Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: INWSp6bJ9kT88AjuNcDUMZxpANbdqoklOoM8dlEYhbw=
Subject key identifier: EC:A0:E1:CA:B4:4D:F5:2E:E1:45:8F:96:5E:4F:CD:27:00:C7:AA:DE
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 0198D8BD93C463683BC5624B2447FBD914B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 21:02:39 +0000
Manifest this update: Sat 23 Aug 2025 21:02:39 +0000
Manifest next update: Sun 24 Aug 2025 21:02:39 +0000
Files and hashes: 1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=)
2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: w+AZMh5Pg/Ij2achg39zrljj5OTp/ta2fLgg6d5Akkk=)
3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:93:c4:63:68:3b:c5:62:4b:24:47:fb:d9:14:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Aug 23 21:02:39 2025 GMT
Not After : Aug 24 21:02:39 2025 GMT
Subject: CN=eca0e1cab44df52ee1458f965e4fcd2700c7aade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:9f:79:18:06:5a:b9:d2:56:44:58:e3:dd:
08:57:91:cf:19:2e:8a:47:ac:e0:c3:cc:04:8a:85:
f7:fe:72:b6:a3:61:a1:cc:b4:dc:be:d9:9a:d0:76:
d9:eb:6f:f8:ce:26:e4:50:ec:c3:4d:f6:97:d9:28:
ba:3e:cb:91:d6:7a:39:1f:a9:e8:bb:44:7b:fe:55:
0f:3b:c5:b4:39:d4:94:a6:6f:af:13:da:51:41:34:
52:93:f6:63:ca:08:69:2f:e1:23:30:6f:c1:cd:38:
d2:49:46:61:eb:46:5e:65:65:28:50:a4:3b:42:2e:
a5:fa:01:b1:d6:38:cc:ef:df:5c:16:03:0e:ec:49:
32:16:20:e2:c5:24:5f:a4:3f:9c:d7:a5:10:00:35:
17:19:5e:9b:f0:c5:44:96:1e:24:2f:08:5f:d8:99:
6f:ca:23:a7:35:5a:c3:55:d6:84:61:f8:c1:68:f1:
fc:b8:27:a3:78:c2:02:8c:d8:40:ea:26:aa:42:1a:
0d:de:66:ce:7f:b8:91:e7:79:25:b5:37:a8:80:02:
1c:f7:cf:e6:67:39:35:2f:3c:8d:5e:c1:5e:bb:e9:
b8:6b:96:38:26:cb:d2:04:6e:02:36:29:7e:ff:17:
49:60:63:dd:2d:8d:50:0e:c2:5d:0e:27:26:89:5c:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A0:E1:CA:B4:4D:F5:2E:E1:45:8F:96:5E:4F:CD:27:00:C7:AA:DE
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:70:24:48:e6:09:db:77:4d:ab:7f:63:31:11:11:7c:00:83:
fe:84:30:7e:81:43:6e:eb:78:9b:cc:3f:f3:91:3a:e2:87:11:
92:3d:bb:42:57:fa:24:0e:3d:fc:06:5c:11:d9:d4:2c:d6:ed:
1f:d7:85:5a:9c:f5:16:f5:76:b1:5c:be:07:01:aa:d8:14:a6:
f0:01:af:e5:85:d0:0e:30:b4:4f:a2:47:7c:3e:f9:d1:46:dc:
ba:35:58:54:35:a2:fc:5e:59:7b:50:e4:53:ec:1c:52:fb:22:
3f:5f:88:95:98:76:9a:70:8d:1e:b2:71:9e:3d:72:b5:71:49:
22:24:8b:a3:54:8a:87:15:cb:61:99:a0:b8:a5:23:f7:e0:b1:
24:8a:db:8b:57:da:58:cf:41:a5:b9:95:d3:4c:e4:9f:75:4e:
e3:af:5f:62:5c:89:79:4b:4a:c9:e2:70:ae:db:d5:62:a3:80:
c1:ad:02:75:ca:0e:b7:f7:18:1d:d6:34:63:11:74:0d:77:62:
4b:df:24:fa:de:8d:df:ba:bd:6a:c0:78:17:63:c1:7c:68:cc:
1f:4e:6e:ff:6f:ff:ec:9c:40:f7:d7:19:03:3e:da:38:54:79:
c3:68:ef:0b:f8:e9:35:70:d4:e2:02:3a:83:21:0b:20:d7:d4:
11:b7:07:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:02:30 2025 by rpki-client