Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
File: p9nJ2x4fiGAXe__cWPDvzZm5as4.mft (raw, json)
Hash identifier: gxeEwkrM19yLpmk4E5QFWuBClUke3p0qYUfBTJZRlFk=
Subject key identifier: A2:A7:CA:1A:D6:E8:DB:A9:11:23:ED:31:65:5B:F9:38:A4:19:6F:26
Authority key identifier: A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
Certificate issuer: /CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Certificate serial: 0198D54E28407EB9B987D0998BF2E6E18855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
Manifest number: 0E22
Signing time: Sat 23 Aug 2025 05:02:05 +0000
Manifest this update: Sat 23 Aug 2025 05:02:05 +0000
Manifest next update: Sun 24 Aug 2025 05:02:05 +0000
Files and hashes: 1: lC2KQAOisVOwxCnTUOf6nl08y8o.roa (hash: /DfGXFX3mvJ80lD2tCLD0oWxnch4EP1FqZDjENG9stE=)
2: p9nJ2x4fiGAXe__cWPDvzZm5as4.crl (hash: KMgKO26w3rD7DPaBnAsVEXx4/qdiKKKU6CFmvkv5JRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:28:40:7e:b9:b9:87:d0:99:8b:f2:e6:e1:88:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Validity
Not Before: Aug 23 05:02:05 2025 GMT
Not After : Aug 24 05:02:05 2025 GMT
Subject: CN=a2a7ca1ad6e8dba91123ed31655bf938a4196f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:70:84:7f:cc:b3:0c:83:12:d3:ed:bc:0d:
b1:67:9f:6a:37:cc:2e:2c:c5:b8:a3:c0:a9:37:96:
be:c1:36:e7:00:99:bc:d0:8a:59:05:6c:80:ec:5a:
94:c7:f2:8e:1a:66:05:79:86:f4:e7:4e:37:1b:93:
8d:42:33:b1:4f:b2:26:a0:17:9f:d0:78:70:1e:69:
e7:c4:d9:3b:01:64:f0:92:74:92:9a:28:eb:4c:98:
09:11:a4:a8:69:62:b9:50:ba:d3:a1:16:cb:18:69:
3a:17:28:fa:0f:b8:44:8c:42:ed:1a:20:e4:39:d0:
7f:07:66:df:d2:26:74:43:31:fd:88:53:f5:b4:ae:
db:ba:4a:de:b0:41:bb:ed:74:58:8b:be:a3:36:e3:
aa:95:e4:9d:fd:d3:6a:a9:10:c3:e7:6a:48:71:a7:
ae:ec:a8:a6:f2:6c:79:51:7c:fa:db:55:e1:d0:17:
b5:6e:b6:47:2f:44:95:42:a7:98:69:da:bb:4a:5c:
67:d6:2c:57:15:a5:a9:fc:94:37:c9:88:99:31:98:
31:67:3c:40:b5:95:80:e2:d3:bf:75:b5:89:2b:cf:
34:e1:1b:09:94:60:dc:d5:10:19:45:30:32:ef:c1:
cd:fa:5a:c6:04:6c:76:8b:93:df:9d:58:f3:0f:71:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A7:CA:1A:D6:E8:DB:A9:11:23:ED:31:65:5B:F9:38:A4:19:6F:26
X509v3 Authority Key Identifier:
keyid:A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:08:09:94:cd:ea:da:2c:e2:bc:67:dc:1b:61:02:72:39:83:
b1:67:f8:a8:fb:50:80:03:d7:85:04:78:1c:fa:17:55:f6:1d:
bd:89:f5:d7:92:34:2b:1a:3e:24:ab:b6:fd:e8:75:05:36:0e:
1b:1f:9c:07:04:21:f6:e1:39:3e:3b:9d:f1:d1:a8:ee:11:a5:
20:fa:dc:82:62:e9:29:26:ed:d3:3d:98:02:57:b7:73:bd:f9:
16:32:6d:4b:e8:21:a7:a3:a0:9e:14:77:e0:f5:2a:5b:b8:a0:
07:1e:f1:ca:ff:eb:88:d8:1b:61:d7:e8:de:49:41:04:ca:ae:
85:3e:04:ca:1f:37:1c:b4:a9:07:81:03:10:c8:34:ce:df:af:
e3:0f:5d:b3:b6:42:25:e8:41:63:31:75:df:56:d7:a5:a9:fd:
0b:21:10:d6:bc:90:a5:6b:2b:31:36:58:ea:c8:93:d8:c1:27:
4a:04:71:a1:7a:98:84:8e:c0:7a:46:72:a3:0a:38:a5:f0:db:
cb:51:8e:d7:38:88:33:c0:01:a4:07:2c:66:37:cc:ef:5c:97:
d7:fc:f2:d4:14:ef:ae:33:0f:96:8a:32:b1:2d:94:eb:a1:dd:
be:c3:e6:4d:64:f4:ee:a3:82:4e:a2:ef:26:d7:8c:bf:6a:0e:
e4:b7:12:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:57 2025 by rpki-client