Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier: eFAoaEA5ULrLPTLKKHFJ8aw4AUMPdEEeM0aePZZKVEw=
Subject key identifier: AD:5D:CF:8D:64:10:F9:2F:3C:2F:29:B1:17:C6:5B:DE:42:3B:F9:1D
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 01992C6B05D257EFA2EA0A77303B41A4B8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number: 1686
Signing time: Tue 09 Sep 2025 03:00:35 +0000
Manifest this update: Tue 09 Sep 2025 03:00:35 +0000
Manifest next update: Wed 10 Sep 2025 03:00:35 +0000
Files and hashes: 1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: k/RRZWBbX81xlV5ck8ixkbZWe+wf3HQbhtHHLfJht30=)
2: Au5N1BIeKXe-z7QHSQZe_zM8f7I.roa (hash: 6DwA81wGaSCf3eN1Ke/HY6YBMt0qhJfpBCN/zfaPgcc=)
3: VThOfYn2yicDk7nCFvApHsO86Wg.roa (hash: mej7dGpuagdDYe3wWlS5P2O07cvlpo15DDfF6tOHiTI=)
4: uOIlSnTF6fTtDAo-t67l55RoI68.roa (hash: dB5cropfobX2xCE84HM5iEAEEedSs1cybSdhKv0KvQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:05:d2:57:ef:a2:ea:0a:77:30:3b:41:a4:b8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Sep 9 03:00:35 2025 GMT
Not After : Sep 10 03:00:35 2025 GMT
Subject: CN=ad5dcf8d6410f92f3c2f29b117c65bde423bf91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:a2:7c:c8:d8:aa:77:54:c0:05:c7:47:5a:
b3:35:26:e1:c0:4e:b6:83:3b:94:b5:05:38:43:01:
df:23:29:5b:67:4b:ff:d6:a6:0d:6b:9b:ee:fc:8b:
f6:c3:ed:b4:95:37:48:8e:3c:c1:3e:25:30:3b:dc:
ef:bc:b6:81:1e:b7:7f:73:d2:1c:b9:60:23:1b:9b:
55:01:7f:85:a5:96:9d:4c:32:c0:b6:14:f7:3c:e3:
94:31:96:06:34:1f:f0:e4:8e:cc:0e:34:48:a8:f0:
d7:12:f2:eb:5a:e4:83:ff:2a:a3:a1:85:ae:1f:71:
3d:0b:f6:a5:74:3a:68:e8:60:65:70:c3:52:d8:3c:
4b:18:67:97:2e:9a:a7:4d:34:cc:af:e2:7b:6b:86:
18:f8:55:41:34:71:ec:b0:c8:2e:61:d1:19:9d:0c:
43:10:ae:97:2a:99:ef:26:4b:9b:93:8d:95:0d:36:
81:e5:8a:59:f6:53:4b:18:8f:4a:ec:c6:e1:19:43:
03:04:9d:45:89:47:00:af:fd:39:7a:97:99:03:92:
7e:ab:cd:f2:5a:2e:7e:93:14:2d:53:dd:c1:09:40:
2b:57:58:e9:cf:e3:cc:fe:bf:8a:8b:89:51:d8:f6:
ed:27:73:24:d3:f9:d5:15:19:4c:a8:62:46:1d:88:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5D:CF:8D:64:10:F9:2F:3C:2F:29:B1:17:C6:5B:DE:42:3B:F9:1D
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2e:50:8e:0d:37:d3:97:77:d3:75:a1:e1:c2:f2:4b:80:15:
80:8c:3e:53:51:87:01:1a:88:3b:2d:b0:25:42:d2:05:fd:2a:
51:ae:e3:1b:be:d3:79:fd:e5:20:40:66:7c:23:0f:cf:14:17:
af:45:f8:12:87:09:e0:51:1d:31:14:c3:d5:93:59:aa:29:60:
6a:80:56:fb:8e:af:64:90:c1:63:f8:79:d0:21:de:42:3d:7c:
f9:00:46:16:17:a7:13:42:8d:80:3e:bf:0e:2d:74:30:54:d0:
4a:27:aa:ec:8c:d0:f5:2b:16:b0:ea:78:77:2c:a1:a6:30:5d:
f1:ec:35:19:03:c3:6e:fa:a4:44:78:92:2d:11:11:8b:fe:a7:
eb:5b:f7:2a:f2:76:79:f7:03:50:13:13:61:e6:fd:61:3c:bf:
f0:6f:4e:ef:ac:39:8f:8c:f9:40:68:cf:04:61:7a:1f:71:78:
6e:5a:e3:7c:dc:7f:eb:47:c3:7f:27:0b:ee:db:db:48:dd:f3:
d8:93:b6:c7:b7:b7:bf:8f:d9:62:14:d1:dc:22:bf:1c:98:d1:
4c:61:3a:b1:4c:b9:81:9b:ca:7a:94:4b:05:a5:6d:53:14:89:
ad:df:db:d5:bf:59:8c:41:7a:e2:30:60:eb:6d:51:ae:83:fc:
ee:e3:8e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:27:13 2025 by rpki-client