Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: /pwEiidyW/VuqiTQUY0nodlSH2SD6IIYRdsSrf3RnmQ=
Subject key identifier: 74:13:3C:69:3E:67:24:5D:D9:C9:D7:1C:5A:2D:40:F3:2F:C4:D4:3E
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 0198D583C4E263033911930AC3793E263524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0A73
Signing time: Sat 23 Aug 2025 06:00:39 +0000
Manifest this update: Sat 23 Aug 2025 06:00:39 +0000
Manifest next update: Sun 24 Aug 2025 06:00:39 +0000
Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=)
2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: maBtsznSaRZiRjGO2XCQQ/U2Us+IsB+NEhjfD8ZPn1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c4:e2:63:03:39:11:93:0a:c3:79:3e:26:35:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Aug 23 06:00:39 2025 GMT
Not After : Aug 24 06:00:39 2025 GMT
Subject: CN=74133c693e67245dd9c9d71c5a2d40f32fc4d43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:37:b9:e1:b8:a2:ef:05:3f:4e:7f:eb:a1:
b7:71:11:5f:14:3c:58:1a:44:8e:eb:2d:bb:82:e0:
b9:bb:1f:c0:33:70:86:06:0c:f1:d9:61:f4:41:a2:
90:09:91:ef:bd:cc:1d:5c:de:38:fd:56:da:a7:37:
06:7e:cf:50:3b:39:b8:3d:85:16:26:34:a8:f9:2a:
30:f0:39:3e:39:05:c8:5d:51:0a:da:14:d3:ee:71:
79:6a:99:2c:c7:f6:0d:0e:88:18:4c:52:5d:47:61:
1d:14:2f:64:99:4b:3e:b6:2c:e4:0d:e3:e8:17:88:
bb:48:37:93:d2:3f:f0:b0:ba:06:ad:ba:41:9b:16:
0e:12:03:2d:94:77:c4:5a:7a:60:71:ad:63:91:e3:
d5:40:45:6f:18:7e:79:20:bc:dc:d2:32:1f:95:23:
04:0f:79:71:3b:e4:45:14:27:b2:17:cc:fc:8e:b2:
d1:90:56:ea:13:9a:59:83:37:41:ba:4c:db:8b:17:
82:3f:d2:c1:2c:25:42:00:dd:c9:83:20:6c:17:08:
f7:47:3a:b4:28:1c:5f:ba:8a:d1:35:5a:43:0f:e1:
6e:cd:c9:84:4f:b3:46:80:3a:9e:ce:45:80:52:16:
51:0b:68:d2:78:8f:77:96:75:9c:ab:8d:6f:81:31:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:13:3C:69:3E:67:24:5D:D9:C9:D7:1C:5A:2D:40:F3:2F:C4:D4:3E
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2e:b9:26:0d:ba:70:d0:eb:67:2a:cc:4e:8e:f3:4d:89:8c:
64:d1:81:8d:6d:36:af:8c:a5:de:43:ed:ad:a2:ca:d5:66:8c:
74:72:3c:67:ba:e3:b1:1c:12:69:af:15:bb:40:72:2f:2e:ef:
dc:42:b5:04:12:77:af:86:d0:5e:34:ec:92:aa:32:ab:69:b7:
d7:cc:09:c7:92:3a:bf:28:12:00:2c:fd:a4:2f:a5:7b:24:21:
04:76:cc:99:39:85:0e:77:17:db:f8:be:87:6a:c9:82:de:12:
ee:fd:20:9c:37:2b:e2:7c:48:b2:b7:a9:8e:85:b3:7e:ba:6e:
68:30:0b:84:1f:66:08:03:6c:01:90:82:67:8c:9f:28:df:fa:
a1:4e:d3:d5:73:0f:b3:ea:cc:15:ec:4a:8d:f1:cb:42:7d:62:
b8:f9:1f:a0:15:5b:8e:49:f5:59:d2:28:25:ff:e4:19:27:df:
26:80:54:f8:b9:e7:aa:a2:07:45:c5:94:fe:e8:1f:88:94:6f:
24:08:a5:32:a1:c8:01:14:53:29:b3:1b:f1:db:fb:11:25:e0:
95:50:09:3c:8e:af:89:5e:01:af:cd:fa:a5:d3:88:12:05:64:
1e:ba:fe:a3:70:67:53:18:b3:60:01:f9:b7:80:da:e9:da:cd:
fb:2a:96:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:06 2025 by rpki-client