Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
File: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json)
Hash identifier: mdE1lr2qsWIG0ptd61JcRQvXma8vg48Ytu6vz8w+64E=
Subject key identifier: 65:C2:C3:7A:2A:D2:54:B0:51:01:5C:3F:43:A0:3C:10:53:FF:5B:E6
Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
Certificate issuer: /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Certificate serial: 0197B7B38208622438A3D8F87BFA16BA31C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
Manifest number: 0170
Signing time: Sat 28 Jun 2025 18:01:23 +0000
Manifest this update: Sat 28 Jun 2025 18:01:23 +0000
Manifest next update: Sun 29 Jun 2025 18:01:23 +0000
Files and hashes: 1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: 8r8/gw3Dj411ci6gMJBuYzWGmIvE4gHhA+IZwHFuEPg=)
2: MDg3SGQivd4Gkhmi2ar9KtkbxPw.roa (hash: kp0L4LourZESQv5PNyUfmc/3RRGNdSH3s5Vl6lYig18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:82:08:62:24:38:a3:d8:f8:7b:fa:16:ba:31:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Validity
Not Before: Jun 28 18:01:23 2025 GMT
Not After : Jun 29 18:01:23 2025 GMT
Subject: CN=65c2c37a2ad254b051015c3f43a03c1053ff5be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:40:56:8e:84:db:ad:e6:ec:62:db:01:15:
88:8c:e9:86:86:17:fd:6c:d0:c7:d4:b5:cc:b5:dd:
5e:95:9e:51:8c:c0:2d:98:0c:b9:e9:d4:f6:6d:50:
bd:f0:a2:6e:6a:e5:fc:bd:9f:33:61:76:1c:c7:d1:
db:00:48:d7:e8:c3:6c:37:0c:46:f1:6d:b0:94:20:
e5:39:83:b5:0c:91:ca:1a:32:9f:1d:9d:3e:9b:81:
77:18:e5:fa:39:19:5e:bc:5c:42:82:d8:dc:df:fa:
94:a4:1d:21:5b:4b:32:59:c5:eb:d8:20:f7:34:f6:
86:ee:0f:c7:e2:bc:3b:a9:61:5f:f3:bc:52:e4:d5:
b0:d7:db:14:5e:77:09:4e:42:35:da:d5:fa:53:70:
2b:09:e4:23:bb:8f:76:9a:95:c2:fe:ca:45:0b:ea:
89:cf:44:01:8a:30:4e:e7:0f:13:4b:23:05:8b:24:
7d:aa:66:0f:01:d2:00:e1:88:67:b7:f2:7d:38:c7:
c4:e6:f2:cb:e5:9c:35:18:e6:4c:f9:a5:5c:7b:85:
1c:2c:6a:f2:9c:fe:d9:b8:4b:d6:4e:30:67:48:3c:
96:b6:ff:cd:53:77:4b:04:72:03:81:23:32:0d:c5:
fb:c6:1b:b9:76:88:a1:7d:c2:4a:08:80:01:46:a4:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C2:C3:7A:2A:D2:54:B0:51:01:5C:3F:43:A0:3C:10:53:FF:5B:E6
X509v3 Authority Key Identifier:
keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1e:81:1f:b5:77:6b:52:ed:af:8a:c1:c1:3c:75:83:14:c0:
b5:62:e0:48:cb:f2:66:ea:f2:28:c3:5d:75:22:3c:f9:57:a5:
f2:d9:4c:e4:f8:32:ae:8c:ea:7e:9e:b6:31:ce:75:69:e1:4d:
c9:b9:34:fb:ff:86:40:d3:11:9a:4c:e9:85:64:e9:da:ee:57:
8e:16:0c:34:62:0f:22:eb:1f:77:e6:e3:fc:d3:4a:ea:6b:aa:
44:b8:0c:c8:5a:ea:c2:01:03:be:fa:3d:81:c9:de:a4:d3:58:
31:78:f2:87:7c:5d:1a:ee:6d:26:22:df:09:15:4f:c1:8e:fd:
ae:e2:f5:26:a7:40:28:13:b9:dc:f2:49:3b:74:bb:f9:67:13:
42:e9:31:47:57:3a:57:0b:79:f4:3d:38:27:05:0d:d1:c4:dc:
f9:90:ad:02:bc:ac:dd:2b:9c:fd:cb:2f:ec:24:51:73:2e:bc:
24:45:78:64:1f:2c:ef:f3:63:86:11:99:50:f4:46:bd:19:03:
72:22:2d:3a:db:39:92:55:13:53:cd:6b:b6:16:8f:c7:51:b7:
65:ff:cf:f9:07:92:0a:3e:d6:b8:9a:90:f6:ca:79:b2:27:b8:
b7:0d:26:3a:44:b5:db:ec:bf:44:c9:76:38:f0:4a:e5:3b:a1:
53:b0:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:34 2025 by rpki-client