5:75:56:12:58:40:f8:b2:ea:03:f1:bc:d3:11:
85:64:ed:de:ab:17:61:99:e6:7b:a5:01:6e:03:9d:
7e:3c:d9:93:96:57:8e:da:4e:d0:13:e2:31:d3:da:
f7:0d:4c:53:14:cc:01:0e:56:79:7f:55:43:ac:b7:
e1:ca:6c:3e:21:ea:2a:bd:46:d5:1b:94:24:38:a1:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:51:0B:0E:38:23:8F:68:CB:C4:F6:54:D2:9E:D3:03:09:08:06
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0e:38:72:3a:a7:7f:92:e9:86:f8:60:19:ba:b2:ec:1a:a3:
7e:be:86:a4:6b:26:bf:1b:7a:53:93:77:82:45:16:93:0d:91:
b2:bf:9f:45:b4:dd:75:6b:c3:2b:74:ea:98:3f:5b:51:69:93:
a6:f7:f2:82:26:fd:f6:a5:23:81:c9:ba:d4:d7:6f:d0:fa:d3:
84:a2:90:89:9f:38:fa:67:fb:47:b0:e5:75:27:fc:f5:a5:b0:
db:fc:06:77:9a:39:a1:fb:5c:bf:a6:6a:80:27:14:9f:a9:eb:
ea:ba:09:81:60:e3:e5:22:fb:91:f9:dc:13:4a:15:ad:0b:7e:
d8:9d:74:11:36:0c:ed:bd:4c:f7:39:90:c7:21:e6:27:e2:6b:
77:4e:dd:38:b0:ba:f8:f0:48:72:7b:08:bf:e0:fa:35:01:6c:
b3:14:22:d0:6b:e1:36:75:cf:9a:7b:c9:be:74:88:2c:a5:20:
0c:11:f1:fa:6e:90:a1:b0:17:f1:35:74:83:2d:43:f2:02:73:
bf:56:fa:4e:6e:00:e2:62:a0:ef:22:48:47:93:c8:20:2b:dd:
54:3b:f2:70:d1:a8:86:85:b8:06:9d:fb:9d:3f:c5:af:02:fe:
ee:d4:2c:18:be:df:36:f7:bf:f8:d6:31:9a:68:4e:c4:1e:f1:
4a:d9:e5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:27:01 2025 by rpki-client