Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: pknoJ0yde1EGZDYvfR+vpz1QCLU90vLxhti3Z0NlhL0=
Subject key identifier: A9:6D:9D:F0:62:40:1F:35:39:A7:0F:68:02:C7:75:AD:62:E2:25:1B
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 0198D4737CDBA58A3353A7774F37BAD93FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 0E3E
Signing time: Sat 23 Aug 2025 01:03:14 +0000
Manifest this update: Sat 23 Aug 2025 01:03:14 +0000
Manifest next update: Sun 24 Aug 2025 01:03:14 +0000
Files and hashes: 1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: WSKCJA1Tp8BXT71Fm9LranDxkhM5tTY8V+7JLX4VUwA=)
2: _0wH1BRcgc6tfF99TwNnC3iQ1pU.roa (hash: O+Zelc4oaCgFlSMOLR6IXR0OWFyZm1W0ImLAmE3cggg=)
3: igkLmqGvdo3ZptL2OBtAT5tgBr8.roa (hash: JNS1dghL0HEbj9Q46she80UtZ72vLWiMcXMi6xfr/RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:7c:db:a5:8a:33:53:a7:77:4f:37:ba:d9:3f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Aug 23 01:03:14 2025 GMT
Not After : Aug 24 01:03:14 2025 GMT
Subject: CN=a96d9df062401f3539a70f6802c775ad62e2251b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1f:70:87:18:ff:9c:42:5f:72:c6:50:cf:c3:
ce:83:e6:f6:f6:bb:06:53:54:f6:2d:e5:9e:f2:0e:
26:5f:40:fc:e9:5e:f7:85:9c:e1:5a:d1:87:31:1d:
33:c0:f6:89:18:73:a5:c5:f9:52:48:ec:1c:6d:bc:
b9:ae:ab:b4:36:fc:63:a0:9b:49:54:e3:80:99:14:
ef:40:5e:c0:fd:00:92:e8:2e:5f:17:36:49:b5:e8:
34:e5:66:3f:13:69:e9:8c:23:83:90:f3:dc:5d:01:
ab:2f:b5:43:c2:20:8a:a0:d8:f2:15:b0:05:b8:9f:
8e:ac:57:cc:0a:f8:df:04:a6:e9:bd:47:b3:ea:17:
ad:05:0c:68:e4:ac:14:80:6a:92:56:7e:bc:6f:5d:
1b:8c:f5:5c:eb:45:0a:9c:29:43:72:f0:98:2c:1e:
67:cc:15:13:6a:f0:84:d1:18:53:10:dc:97:05:52:
a2:d2:27:1d:f0:41:30:c0:6d:49:f0:9e:03:17:13:
30:43:63:d1:7d:29:8c:2c:a2:02:e9:78:df:92:29:
44:c8:86:ca:f8:bb:94:66:c7:71:27:ff:87:3a:b9:
f2:fb:2d:2e:1d:64:7c:de:45:24:29:a0:a2:5d:28:
a1:c7:24:56:80:ef:f3:b1:d0:6b:1e:7b:a6:db:3e:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6D:9D:F0:62:40:1F:35:39:A7:0F:68:02:C7:75:AD:62:E2:25:1B
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:79:60:d7:7e:b1:7d:59:7c:83:75:da:77:2f:ad:93:65:3a:
cf:98:35:39:bd:65:fd:95:d1:91:d0:63:86:7f:54:2e:87:c6:
e6:22:79:46:67:2b:70:93:a4:3a:ba:6f:85:eb:fb:b3:d5:e8:
fa:7f:d4:de:68:4d:2f:b2:a2:5c:7c:e0:03:39:00:83:ce:14:
b0:dd:2d:67:eb:12:7b:bf:e9:ad:78:e1:dd:19:48:39:84:2d:
d1:3f:7a:b4:9e:8f:b9:41:30:c0:af:12:88:a0:5d:0a:77:55:
ec:32:60:e3:9c:18:9c:29:91:c0:43:b2:f4:5b:20:52:2f:5e:
89:cf:16:7b:43:12:2f:ed:dd:34:b5:12:2c:0e:07:ee:dd:82:
25:c5:4c:5e:8e:69:70:c6:1d:e0:d1:47:3b:d1:3e:00:b2:6c:
13:d4:1e:b8:d4:27:64:e3:5f:fc:90:e0:1d:ca:95:a8:10:8d:
fd:a8:f3:f9:4c:2e:32:84:85:fe:ff:dd:93:22:9b:9c:d9:84:
a4:2c:67:5b:10:65:d4:eb:8c:77:92:b7:95:54:76:5b:f2:09:
a5:35:06:a8:78:df:51:c3:89:82:77:3a:9f:e9:74:f5:8d:3d:
47:99:b8:40:12:dd:ed:3d:86:77:ed:3a:ed:93:8d:f7:6f:cd:
2c:5c:47:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:36 2025 by rpki-client