Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
File: 9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json)
Hash identifier: rxDyjL3r1nwl4x0STaonWkoAFrufSHcHGLBI7GHfPb4=
Subject key identifier: BF:17:14:90:CC:1C:AA:90:CC:9D:80:5D:98:B4:2D:2F:93:07:2D:8B
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 0198D5F1CD0872BE44597CB8279F5CBDCD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
Manifest number: 0C69
Signing time: Sat 23 Aug 2025 08:00:50 +0000
Manifest this update: Sat 23 Aug 2025 08:00:50 +0000
Manifest next update: Sun 24 Aug 2025 08:00:50 +0000
Files and hashes: 1: 2fQddCIl-7Oq1WuhVFDb_ItwFWs.roa (hash: G5bUTFThyurFxXPOBBEBFBWKjBkZ0p5sb4xbB9qr44M=)
2: 37QCkG1k9gzLrRMVOTELOapS-4Y.roa (hash: fObIS1yLlqyANULO1cGplwcB5m0pXnjdZmigUly+6NA=)
3: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: Q0086Kq0sDpF3jpcyK6oQLMFa4NAjqZni1vmvllrvlo=)
4: C8rZpiwRRKp7HiBYnxrXRCtzNP4.roa (hash: /a2qXNrKqG5G3jKSkvjhWWJd/4eBrgaawytg7M/VZPQ=)
5: gAIi2RzKXjXCtYGsVRw03pRZYeU.roa (hash: PvQsJF0P/z+mLUrW2+GtvSyLdhymARBFgfCdxNsU3JE=)
6: hkqOX4mECokeZ3ChLO-NkzoKVG0.roa (hash: jDSI0Vi3uJHnivxkTcLJyUGbXo6jl9OF+5YD1t9wHog=)
7: mo1ZQeGNb6y397AsNPVU_jqzCH8.roa (hash: xvLDiC6sAtB273J1JQ2La6KkENHeWFLQMNh6wUa0JGU=)
8: xEaq7kolhQn1OmIod6QQM1Gthtk.roa (hash: IC+2lUW0/0ySDq3Q6puBeGjrJpCDJAXfXz5IauHoRHE=)
9: yZE684PU1B3lT-aKA30arKwyTEI.roa (hash: isFNdgWP0HVp5O76X23OI/gh9YCy0xYVcwqK0QPMZ60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:cd:08:72:be:44:59:7c:b8:27:9f:5c:bd:cd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Aug 23 08:00:50 2025 GMT
Not After : Aug 24 08:00:50 2025 GMT
Subject: CN=bf171490cc1caa90cc9d805d98b42d2f93072d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:8a:99:a5:71:de:95:f7:ff:fb:60:8a:89:
c9:02:3f:66:fa:52:93:c5:15:74:83:c0:84:3b:fa:
06:58:fb:9e:f1:7f:af:ed:65:c8:7d:a5:af:de:3a:
ce:0a:72:34:f8:8d:89:e0:a1:81:94:0d:ac:ed:56:
d6:b7:b0:14:76:14:d9:bf:eb:89:8a:ff:4e:c8:02:
d2:69:b6:f2:22:97:8f:99:0b:4c:b4:0b:88:d8:f7:
89:c5:f5:b2:51:e6:58:64:64:62:9a:d5:3d:c2:c2:
3e:d1:c3:ba:da:d5:43:66:00:17:57:80:c0:b5:29:
fa:1e:f2:3b:f8:29:37:d2:62:b0:df:6a:ad:cd:7e:
c0:2d:52:11:c9:59:a1:ec:5d:22:98:7c:36:6d:aa:
23:da:df:78:fc:63:df:34:56:7d:55:64:1c:9a:2b:
c7:eb:98:92:d7:72:09:fd:52:01:3e:ea:28:c1:06:
21:9e:f7:c4:13:9e:9f:0f:ad:e5:6e:e4:ca:70:ec:
1f:9f:97:8e:f2:83:6e:d9:81:7a:71:84:a9:e8:73:
0d:1f:72:24:4d:25:4e:56:7d:36:75:2c:1c:17:06:
94:5d:75:7d:d7:1c:43:e4:f9:88:dc:7f:52:a0:1e:
64:9f:a2:9d:04:78:fc:6e:87:24:12:86:44:24:4f:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:14:90:CC:1C:AA:90:CC:9D:80:5D:98:B4:2D:2F:93:07:2D:8B
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:be:bf:fb:c7:41:a8:0c:d9:7c:f4:2c:5e:8c:94:04:0e:be:
63:ca:13:91:b5:56:3c:80:e6:82:9b:69:b3:79:84:06:75:49:
72:9d:f3:d2:6e:6b:bf:d2:38:cc:03:fc:7c:9a:a0:fc:f2:d8:
0f:bc:86:ca:ed:4f:26:ea:e2:15:fd:dd:40:38:96:32:0c:83:
f1:81:c0:f4:16:de:45:75:e8:b2:17:62:6b:37:b6:15:12:56:
04:cb:f7:7c:a5:f0:de:44:ed:8b:3f:0e:80:c5:90:69:0e:24:
cb:e6:16:82:29:28:00:fd:d9:33:ac:da:86:b4:04:8d:ec:50:
2b:5a:49:2f:e0:33:71:11:c8:09:ad:0b:93:9a:ca:3a:09:50:
d5:db:75:b0:d9:bd:7d:94:47:ec:30:1d:e7:2d:1d:da:04:c2:
18:29:45:4c:36:38:9d:dd:89:da:62:f9:f8:4d:f1:0e:aa:0f:
8d:78:e0:c6:a1:86:ff:a4:6a:1f:8a:37:bc:a0:09:93:b9:f2:
55:f9:7d:35:cb:59:ae:a1:eb:6a:b3:27:3c:ff:44:7c:af:02:
fd:c2:c6:aa:fe:b3:b5:d3:90:10:9a:05:5c:5b:d0:0f:22:83:
53:68:dc:a0:38:b5:d6:95:6a:5c:fa:0c:ee:5d:2e:14:91:c9:
7a:b8:83:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:32 2025 by rpki-client