Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: lS0xPU4y0Q3AWCDjD3pZ7BZELBglt1sOi3ANX/x7N3g=
Subject key identifier: F2:7E:D1:64:4D:E0:CA:89:4E:B9:CF:BD:83:4C:A9:A8:0C:25:15:C3
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 0198CCEE9B2A0E5E7B20D225B1DF2EB4A095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1643
Signing time: Thu 21 Aug 2025 14:00:46 +0000
Manifest this update: Thu 21 Aug 2025 14:00:46 +0000
Manifest next update: Fri 22 Aug 2025 14:00:46 +0000
Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: ziCWGpIy6RHd18kErwNIgv2aaXIMSF/YAF/chGEamFg=)
3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:ee:9b:2a:0e:5e:7b:20:d2:25:b1:df:2e:b4:a0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Aug 21 14:00:46 2025 GMT
Not After : Aug 22 14:00:46 2025 GMT
Subject: CN=f27ed1644de0ca894eb9cfbd834ca9a80c2515c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1b:24:19:6c:a2:55:ba:d4:51:63:68:8a:c6:
54:2e:70:b6:2d:ba:c8:4f:4c:98:8c:d3:f3:ee:fb:
e4:e5:45:a1:e5:8c:75:0d:ef:5c:4c:75:53:50:57:
0b:d1:19:ff:38:9b:08:3a:d6:55:24:aa:fe:fc:f4:
1b:de:27:ef:f9:81:a1:9c:1c:5e:8d:af:bb:e6:ef:
95:ac:95:d8:c8:e4:16:ef:db:d6:74:a4:77:39:ed:
cc:03:1d:98:f4:82:4a:57:80:f8:18:65:91:51:52:
fd:1c:2b:c4:8f:57:fb:0a:d6:6a:45:2f:db:cb:ae:
6d:23:9a:af:48:94:d9:8e:c9:18:cc:5c:88:86:25:
20:96:11:41:20:a1:bd:e2:15:f1:ed:1b:e1:6d:dd:
22:fd:4d:a7:2c:c2:9e:c0:1f:7e:66:75:95:c3:94:
6a:92:e9:88:7f:0f:5e:92:07:5b:03:25:bf:e7:7a:
de:f2:10:8a:81:3a:92:ab:e1:c3:d5:90:08:3f:05:
18:da:d7:67:0f:c3:a6:72:bb:4e:63:a7:da:ef:78:
79:ee:02:b8:8d:3f:22:e3:0a:82:3e:02:01:c7:fd:
f4:e9:dc:66:35:42:27:67:aa:cf:05:3c:47:5a:2e:
36:74:a8:3d:5c:be:16:c9:4a:3b:32:e4:14:37:f6:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7E:D1:64:4D:E0:CA:89:4E:B9:CF:BD:83:4C:A9:A8:0C:25:15:C3
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:59:9c:28:84:f5:47:fb:c1:84:35:d7:63:12:ed:d9:15:bc:
61:3e:a5:99:1d:3c:91:24:8f:16:89:ef:68:f2:d0:4a:b7:47:
47:33:a3:12:e5:3d:ec:24:26:68:a2:2f:9d:c6:6a:b8:01:ef:
c6:3d:c3:ca:6f:9a:df:6a:7f:72:92:9a:ae:d9:e5:c8:17:f6:
04:8b:c3:2f:fd:d1:6b:9e:b2:da:3e:aa:12:c8:d2:cd:18:78:
55:2a:1b:90:3d:db:6e:77:9f:6f:fd:84:a5:5e:dd:f3:31:c2:
bb:8b:37:21:04:05:e4:6d:ff:10:41:1c:ef:05:6d:6e:27:a4:
0e:69:1e:ca:9e:f4:ff:3b:80:c7:ec:49:dc:bf:02:0e:7e:4f:
d9:2e:c9:a3:ef:1d:b0:78:aa:e6:a5:33:53:80:56:3b:86:08:
9b:78:7d:ed:76:b0:1d:92:8d:ed:42:a1:ff:35:25:c6:18:c6:
59:37:a7:3e:90:5c:71:78:b8:17:53:76:5c:11:c2:d3:f6:e3:
de:4e:f8:20:ed:38:ad:4e:e2:00:76:4e:9d:ff:49:56:c2:b8:
c8:89:af:09:63:6f:23:67:ba:02:5f:17:c4:97:4f:85:26:c0:
a4:d6:a1:09:22:46:a1:69:b7:d5:98:72:d4:e4:8a:7f:69:bf:
f5:4f:56:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 20:40:40 2025 by rpki-client