Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: KJcCHHwF2V1i52zotgqfXPDY0x0cYAiXKbk3NhoEhKg=
Subject key identifier: C7:6B:16:B3:67:E8:07:47:85:DE:14:C2:88:C3:95:6F:8E:C6:B1:A0
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 0198D54E1D0CB4C1780AB02C578AE7D008D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: hicTLDmF6NqmaakmBOGATvfpa78jT9F77f4bmTJLJC4=)
2: HjzoahI6pyoFvP1ahRTakCdHZL4.roa (hash: gQHNv9As0iCn+ZAtcLVQ3zoAJ3Ne/2k5eR6SdkKMktQ=)
3: bH_KNyzPL_yx3OPEWTRFLsAi8nE.roa (hash: 72jCdlITtcwR18704/NTzfyeqmvwBsSw2iB9YQtGN+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1d:0c:b4:c1:78:0a:b0:2c:57:8a:e7:d0:08:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=c76b16b367e8074785de14c288c3956f8ec6b1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:b1:c6:3e:88:f9:b2:1b:4a:fc:35:49:64:
67:48:76:db:4b:da:fa:ae:e4:72:fc:84:ef:83:db:
62:6a:9b:62:84:4c:3b:e3:3f:5a:9a:34:35:2a:c5:
e2:89:57:de:2e:63:df:7c:eb:b3:d9:0a:94:91:d4:
20:44:d5:c2:1e:39:d0:96:d2:10:55:dd:09:d1:6b:
69:98:9b:5d:eb:91:f4:ee:ad:d9:ea:33:af:31:d8:
f7:79:bc:1c:d6:93:ab:57:4b:2d:c9:d4:c3:35:d1:
1a:da:a1:f2:7e:48:3c:da:7d:50:79:ae:8f:b1:08:
4e:9e:cd:84:64:a8:06:13:39:50:b7:18:6f:9f:90:
c2:0c:7a:37:e4:c6:41:1e:76:79:e0:fa:68:da:2d:
db:7e:22:ff:34:58:d7:7d:3e:da:b9:59:0b:d1:03:
99:5e:78:2e:d0:fd:fd:17:8a:a5:63:61:75:24:01:
c5:28:92:51:73:94:ba:25:f9:e5:7e:ef:07:3d:a8:
90:e9:cc:1b:07:13:b3:f4:02:92:1c:b1:ec:f9:1c:
0f:73:59:21:99:14:be:99:91:fe:ff:22:75:66:fd:
9d:a3:83:1f:db:f4:ac:63:cc:18:71:73:95:d9:0f:
9d:ca:21:67:1c:ed:d8:a8:ad:04:82:8c:14:0d:08:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6B:16:B3:67:E8:07:47:85:DE:14:C2:88:C3:95:6F:8E:C6:B1:A0
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:64:23:d9:19:31:e8:76:5b:c2:a7:f5:93:ec:2c:ea:64:60:
32:32:b5:9e:68:41:33:ca:29:ab:63:86:aa:0f:48:27:48:47:
db:d2:76:e8:c1:65:9c:ac:e1:db:00:17:a9:34:4b:15:d1:df:
0b:1a:5d:b7:81:20:e1:b1:9c:7e:e6:f0:56:ab:cd:9e:fe:d8:
f4:bc:d7:88:e9:ce:52:6a:c5:f5:9b:12:06:78:23:cf:4b:0a:
9a:37:3a:ba:5d:24:e7:4c:a7:54:8c:d7:65:2a:be:0b:96:d5:
46:57:62:48:00:3c:5e:db:f0:60:d3:f9:40:a0:ae:77:54:1d:
5e:3f:ea:7f:49:bd:08:df:33:42:14:2b:13:24:8b:7b:f6:16:
d0:8c:fb:b8:e6:ae:15:5a:1b:0d:2d:f8:31:da:c9:43:17:d0:
33:e9:40:30:f5:f2:b6:e3:7a:bf:b0:30:b1:5f:d0:e2:51:64:
c6:cd:4f:27:d3:55:23:69:70:5d:d7:a6:4d:63:5f:5f:cd:d8:
96:05:57:d2:d3:de:cf:6c:28:74:82:30:3d:4f:1d:b7:5b:0d:
88:52:ce:bb:04:c8:63:a1:d4:23:8e:e5:8b:09:0b:55:ce:90:
8d:f3:92:8f:e2:57:e6:07:f0:2d:be:83:cf:f3:1f:87:7b:10:
64:15:f3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:52 2025 by rpki-client