Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
File: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft (raw, json)
Hash identifier: cmybXeHyIk+jxs4zpTz+FpEUjenEazJHOS3Dc8+4sKI=
Subject key identifier: 19:A8:9B:00:AF:76:2B:9A:7D:31:B6:68:0E:84:BF:08:1A:99:E7:B0
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial: 0198D473AA19ECA77DDFE1FB654A14E77098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
Manifest number: 0552
Signing time: Sat 23 Aug 2025 01:03:26 +0000
Manifest this update: Sat 23 Aug 2025 01:03:26 +0000
Manifest next update: Sun 24 Aug 2025 01:03:26 +0000
Files and hashes: 1: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl (hash: msL8SwBo8NVjKvphch48zkDcnuxt1MkMt7PsOnN7tJc=)
2: hmRzovRV4UHybR1HxVtSJMOLDCw.roa (hash: OsQ6iHBOvn0+b51MYRo/b13uIhsZ7r4gypQoB9TbMVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:aa:19:ec:a7:7d:df:e1:fb:65:4a:14:e7:70:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Validity
Not Before: Aug 23 01:03:26 2025 GMT
Not After : Aug 24 01:03:26 2025 GMT
Subject: CN=19a89b00af762b9a7d31b6680e84bf081a99e7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:d7:bf:da:24:96:5f:08:32:ef:5a:af:af:
0a:c5:c0:3b:7b:ce:f9:8d:6f:ef:07:b7:8e:b1:b0:
d2:b6:21:79:fc:c4:ee:ae:8b:26:bc:d3:d9:9b:50:
9f:db:26:b8:e5:65:23:47:63:dc:ba:88:2a:3a:2f:
15:af:91:30:90:cf:55:79:16:f5:9a:1a:24:95:5c:
e0:6f:b4:41:be:5d:bc:01:80:26:0f:2d:62:f2:53:
4e:42:e2:a2:c7:1d:d5:cc:bf:14:46:e7:13:1c:3a:
4e:d9:ae:da:a6:89:43:c6:31:0b:e3:1e:a8:96:46:
14:9a:29:32:fc:04:2f:f4:74:df:97:e7:66:8f:12:
8d:01:b2:43:03:70:7f:3d:ff:1a:09:72:d6:3c:90:
a6:6c:18:79:bf:68:25:1e:d4:71:ca:6c:64:c8:e1:
09:7b:ef:27:7b:9f:f6:dd:4a:a8:dd:07:86:2f:2d:
db:76:c4:75:5f:3c:72:0c:1f:e5:e1:ed:2f:45:9b:
ed:a7:96:db:e5:67:9b:09:9d:b0:f6:68:8c:ed:f3:
b7:32:ed:06:d4:a0:ea:f0:98:01:70:eb:69:4b:df:
5b:28:75:7e:ca:6c:4a:f0:54:a1:6a:cf:d5:69:c8:
1a:28:d5:9b:d2:9e:bc:7f:c3:e7:ef:bd:a1:c4:49:
fc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A8:9B:00:AF:76:2B:9A:7D:31:B6:68:0E:84:BF:08:1A:99:E7:B0
X509v3 Authority Key Identifier:
keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5d:f6:90:fd:06:0e:a6:b6:1d:13:3d:e9:c4:8e:f7:17:28:
a0:61:c5:da:ca:ea:f6:a1:0b:d4:da:7e:25:f9:ee:5b:42:4d:
63:bb:e6:d4:da:a6:09:c8:d2:11:34:ec:11:ae:75:1a:95:72:
46:4f:4c:28:77:cd:a7:e8:0c:f2:3a:12:c2:22:fd:b7:80:e0:
f8:08:d6:ab:6b:df:01:e4:af:13:a6:4b:15:90:6c:73:fa:58:
66:f2:19:d6:44:87:bd:98:71:eb:09:ca:e6:d3:2a:99:8c:5a:
1b:47:ef:b3:22:56:24:10:50:74:50:d7:6c:61:b4:85:e1:82:
38:f6:6d:ce:8e:e2:25:2e:43:20:98:32:2f:c1:ce:7d:69:55:
db:ea:7b:9a:a4:98:ee:f3:b1:83:45:ed:60:36:a5:e3:dd:8b:
03:61:04:77:1c:e3:9c:25:ea:ff:7f:c8:6b:56:f2:ba:53:6a:
00:29:eb:b6:28:cd:3b:91:d9:e8:a0:e7:4c:32:9d:6f:49:d5:
cf:30:58:e4:70:74:da:79:f8:7f:a9:94:04:aa:d4:c7:6c:6b:
d9:24:ec:1b:88:6c:9f:2c:e5:99:78:dd:c4:d7:f7:34:07:00:
b4:6c:b2:12:18:6f:82:f8:01:29:98:5c:35:11:b3:7b:d1:69:
35:91:09:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:12 2025 by rpki-client