Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: jWHc5jKqC22gkRzPS64gaW+LV/AjbBJmhkEBRy1dvGw=
Subject key identifier: 97:8A:3E:75:81:21:4C:80:8F:1B:18:4E:DC:05:63:9C:0F:15:C7:F7
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 019922C2EF12DC2AE4D90EBD5B98E0D6E6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 06:00:24 +0000
Manifest this update: Sun 07 Sep 2025 06:00:24 +0000
Manifest next update: Mon 08 Sep 2025 06:00:24 +0000
Files and hashes: 1: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (hash: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: F+FoVRs4bWNGnSfa6PVESwTDTg0vhPhshHTFRac3MtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:ef:12:dc:2a:e4:d9:0e:bd:5b:98:e0:d6:e6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Sep 7 06:00:24 2025 GMT
Not After : Sep 8 06:00:24 2025 GMT
Subject: CN=978a3e7581214c808f1b184edc05639c0f15c7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:81:4a:84:80:3b:38:eb:8e:7c:b6:5f:e7:b9:
fb:70:a3:05:35:8f:23:7a:b4:75:22:62:e0:0b:fe:
ec:65:bd:ab:9b:d2:72:62:5b:59:09:a8:11:dd:3c:
f1:15:5b:f7:06:9a:a8:04:dd:86:0c:1f:66:bf:b1:
ca:74:6d:be:bb:b5:7c:11:57:52:56:f3:34:7f:b1:
db:01:b0:85:a5:33:45:23:fb:ff:f2:63:c0:d1:06:
07:4b:e3:27:66:5c:af:cc:3a:91:fc:2c:46:32:ea:
a9:17:b2:5f:24:32:11:55:f5:41:bb:9f:5d:00:e6:
34:6e:d0:77:5d:41:9b:5d:ec:d2:44:3a:28:0a:3f:
03:fa:e8:90:30:ae:18:c3:e7:86:78:da:4f:58:7b:
b9:e7:79:bc:0a:e6:e0:6c:a4:22:b1:63:86:ec:1c:
45:3d:43:5c:55:42:dd:31:64:7d:39:26:77:15:c2:
79:00:cb:0a:c7:cb:30:92:0b:6d:78:6c:4d:c8:a5:
5d:f0:3d:59:53:94:3a:d9:a6:b5:25:0c:0b:01:61:
ae:62:ee:51:88:67:9e:64:f3:31:de:e3:ff:08:3e:
4e:cd:a3:1a:c4:0a:4f:85:8a:74:c4:23:9d:a7:d6:
9c:f3:c0:f2:ce:0d:f3:c1:4d:8f:3f:16:1c:6d:55:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8A:3E:75:81:21:4C:80:8F:1B:18:4E:DC:05:63:9C:0F:15:C7:F7
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a2:b2:97:2f:22:69:3a:64:53:d9:70:6c:8e:92:a7:ce:c7:
47:70:17:7a:da:94:89:18:8f:1c:85:b7:ea:6e:55:06:df:2b:
0c:23:c5:2f:e1:21:40:61:f1:8b:6c:d6:61:b9:c9:e2:7d:2a:
36:65:72:c3:04:a5:d7:f0:9f:00:dc:b4:c9:15:0b:c3:b4:8b:
90:11:be:4b:1b:00:a7:d9:42:6e:88:cf:22:36:6c:13:ff:a8:
da:a1:6f:e8:19:05:11:8e:e0:6f:c3:3d:d0:9c:ff:ce:d1:1b:
17:20:00:78:3b:b3:aa:83:25:23:c8:ce:88:c3:94:c1:08:9c:
6f:d3:6b:10:59:1f:52:3c:31:91:88:50:eb:4f:62:f5:e8:2c:
f2:8a:69:92:90:4c:23:ae:28:ce:f9:dd:13:45:b4:61:c5:89:
c1:1d:f7:1f:3a:57:c0:37:00:e2:27:1a:69:2b:ed:7e:1a:72:
32:ce:3d:4a:e4:74:5f:51:84:56:e1:b5:5d:cd:18:05:e2:84:
f1:c2:f2:d3:12:a8:27:e7:70:4a:de:47:83:e4:10:b6:5c:de:
2e:b5:30:d1:bb:6f:40:ff:09:e7:fd:f2:9a:98:dd:31:99:56:
7a:e1:1c:fd:08:b5:0d:ae:4a:d1:a2:56:4c:24:96:52:14:9c:
0a:9a:b4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:38 2025 by rpki-client