Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
File: 9Is_DGqHwEW9z_q9kA24iSvnAuE.mft (raw, json)
Hash identifier: +Vsp1dEDoeumaUJXcQnB1HkP5F4KS4Ca5Nh25mi37Qo=
Subject key identifier: E6:92:C5:0D:C9:BE:E1:65:D9:9B:65:9E:D8:92:2A:21:A5:CE:E4:DD
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 01993BA7B0AEF453A83627C6587B627669F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
Manifest number: 1686
Signing time: Fri 12 Sep 2025 02:01:09 +0000
Manifest this update: Fri 12 Sep 2025 02:01:09 +0000
Manifest next update: Sat 13 Sep 2025 02:01:09 +0000
Files and hashes: 1: 9Is_DGqHwEW9z_q9kA24iSvnAuE.crl (hash: fJa+pua8wzArlLcSnYN7coBByCMF4hRSe8slc+Lk0mQ=)
2: Hg9ZafaXQ8rLTSt-HMnDH0lT2yU.roa (hash: 0HTHXkqvlWJxm74CgwKZLUkDjsOUoGNMgHyD7nKaILk=)
3: lPxrJNzTmXryV2F51IkQV9qfvk8.roa (hash: XwWZCOkUNT19TkGVL4DD1MLeNhROccVqsb63RsLA8Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:a7:b0:ae:f4:53:a8:36:27:c6:58:7b:62:76:69:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Sep 12 02:01:09 2025 GMT
Not After : Sep 13 02:01:09 2025 GMT
Subject: CN=e692c50dc9bee165d99b659ed8922a21a5cee4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:99:7d:c9:7d:37:1e:17:86:4a:f6:3d:45:
35:28:37:92:78:5f:7b:3f:19:53:37:7c:de:78:af:
90:cf:18:11:83:5b:ad:af:cb:94:d4:59:c0:35:f6:
38:c0:12:5e:7e:bd:7f:c4:d4:44:f6:e9:d2:fa:7f:
c3:03:e1:be:79:7b:e3:c4:4e:a9:f3:f6:b0:97:cf:
5a:8a:41:56:11:62:49:6f:b9:9e:b1:0d:80:f4:6c:
00:18:c8:5d:6c:9e:5c:92:d5:37:9f:bf:12:fc:66:
b6:b2:ab:a4:57:e6:34:b3:a1:5f:49:f6:f9:32:69:
a6:cb:5a:24:ee:28:cc:68:85:0b:8b:b7:ab:a3:dd:
d8:33:79:5b:c2:51:b3:48:82:62:73:65:77:bd:71:
00:0d:da:bf:e6:91:a5:8d:06:9a:ce:c9:c5:ec:ad:
d2:9d:3e:aa:b6:95:52:95:b6:c9:4c:e9:68:d5:d7:
61:80:6e:f7:ef:a5:14:26:52:33:e0:06:34:d8:e6:
ea:9d:c5:92:14:9f:fc:c0:79:eb:a4:19:3d:fc:4e:
56:28:84:53:69:f8:7b:35:47:11:ba:fe:76:51:41:
82:47:56:cb:2d:86:f9:62:2a:33:0c:d4:e4:01:44:
46:fc:4f:88:6e:72:a4:ac:d7:a9:39:c9:ff:32:c9:
31:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:92:C5:0D:C9:BE:E1:65:D9:9B:65:9E:D8:92:2A:21:A5:CE:E4:DD
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b2:e2:59:30:48:27:0a:5c:73:64:ca:de:51:8e:8f:91:eb:
44:ca:31:8f:96:ac:49:5f:ff:92:c9:cb:73:d1:22:e8:5a:93:
9b:fb:41:25:5b:0a:c6:ee:2d:c1:ac:f4:3c:f7:36:28:e0:81:
9b:38:41:4e:82:de:64:b3:5e:69:4e:1e:69:bb:3e:cf:8d:72:
32:9e:6d:9b:d9:37:58:70:46:e5:22:50:6b:75:cd:10:bf:f5:
75:77:a9:b2:3a:d3:f6:fb:10:28:b0:47:d3:27:ec:6b:98:a6:
f6:4e:55:5d:18:16:9a:08:57:6b:0c:4a:04:51:65:6e:ea:ff:
15:04:85:20:45:04:ae:3a:74:89:70:ff:67:03:aa:7d:74:7e:
46:f3:d1:5f:e0:87:51:d7:ab:df:3a:56:03:6f:46:59:1d:21:
0e:b9:18:38:43:50:65:f2:9c:ef:af:c8:0e:ee:6b:71:1b:52:
53:31:d4:92:a6:fa:20:3c:fc:53:b9:23:99:5f:69:d5:7c:10:
d8:d9:83:b7:9f:00:27:76:cd:6a:fd:e6:6c:4a:3c:94:78:58:
22:da:ac:84:7c:73:57:92:42:9a:42:82:06:e3:5f:bc:a2:50:
89:ea:8f:c4:91:35:ea:da:5b:66:fa:97:01:4e:b6:cc:df:b4:
ce:9f:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 03:41:40 2025 by rpki-client