Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: 8hOWaWwZ5KynIIXZ+QoaaeGy1enz4SUVnlwZxgyXGzM=
Subject key identifier: 0A:9C:D9:D3:79:BD:DC:2D:9A:93:2F:9C:AC:3B:E2:9D:82:3F:31:6B
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 0198D7A9688FEBBD69EC15FB61FCE6BD70AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 0EBE
Signing time: Sat 23 Aug 2025 16:01:00 +0000
Manifest this update: Sat 23 Aug 2025 16:01:00 +0000
Manifest next update: Sun 24 Aug 2025 16:01:00 +0000
Files and hashes: 1: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=)
2: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: DcsZUPL7J2oChml3zgIxQKP664udtz1bESDTbFBG8KE=)
3: zxF5fdMEgwZjxjRCkFvtSM6cNiE.roa (hash: /aNfoxAWWXZ24dSnA+fFMNRvHS3pHzntsjJo5PzS3sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:68:8f:eb:bd:69:ec:15:fb:61:fc:e6:bd:70:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Aug 23 16:01:00 2025 GMT
Not After : Aug 24 16:01:00 2025 GMT
Subject: CN=0a9cd9d379bddc2d9a932f9cac3be29d823f316b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:ba:e5:fe:6a:55:ba:4e:19:0d:5a:49:73:
2b:2e:e7:67:8e:b0:b1:d1:c3:55:26:c3:c6:f1:2b:
3d:80:0a:98:98:a5:b1:be:c1:96:b4:87:1c:ef:89:
57:a5:79:88:29:6e:19:45:ac:83:06:6a:a0:2b:c3:
23:e4:d6:02:10:87:81:0c:d2:16:7e:93:17:83:78:
04:c8:a3:e8:a8:ac:e3:9d:fa:14:1c:da:28:5f:f8:
3a:e2:d0:ec:43:1f:2e:d6:49:db:35:f9:e0:f1:66:
d5:6a:a9:19:3b:24:55:f6:56:52:15:64:6e:a8:45:
0c:04:ea:c3:6f:72:39:1e:70:fd:e5:e0:ed:0d:e0:
a2:00:71:ca:19:7a:0f:8b:b6:4e:e1:ab:76:63:dd:
a6:94:ba:10:dc:23:17:a8:b9:1b:16:52:c4:5c:1f:
d4:b3:0a:29:c2:27:72:9a:ba:14:55:6e:7f:31:81:
53:3d:19:c2:ea:44:4b:91:e0:de:8a:b3:9e:e2:01:
c0:2a:e3:bb:3a:de:1d:13:92:0b:04:6c:62:2b:f3:
b2:aa:7c:39:10:70:d8:f5:ae:3b:30:7a:51:61:8c:
d0:86:1f:88:85:66:ac:d8:f6:6d:ca:0b:66:cd:36:
27:6f:98:e7:d8:35:15:f1:e3:22:b2:e4:57:74:c4:
97:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:D9:D3:79:BD:DC:2D:9A:93:2F:9C:AC:3B:E2:9D:82:3F:31:6B
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6f:00:e4:a7:e4:fe:3c:0b:ed:a3:dd:bf:c0:a6:b6:f3:b0:
05:a4:e1:91:72:06:54:65:2b:58:48:e3:7e:d9:68:af:82:4e:
45:ee:d0:57:96:fc:86:95:1f:c1:7b:50:49:6c:34:8e:26:fe:
cb:ed:59:d0:9d:a1:c4:04:56:28:d9:30:86:e8:91:8b:69:1e:
36:6f:43:ae:66:04:32:20:3e:27:83:8c:7e:d3:1b:4e:2f:20:
ab:ac:59:55:78:90:12:2b:3a:63:0d:23:b6:3c:68:fc:ae:08:
76:23:7e:7d:2a:b2:7e:47:f1:7b:ea:57:ab:1c:18:98:17:03:
81:c9:bc:fd:ff:1c:9e:d8:e5:aa:84:50:1a:87:f6:4c:75:c4:
88:f3:95:47:b5:35:bf:96:b0:61:87:a1:9e:37:6f:f4:d3:c5:
44:4d:e9:3f:90:bd:0d:f2:7d:e8:83:a3:ef:60:8e:6e:64:2a:
e6:d5:3c:9c:85:e1:bd:d0:09:87:85:1d:ba:77:23:a6:a8:99:
10:04:d5:d1:7c:10:69:67:2b:93:3b:10:82:23:c8:e0:a6:6b:
33:cd:ec:f0:1b:d3:e6:06:5a:3e:2d:8b:79:71:6e:25:45:bd:
53:73:75:94:91:80:d2:e3:73:22:a9:20:01:00:03:7e:79:7c:
bb:c1:2f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:11 2025 by rpki-client