Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier: J3RvDGEIE20uo3MF36kePWJp0qXJdyeVpeKix1Mcrao=
Subject key identifier: 81:3B:FC:FB:BE:AD:A0:FB:0D:56:2E:C5:2E:3B:EF:48:C7:4C:65:5B
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 0198D51593EDAE54D7C379F4674E90B59BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number: 1662
Signing time: Sat 23 Aug 2025 04:00:17 +0000
Manifest this update: Sat 23 Aug 2025 04:00:17 +0000
Manifest next update: Sun 24 Aug 2025 04:00:17 +0000
Files and hashes: 1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: UBq4nh67JcUscgzfcIgszTctJj7DQyQYNCL4WYjsgZ4=)
2: Rq5qhuZJL_f0RiemcCNo1CeBLZg.roa (hash: QjHh1mk02MSSyzdrymnZqYJyNlwN9P8BOUPtrzzXBu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:93:ed:ae:54:d7:c3:79:f4:67:4e:90:b5:9b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Aug 23 04:00:17 2025 GMT
Not After : Aug 24 04:00:17 2025 GMT
Subject: CN=813bfcfbbeada0fb0d562ec52e3bef48c74c655b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:70:93:ff:3a:aa:12:e4:eb:87:e7:84:93:
95:7c:67:6d:5c:61:86:47:3a:a7:44:fc:c2:de:55:
2d:01:12:7d:06:dc:11:79:4a:2f:b7:c4:24:77:0c:
21:a9:9c:45:d7:99:14:46:4f:82:20:c1:ca:77:85:
28:72:9c:91:41:25:d7:7b:86:76:62:28:39:68:d8:
9d:9c:0d:57:03:c5:62:10:01:f3:f0:5b:bc:da:ab:
4f:c6:28:78:62:8c:e3:88:c1:c5:a5:7c:63:85:09:
06:62:1b:d4:51:f4:d1:83:4e:95:9c:98:d7:1f:02:
d2:9d:f4:4b:7f:53:0d:3d:4e:0b:c7:60:61:2c:db:
dd:1e:8e:3c:91:8a:aa:34:4b:75:d1:e5:f5:85:2d:
c3:70:d8:17:e6:74:15:1c:dc:7e:cb:6d:b1:be:5d:
18:76:de:68:d4:a7:c1:fa:2d:da:ff:12:da:47:cd:
a4:d9:ef:15:be:64:19:9e:66:a4:1b:05:90:b5:ea:
21:f2:75:02:a6:0b:2a:be:3f:8e:15:e0:ca:b7:3a:
11:9e:07:9a:02:d6:d2:4b:4a:40:2b:6f:5f:54:c2:
13:b2:5a:4a:cb:f8:c7:31:b9:66:21:ea:20:b7:cd:
f8:ec:b9:48:85:b6:22:60:bb:60:1e:37:98:0d:c6:
0b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3B:FC:FB:BE:AD:A0:FB:0D:56:2E:C5:2E:3B:EF:48:C7:4C:65:5B
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8a:90:dd:f2:e6:f9:04:8d:a8:7a:2b:22:24:e0:f0:01:1f:
71:90:68:24:7e:95:0a:70:68:73:ae:ae:21:6e:5a:e7:ca:f8:
ba:26:3a:c6:79:b6:45:cc:7f:2f:5a:f4:33:04:d0:42:d3:3b:
1b:40:44:c6:c4:58:d4:67:8a:93:f5:39:b0:d6:cf:46:40:70:
49:36:ca:e8:70:c3:bd:da:73:0e:64:a2:79:8c:72:29:28:bf:
b1:0b:d2:6f:92:9c:c8:ce:8e:d4:28:19:fb:6b:eb:d7:b1:9d:
36:5b:18:88:0f:3b:04:d4:c4:80:bd:78:43:ca:c3:0e:86:d1:
8e:10:d0:2a:01:92:ea:5d:63:66:da:4a:32:07:e3:b3:10:6b:
cf:56:c4:b2:d1:d4:bc:59:18:04:f2:25:97:a9:c4:ba:c5:f3:
ba:e4:da:93:eb:f7:8c:75:2d:f6:33:fb:8e:9a:fa:16:d2:60:
47:76:e1:1c:9d:c8:6f:c2:7a:76:d1:24:7c:b6:99:62:7c:97:
f5:86:be:21:7f:f5:fa:9c:1f:d0:11:f9:87:ff:b9:c1:f1:d7:
b9:24:4b:68:e5:f0:68:57:12:b1:4f:b4:27:3a:56:81:e0:0f:
26:6c:79:7e:a9:30:fb:cd:96:ed:e5:da:f2:3a:33:8f:a8:59:
4c:bd:96:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:51 2025 by rpki-client