Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: b/+QKaoeB9QwA1pVnJlXn6Hob1F8ji4IAVDrM0AcVLw=
Subject key identifier: 82:83:08:D0:37:F7:73:2A:F4:DD:DE:99:13:E4:FD:ED:06:91:78:63
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 0198CAC8D4B781B8FC398CA2D03A9685E340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 1659
Signing time: Thu 21 Aug 2025 04:00:15 +0000
Manifest this update: Thu 21 Aug 2025 04:00:15 +0000
Manifest next update: Fri 22 Aug 2025 04:00:15 +0000
Files and hashes: 1: 8YTLS_1mFrh55A62a2mBS518iAg.roa (hash: b+QiLic550TpA6gu3XGSKkJ7N3n9C2SCnWL5+/s9Vr0=)
2: W7Jge6ghVHbAsdaSdITf8b_3aVQ.roa (hash: eGgmHuw9ea32mMeNaCzUMNBUiaRSSoMmW6d0dFZkj5k=)
3: cOy-CAvP6otn2DzWCwsJGJTydS0.roa (hash: 0R2NVVpBG6pXvGjfU3eH+cXTry9Vt5bvO9CjIpEY18Q=)
4: oz-gpVKEUvOG9fOS01I-1A1aI-Y.roa (hash: 0NG9CVuIlSmbnaNtm7cZXsbOMNvpcIJrtm880P+NpNc=)
5: q9IaYjcr5RObBrW7hey_hpAIvpg.roa (hash: 2MfulwyVlfgKmQicfk78T3sq4tPTxMleY1Rp41M0dbI=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 9Yz5D+vEan4THZZaIxwaivvC2nuY+C7mhPRMLb8vHhI=)
7: vcy7WC8JEz9GH2wrI2xSRGFOQ8M.roa (hash: ppq+e7eDeIpGmxTNUn9DHommsEQqQfIeqXbSiT0TQpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:c8:d4:b7:81:b8:fc:39:8c:a2:d0:3a:96:85:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Aug 21 04:00:15 2025 GMT
Not After : Aug 22 04:00:15 2025 GMT
Subject: CN=828308d037f7732af4ddde9913e4fded06917863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:67:dc:46:7a:9a:21:44:c6:6a:36:41:77:f4:
36:cf:92:d5:43:d3:f9:45:d0:bb:31:7a:c9:69:57:
3f:ff:41:b1:4c:fe:45:cf:e3:4e:1f:0d:fc:3f:b9:
27:65:a2:aa:46:d5:40:43:02:bf:6f:42:b2:bd:a4:
69:cc:b5:ad:81:1c:4d:32:6d:e7:58:40:96:ef:a6:
aa:55:7e:d6:b8:4f:e2:3f:3b:7d:f1:ad:38:67:ef:
70:7f:34:87:41:27:c0:3b:26:5a:94:9d:12:07:03:
d8:30:f6:d0:b8:09:30:ca:57:4b:1c:d0:b4:5f:33:
75:cf:79:1a:9b:b7:6d:0e:93:9d:bb:9a:29:e8:ac:
ce:b6:01:77:4f:75:34:d4:c9:92:87:0c:b4:10:9a:
af:b9:ca:4d:e2:64:f0:f4:f6:73:bb:13:c9:f4:49:
8b:a4:51:61:0c:5e:79:8f:6c:70:df:fc:3b:e7:14:
13:fd:37:af:0a:ef:24:67:55:82:a0:49:4c:c0:1e:
17:40:a1:38:95:97:be:8f:7f:8a:e4:8f:35:40:39:
c8:57:79:6f:37:82:c2:65:b9:08:81:af:b0:a3:17:
55:03:95:fc:50:76:8d:0b:b4:4c:62:82:c8:2b:20:
07:3d:5e:43:16:81:43:f0:62:fe:b1:c8:0d:6b:85:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:83:08:D0:37:F7:73:2A:F4:DD:DE:99:13:E4:FD:ED:06:91:78:63
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c6:8f:a0:ea:15:51:92:c5:3e:fc:e5:47:b4:b2:5d:9f:16:
a9:99:89:2c:ad:94:28:1b:1e:26:e4:d4:46:d4:8e:a2:2a:b4:
c7:a4:76:ff:f5:d6:9e:24:49:45:37:1c:2c:8e:2f:0c:6e:ec:
e3:95:f5:35:f7:e3:e5:e9:ad:a0:5a:e3:2e:25:bf:af:6a:2a:
3d:3f:8e:a8:45:9f:6d:23:46:43:4b:75:47:46:25:67:fd:ee:
3d:61:b9:f0:f6:b9:b0:64:c4:29:20:4e:48:bf:b5:e8:0c:9b:
cf:9d:2b:68:7f:51:d4:24:2a:a7:ce:7d:07:50:1f:34:b8:d4:
7a:e5:f7:47:78:cc:c2:3e:d8:d3:36:61:4d:f6:62:c5:e6:99:
9f:31:5b:23:f6:ef:ed:55:12:a6:dd:92:2b:72:bd:82:a8:46:
67:dc:2f:72:a9:a0:96:10:d8:f5:ff:6d:a9:90:38:9f:de:c3:
3a:19:f9:5f:30:4d:88:78:09:0f:ab:9b:f8:c1:19:65:0a:4a:
0d:25:f1:bf:af:af:4d:e7:97:23:17:d6:25:20:df:28:3a:4f:
a1:4d:37:64:62:85:49:1f:31:8d:b6:f3:aa:44:9d:04:b4:e6:
e8:7a:bc:f5:93:d1:95:99:04:f9:e0:50:22:ed:e6:08:11:30:
51:cd:7e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:58:50 2025 by rpki-client