Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
File: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft (raw, json)
Hash identifier: wJjPTJZm32QTiI6JP0BNaFWlXzLrTfXgkVu9RTehTPE=
Subject key identifier: 7F:44:C7:EC:54:12:8D:15:65:19:4B:0C:92:A4:EE:D9:40:8F:84:2D
Authority key identifier: FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
Certificate issuer: /CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Certificate serial: 01992BFD351A2180F7D1CA1B50CC5749AB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
Manifest number: 1607
Signing time: Tue 09 Sep 2025 01:00:38 +0000
Manifest this update: Tue 09 Sep 2025 01:00:38 +0000
Manifest next update: Wed 10 Sep 2025 01:00:38 +0000
Files and hashes: 1: GDYfoKKG3yFaIjJkJ3YCAK8hLqA.roa (hash: erb5aM2h7W5I1XqnWYG/lDx7/8zDPLRd0RbZw0dE/qs=)
2: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl (hash: 8QJ8EQzlMhxhLi3ML1012CME+UYzfKGGxJFraQuSJ5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:35:1a:21:80:f7:d1:ca:1b:50:cc:57:49:ab:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Validity
Not Before: Sep 9 01:00:38 2025 GMT
Not After : Sep 10 01:00:38 2025 GMT
Subject: CN=7f44c7ec54128d1565194b0c92a4eed9408f842d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d4:e1:13:71:fb:be:d8:d6:be:d8:cb:a4:41:
db:3a:8d:f5:98:96:a1:c7:9a:7c:81:7d:59:91:6f:
f3:0e:e0:de:92:1c:b2:f6:ff:86:51:0e:12:cc:7b:
a6:77:26:dd:1a:29:29:93:cc:ba:ca:11:82:48:52:
f2:7b:7c:62:ee:04:cb:36:cf:46:eb:e6:9f:b7:32:
f3:38:4e:4e:9f:fa:76:b9:cc:3d:71:e6:c6:49:f8:
22:9b:7d:87:ad:74:fb:9c:c6:eb:31:c8:7e:76:7d:
92:d2:e9:5c:1a:eb:73:6b:5c:29:54:27:e5:68:72:
56:78:bc:c7:52:33:51:6f:b0:2f:33:fb:2d:87:e0:
5b:c1:73:54:fe:c4:3c:90:78:f1:ee:68:9e:67:59:
e3:34:c5:fd:0b:17:e0:e9:02:f0:db:7f:0d:8d:a6:
0c:91:21:26:3f:68:c6:3e:97:bf:01:17:19:bd:61:
62:92:31:00:6f:7d:61:06:a4:16:bb:f9:46:19:df:
35:ac:a5:c6:a6:09:8d:e9:a4:8c:ee:e0:51:00:55:
03:f6:09:a9:9a:7d:da:a2:df:4c:13:9e:91:d2:19:
c1:e7:67:c9:e5:00:ac:75:88:5e:ac:96:85:b1:93:
90:29:6b:8a:1e:8b:83:f6:f1:99:0a:ff:0b:1c:da:
3d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:44:C7:EC:54:12:8D:15:65:19:4B:0C:92:A4:EE:D9:40:8F:84:2D
X509v3 Authority Key Identifier:
keyid:FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d3:5d:f3:b9:83:dc:19:d8:82:f1:0d:aa:ad:bc:5b:e2:d0:
57:b2:ff:61:7a:b2:40:48:28:85:e8:de:f5:d2:59:27:69:3d:
d5:c3:3b:f7:9d:67:3c:ff:18:ce:09:d2:f6:aa:d1:a8:8f:a3:
79:53:65:1f:c8:c5:5d:5a:b5:f3:42:bc:02:c6:5c:0d:a0:08:
b1:8c:68:a7:c6:28:e6:8f:54:8d:6c:c4:b1:f3:cb:49:80:da:
38:de:e7:ea:79:01:9c:8d:10:ee:38:40:c1:7b:93:4f:d5:90:
9e:56:1d:0d:7f:ea:9a:30:90:e7:a0:49:e0:8a:49:c9:cb:54:
ae:83:58:4f:78:29:ca:71:c9:d6:9b:23:1b:88:bf:07:1d:21:
d3:7d:ef:41:33:22:d7:0e:85:f2:f0:55:e2:8a:22:ad:c7:eb:
91:6c:0f:40:a1:2b:5f:3d:4f:f1:f2:ec:4d:2f:3c:21:e4:e3:
1e:6c:af:e5:36:9c:b6:ae:03:c4:76:7b:cb:2f:48:59:d1:57:
d3:5f:63:da:8d:78:d2:fc:99:ce:94:5a:89:19:63:ea:76:ea:
5f:06:f8:85:a1:f1:9f:00:13:e3:4b:4a:26:ec:7c:0d:9a:36:
b5:dd:2b:39:c5:84:5b:23:50:b8:18:82:e7:c7:8a:9b:8e:cd:
d0:7a:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:52:29 2025 by rpki-client