Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File: c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier: +k3AbC+Oa+Xp4IiPMKkjFhY+MCg1Tuv4RPGxzplA8q8=
Subject key identifier: FA:66:1D:8F:51:6E:8C:B8:30:F1:49:D2:12:A0:FD:77:A1:66:EB:63
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 0198D66019F24C1961F7AEF292C8FF2F222F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number: 0A8C
Signing time: Sat 23 Aug 2025 10:01:18 +0000
Manifest this update: Sat 23 Aug 2025 10:01:18 +0000
Manifest next update: Sun 24 Aug 2025 10:01:18 +0000
Files and hashes: 1: ag-XVm500Ink_y9Z543W0cYT2e4.roa (hash: LTklb1ptuKPn0530SuHC20oeHYTlb0YVhREmYDi0qn8=)
2: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: C8yb6FwIif24nL1KWjxMnIvw2+5Fet+SA4q5ky5U3h4=)
3: xqtuxbgfgKOQAXDLHhW5kYSASLM.roa (hash: Akx0xbIbgUFrWIKc+N3GbCju1aCG4ckavEzXznoEvO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:19:f2:4c:19:61:f7:ae:f2:92:c8:ff:2f:22:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: Aug 23 10:01:18 2025 GMT
Not After : Aug 24 10:01:18 2025 GMT
Subject: CN=fa661d8f516e8cb830f149d212a0fd77a166eb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:29:15:23:fa:24:de:c8:2d:55:fe:f4:2a:
2f:11:d5:d3:12:44:1b:c0:f1:bb:94:e0:e5:ba:2f:
10:cb:eb:36:c2:18:49:f8:a7:46:25:d3:bc:f7:56:
0c:4d:46:0a:24:b4:b8:b8:dc:94:6d:85:84:ac:ca:
3f:69:81:61:00:e3:27:5f:e6:b0:41:c7:cd:3b:bb:
4c:4c:8c:62:41:8c:93:0b:8d:9d:09:24:27:44:45:
c3:24:15:4e:26:77:ea:58:b6:ea:ab:3a:ea:24:08:
22:97:7f:19:ee:81:b0:23:17:d7:17:80:8f:63:c7:
1d:89:1b:44:af:3b:68:1f:31:db:b6:cc:b1:e1:ab:
4c:b3:2d:0c:3e:d5:23:13:53:f7:24:ca:df:b4:b9:
40:a2:d6:e9:99:82:70:11:b5:fb:2f:54:ae:41:89:
05:09:9d:d3:d4:91:cf:1e:7c:a8:c4:b8:d3:28:58:
63:98:8b:fd:95:45:e9:e1:9c:a8:41:d6:0b:94:da:
60:c2:fe:59:2a:8e:3a:f3:87:f6:de:52:a5:a8:a1:
4c:24:9d:b8:d6:d7:59:00:34:2a:f5:f3:22:8c:c8:
97:fa:27:b5:82:ce:37:41:e9:77:82:82:d6:de:cb:
d9:63:d8:9e:da:76:af:42:70:94:30:d5:27:8a:3a:
79:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:66:1D:8F:51:6E:8C:B8:30:F1:49:D2:12:A0:FD:77:A1:66:EB:63
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:29:a0:6a:c6:11:b5:78:df:20:a1:24:f5:ac:2a:84:aa:99:
0d:c4:7f:3e:e1:98:5a:55:d3:36:22:d5:9b:49:28:37:14:37:
6f:5f:32:32:dc:ee:43:9f:e4:ce:d1:ba:33:02:36:ff:5f:af:
7b:92:3e:08:f5:fc:82:85:11:4e:c2:00:b8:b4:aa:9a:ed:36:
d3:37:ee:7a:65:e6:80:09:d5:85:f6:14:a4:31:dd:8e:2e:3c:
11:e3:72:fa:f7:12:d0:37:68:8a:3c:1b:a2:1c:ff:81:80:39:
a3:15:f8:42:2b:10:c6:da:e6:a4:0c:60:61:86:90:1e:84:98:
81:0e:05:13:2b:f3:e4:11:8b:5c:41:3d:da:4c:15:7c:05:6e:
97:52:01:2b:cb:0b:1a:c4:fc:e3:9c:0d:94:52:7e:aa:cf:c8:
46:a4:b5:b8:51:e8:cd:86:67:ea:8c:bc:e0:ac:35:84:19:93:
e4:03:82:ad:02:d2:da:d7:cc:f4:4e:37:3f:b9:9d:12:93:2c:
79:9f:67:64:8c:0f:f4:4f:c2:83:35:23:1f:f5:de:79:84:f8:
fa:ab:d8:8f:5b:59:6b:1b:6a:ea:06:73:73:14:7a:c1:0e:ba:
10:b8:6a:fe:1b:c1:6b:f1:a7:1c:e9:93:4b:1c:de:71:46:9a:
26:0b:fe:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:04 2025 by rpki-client