Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier: 8ebGfO2On3BKX8L0RZv1Dc+hxB01Q/3JtgRgC8lMLqM=
Subject key identifier: E9:EC:7B:24:59:17:A8:47:F3:BA:13:3B:BC:34:65:F5:29:CD:47:0F
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 0198D6984B1B253E3BD660EBBC7AA0D82A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 11:02:41 +0000
Manifest this update: Sat 23 Aug 2025 11:02:41 +0000
Manifest next update: Sun 24 Aug 2025 11:02:41 +0000
Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: qpPYVWYr+hVjmdhazKbQQua8M8tF0309ffvJKvug0II=)
2: liKr9r8FMDweCFSU14hBTeBiJGg.roa (hash: yTAfLgiLewRGMW9BR3bDVbC2pPmowcN0vbDNQIsIUcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:4b:1b:25:3e:3b:d6:60:eb:bc:7a:a0:d8:2a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Aug 23 11:02:41 2025 GMT
Not After : Aug 24 11:02:41 2025 GMT
Subject: CN=e9ec7b245917a847f3ba133bbc3465f529cd470f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:3d:5e:7b:07:0b:e2:3e:bf:56:db:50:c3:
e4:8d:e0:04:22:22:4c:b7:50:33:00:bc:d4:b8:c7:
e3:01:ae:99:64:09:48:26:66:f5:4e:ae:04:16:4d:
09:2e:7d:0a:e8:f8:40:04:46:c5:78:43:85:9a:ee:
b2:fe:02:41:fd:e3:3f:fb:77:40:08:26:46:48:df:
2c:b7:c8:c7:3e:87:b4:81:8a:9b:ef:0b:1c:bf:98:
a3:3d:d1:fb:09:71:8d:ca:79:15:94:8a:0c:43:30:
89:4c:2d:59:d3:31:45:ca:25:1b:4f:22:10:e0:34:
bf:e9:1e:bc:ff:a8:eb:b5:e1:dc:e5:21:6a:9e:bd:
fa:c4:33:79:ff:9e:6c:9a:53:f8:88:73:f6:af:d9:
76:86:c0:f2:fb:ce:9e:5f:01:04:b0:f5:35:ab:06:
25:de:a8:e3:ec:e7:c3:93:d7:f3:f3:c3:b0:83:2d:
9c:3a:d0:5a:80:43:e1:ca:b7:20:14:4e:7a:68:f0:
28:b2:22:86:47:29:42:ba:96:3d:af:70:0c:e4:8d:
ac:24:44:80:de:4e:01:b2:75:a2:8f:1b:b9:bf:2a:
c7:d1:43:51:c7:36:7b:86:8f:e3:85:33:f9:5d:6f:
99:48:ed:7c:be:2c:00:3b:73:9b:94:81:fa:8c:8a:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EC:7B:24:59:17:A8:47:F3:BA:13:3B:BC:34:65:F5:29:CD:47:0F
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ea:33:4d:a0:fd:62:03:14:ea:f9:7b:20:f3:41:b2:90:fe:
66:7f:89:1d:af:81:6a:fc:78:84:33:4f:3d:33:bb:22:05:3f:
ed:4e:aa:ab:51:a2:43:9d:22:12:8c:b0:85:57:81:6a:68:47:
e3:66:09:e7:52:7d:7e:15:a3:84:19:3d:3c:2d:7e:0f:0e:41:
37:83:cb:e6:7d:fb:ed:62:96:f3:94:c1:c1:a2:32:42:78:3d:
78:d9:c1:25:af:29:76:32:f7:bb:f4:6c:d9:73:c4:ce:6c:10:
0a:29:31:db:e6:8a:3a:4e:9c:57:4e:f1:4d:1b:f2:46:13:4d:
f1:74:f0:6d:35:be:85:85:41:38:12:ff:50:72:30:70:be:44:
41:78:87:8a:1b:d8:1e:24:7d:7e:e9:5a:8f:61:f7:8c:db:95:
30:36:e0:69:20:38:e2:40:37:e8:29:ad:85:d6:7b:4a:21:06:
d1:d3:0d:b4:19:ec:de:65:12:e6:b4:13:e9:70:aa:55:49:e6:
f3:6b:7a:3e:40:16:d8:ea:26:de:d6:00:d5:e5:2e:fc:29:21:
7b:fd:05:53:f0:0e:14:4c:95:f6:38:b1:80:d9:b9:42:69:03:
be:54:aa:8f:f3:b0:cb:b5:e8:cc:c5:d1:22:66:bb:ae:33:7b:
84:f9:63:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:11:14 2025 by rpki-client