Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier: d2AHcsaENaQX037ARz4uNXK/ctdEC4NC8Qdfm5+nYEk=
Subject key identifier: 9E:E9:A5:3F:2B:97:C8:83:93:BF:85:DB:17:B6:D2:DC:39:2E:D3:3B
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 0198D473B98E5FF54BB1BCE6CB0695E46FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number: 11B8
Signing time: Sat 23 Aug 2025 01:03:30 +0000
Manifest this update: Sat 23 Aug 2025 01:03:30 +0000
Manifest next update: Sun 24 Aug 2025 01:03:30 +0000
Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: yXZmHNHJjjVnqRwyzxiNhTvxkINXaD5Fhit3Eyfg7nM=)
2: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (hash: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:b9:8e:5f:f5:4b:b1:bc:e6:cb:06:95:e4:6f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: Aug 23 01:03:30 2025 GMT
Not After : Aug 24 01:03:30 2025 GMT
Subject: CN=9ee9a53f2b97c88393bf85db17b6d2dc392ed33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:c8:44:e6:c7:50:cc:27:5b:d1:5d:73:0d:
9d:ad:19:bb:d4:7a:b2:89:90:3b:af:9f:4d:db:8e:
eb:fb:03:95:f9:92:4a:7e:ff:36:50:c1:b2:00:5a:
59:e4:98:be:60:6a:d1:e6:90:fb:56:ac:63:aa:fb:
eb:13:5c:07:89:da:90:39:08:89:63:b9:69:8e:0a:
17:32:5f:1e:7e:80:83:0f:62:dc:f5:65:ae:37:9f:
47:59:0c:e2:0d:09:ee:30:2e:36:8b:c5:ce:fa:a1:
f3:ea:41:39:a3:44:0c:de:e8:fc:c1:ad:b5:93:db:
e2:05:d1:13:b6:74:6b:a5:06:ee:13:77:f1:ec:40:
66:af:a8:71:90:79:17:25:a7:7a:d1:ec:24:e1:5e:
da:2e:60:be:e4:35:25:7c:fb:76:4e:5c:50:6f:58:
12:35:f0:37:28:d4:9c:71:e8:f6:4e:52:7c:c9:ce:
77:57:f3:c5:c3:ac:b8:f4:4e:70:be:62:89:ae:ba:
16:d2:31:b0:fc:9d:11:95:c8:20:d0:9d:7e:86:4a:
8e:3b:5f:26:7b:c8:b7:cf:6b:8a:a5:a9:1f:ce:34:
20:8b:fd:06:6b:4f:e7:64:2f:7a:b0:8c:c7:a3:61:
88:ef:07:ee:1c:f5:e0:84:bd:7b:d0:8c:e7:42:30:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E9:A5:3F:2B:97:C8:83:93:BF:85:DB:17:B6:D2:DC:39:2E:D3:3B
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1b:5e:2d:f1:b5:99:28:ee:7a:a3:58:fa:82:8f:b9:9d:6c:
60:af:6d:6f:83:3f:12:c0:b9:e4:88:1b:5f:69:f1:45:69:ee:
50:3b:04:0a:9c:7d:e6:a1:1e:5d:d7:17:7e:8a:ea:1c:db:99:
a3:ea:73:46:0b:86:e0:ca:d2:b4:1e:c8:06:ff:97:4c:53:0d:
fc:1d:6a:8c:86:b1:14:85:5d:9e:4c:03:12:9d:db:a8:0c:fe:
2b:0d:50:de:ae:52:9a:50:b8:52:d7:66:10:8a:56:18:b5:b9:
73:bc:85:71:73:af:70:c1:6f:0b:0f:4f:f7:4f:5a:84:07:ff:
e6:d8:9f:71:e2:25:f8:d9:e8:c2:32:28:4f:65:5d:0c:de:f8:
fc:20:bc:2f:56:01:e5:dc:c6:ee:ec:b4:05:1b:15:15:69:b3:
e0:af:51:ce:7a:76:61:90:f0:e1:c3:23:e4:27:4f:f8:58:ae:
70:15:06:ef:af:65:32:5a:56:27:ed:71:0e:e7:df:4c:e4:0a:
27:e7:00:31:2d:99:86:a0:6c:7a:ac:33:04:0b:0e:5d:9c:dd:
be:5e:2a:5e:f4:d2:f7:a6:20:51:6d:7b:e6:a0:57:a0:4d:37:
c8:b3:e5:5d:34:a8:23:46:89:03:98:46:b3:35:87:8e:f5:a0:
e1:53:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:21 2025 by rpki-client