Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: FbEYCTvdQTmCaulk/5OzaHclWif4mF0DAqK9M/8gtVk=
Subject key identifier: C9:4F:A9:8A:77:EC:8D:3D:8D:98:3D:44:88:AD:9E:9B:76:7B:EA:77
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 019837960286A14DB31049F86BF8D399AFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0597
Signing time: Wed 23 Jul 2025 14:00:34 +0000
Manifest this update: Wed 23 Jul 2025 14:00:34 +0000
Manifest next update: Thu 24 Jul 2025 14:00:34 +0000
Files and hashes: 1: 91Ml2kQH8w2tLiMLT6Fbcu6KSJM.roa (hash: EmTDmBXIKNOaEr2bWKxBRH3EXyiQ1ZJtO/knk/QxnbE=)
2: OI1uK9LvyBYMrxZk6Wtsms4rrxQ.roa (hash: r4xm6yQr/cgOXWzX1uA52pwqnclq3721sVsfso5FXPI=)
3: RuN1CEEKgWM9o41cCPWtfZFuKKk.roa (hash: KY9kNkQ0Sz03RyPbQ91gb1ujhJwFYP1J5IWur4t9itw=)
4: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=)
5: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: eJ6Np6Md6nuShZbW+a3xRWd9tRgfsQXi/iv+NohDirk=)
6: iw9kNkv-dkyYtEoLjtCHmwGGJs0.roa (hash: WAVrCgR0Lig7wZih5a6i+wCsRj3CJZHI3ntVJTN6GcM=)
7: jEuhOWOO-QlWKQlP_vQxpSPLQb4.roa (hash: T76BJeDOcF7APO1x6/gqGhi/5iskR6Zu3KBZKjePpuU=)
8: m07e6_Z6kS56JVFoiRbJDvuGsTk.roa (hash: VoYIwiaKUUQlxS0/2rdwETdn1uq8+mUfKc36O3nLq/M=)
9: w065yF2KMBb9aVnQ4BfNT-qmTRU.roa (hash: jJgjEmmyXXQf+/0rV+v9URt/GJe8fT1hRfQv43u3dw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:96:02:86:a1:4d:b3:10:49:f8:6b:f8:d3:99:af:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Jul 23 14:00:34 2025 GMT
Not After : Jul 24 14:00:34 2025 GMT
Subject: CN=c94fa98a77ec8d3d8d983d4488ad9e9b767bea77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:cb:32:4e:97:41:71:97:3b:1b:1a:86:33:
f3:1c:1f:82:c3:90:5f:c2:bb:e7:82:3f:b6:01:9e:
3f:fb:c6:82:f0:6b:fd:1f:41:4a:36:24:9a:81:e1:
15:ee:fd:e9:32:7f:5d:03:2d:fd:bd:c4:5f:ed:76:
46:9f:ef:47:ed:95:c1:5f:c2:12:18:27:c8:57:bf:
ce:e6:f1:24:bc:f9:f5:f1:4b:f2:8c:63:09:b3:a9:
2b:13:49:12:5e:80:71:48:64:93:15:54:ff:7f:8f:
ed:88:13:6a:e4:44:48:02:ac:cd:7f:1c:bd:3f:30:
c8:ea:96:1e:26:19:f4:4b:41:36:00:31:85:c4:9f:
99:9c:fe:72:9c:e7:b9:26:d0:df:fd:16:0c:1b:b4:
55:45:58:9c:2c:9c:4b:b3:db:f6:41:87:9e:5d:45:
83:2a:d2:9a:ad:a2:50:73:d8:f1:0f:2e:74:ff:3d:
00:13:45:cd:d7:87:db:87:8e:b7:8e:d5:0c:8f:a5:
9e:55:27:20:94:fc:6a:22:ad:95:91:5b:76:81:91:
5a:39:41:f2:cf:cc:fe:46:14:2e:15:82:62:16:1c:
7b:11:6a:e6:07:bf:c8:35:0c:fc:af:c6:1b:93:f4:
fd:68:42:0d:bd:ff:6e:d9:86:b7:08:d3:08:59:e8:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4F:A9:8A:77:EC:8D:3D:8D:98:3D:44:88:AD:9E:9B:76:7B:EA:77
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e7:37:e1:c0:99:44:f6:61:94:ae:9e:d3:9e:27:d7:07:94:
03:ab:03:35:72:93:da:f4:ca:e7:b4:d9:8e:ea:4c:17:80:cd:
b9:4d:6b:d8:e3:9a:40:1f:53:44:c0:d6:9f:a4:7d:29:d5:4b:
e0:d3:64:92:56:ff:5e:cc:dd:20:08:b3:c3:f2:68:8e:f3:cf:
f4:2f:fa:24:db:1e:a0:96:5d:b8:04:90:bd:85:17:e2:94:78:
13:88:17:47:23:71:be:b2:1e:4a:da:26:9c:0e:3f:3a:8e:84:
d1:d8:27:0b:3d:2d:f5:81:5e:70:ee:de:6e:98:b8:4d:59:06:
36:d3:46:ba:5d:20:0a:a1:11:9c:3c:6f:b3:0a:15:44:24:4a:
6f:9c:9b:84:35:2a:d9:4b:a9:8d:27:7b:e4:8e:47:b1:e0:fd:
3f:c7:7c:d7:48:b2:78:8d:5c:23:eb:a9:2a:dd:43:57:a3:68:
fd:af:bc:29:a7:d6:30:7b:46:d5:a8:5b:64:ca:95:97:b4:24:
14:83:aa:9a:9a:10:36:15:92:a3:dd:df:0c:f9:e2:a2:cf:1a:
44:44:5a:f5:4f:c9:eb:b3:56:c4:1d:2a:f8:90:4d:81:3d:52:
be:cd:25:00:39:f1:7a:ce:b8:90:ee:13:7b:c5:0b:6b:a3:46:
fb:6a:08:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:24:58 2025 by rpki-client