Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: 0qVezESSZa89BKskMQAHas7srdalS5FnVg6z4K/0vkE=
Subject key identifier: D0:FC:48:C0:7B:73:D0:3B:FC:C3:94:64:CD:0A:F1:0C:35:A7:DF:8A
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 019856EB1C0BFF01A64E3E990CDADF4C86E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 0306
Signing time: Tue 29 Jul 2025 16:01:45 +0000
Manifest this update: Tue 29 Jul 2025 16:01:45 +0000
Manifest next update: Wed 30 Jul 2025 16:01:45 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: fzrok8ZnSg2Rq16HOux7cJc/lWVIWlf1CUEp8gBNwYY=)
2: OHGF750j4DJGNc1Oe80dc-FWYaY.roa (hash: h+xssOn739NLfAUDZmv5GlRt0V3PO+xTJdzfH9zAWE8=)
3: _HF2gqhC9uCDDnAOpKs3WUfmbDo.roa (hash: QhESuMW1F4EzEaEsL+0TS0hEypm5aO6tHQYl52gTh58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:eb:1c:0b:ff:01:a6:4e:3e:99:0c:da:df:4c:86:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Jul 29 16:01:45 2025 GMT
Not After : Jul 30 16:01:45 2025 GMT
Subject: CN=d0fc48c07b73d03bfcc39464cd0af10c35a7df8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d6:05:be:f1:49:38:9a:91:f6:f9:51:a5:e7:
d8:ee:a8:43:01:df:88:ef:1f:b5:bd:6e:02:89:9b:
3f:44:12:4a:8f:d9:f8:de:46:de:14:79:63:43:51:
23:86:9f:96:5a:ff:62:7e:b6:7a:d1:37:36:d9:c6:
5a:87:c7:97:12:de:08:d2:a3:d6:5b:f5:f2:0a:76:
90:93:fd:1d:2d:f9:c1:77:db:48:52:94:df:56:3c:
cb:00:02:6b:d5:58:e8:74:86:fb:81:96:fa:7e:e7:
6d:0f:b5:4e:b4:fc:10:b2:c6:27:6c:c0:5a:e4:7c:
f6:15:fd:ee:1b:85:8f:35:1d:f2:39:6e:64:96:e1:
57:61:a7:5d:bc:66:20:12:bb:46:75:8f:d7:02:1d:
4a:d3:0e:06:e5:ce:fb:d8:e9:26:0b:bf:c7:fa:9e:
32:44:c8:11:b4:8b:aa:6b:a5:b6:90:d1:e0:7d:8a:
c2:a2:95:74:27:e3:ca:8e:4a:d4:38:8f:2d:a4:24:
53:a2:1a:b1:64:2d:21:16:e2:2a:38:26:65:e0:b3:
9b:e8:3c:65:8f:89:63:41:3e:0a:f9:4f:a6:8d:0f:
9c:db:e9:4c:75:9d:be:74:32:d1:b8:ce:59:de:e5:
05:06:4b:12:3a:bd:39:a7:4a:55:c3:04:c9:15:4f:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FC:48:C0:7B:73:D0:3B:FC:C3:94:64:CD:0A:F1:0C:35:A7:DF:8A
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e9:78:4e:ed:20:93:5f:5a:50:0c:c7:99:57:3a:3a:c1:71:
74:25:76:bf:3c:33:22:ef:ce:a1:17:66:61:f8:47:fd:e9:6a:
b2:80:54:18:e3:76:16:2f:1c:ed:25:fb:f9:fa:70:b3:25:a3:
db:68:83:71:fc:9e:0d:e8:92:a7:61:f4:12:04:5b:51:8c:12:
78:43:86:14:23:1e:91:3f:fe:d7:85:10:ba:97:f7:d1:03:0e:
51:84:8b:17:7c:bb:eb:a2:aa:26:3c:09:26:f5:87:9a:10:5d:
f0:37:48:63:86:d2:41:4e:fb:8f:54:05:da:c5:f2:0c:84:83:
33:71:1a:e9:58:43:9e:da:f4:a6:09:9b:1c:91:a3:98:45:b2:
66:b8:28:6f:32:d6:af:9b:3c:a2:39:bc:f5:7b:97:1c:9b:55:
52:71:57:04:5a:02:dd:a0:80:fb:cb:ba:7d:69:76:2f:78:cf:
d8:12:c2:06:11:1f:60:5d:ee:e2:75:b5:d3:3f:8c:1d:c6:f3:
47:a0:6d:04:1a:02:ca:4e:be:e3:52:2c:71:be:a2:2e:3a:ae:
d1:31:af:b4:57:f6:cc:90:49:b1:7e:01:39:f5:d7:74:e0:18:
40:cb:1a:7b:7c:6c:e6:55:a8:dc:f1:15:7b:60:3b:24:af:6e:
55:c2:1a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:07:56 2025 by rpki-client