Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: +8nF2m980PKbGYaaTD+6gXZItOQoG4SNEpkAiEk36KU=
Subject key identifier: 36:E9:2D:FF:69:AA:C1:48:66:32:D5:02:40:A9:09:12:6C:AE:EA:85
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 0198D6CD3D0DD6CD6BE3B40A3993119F6B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 0601
Signing time: Sat 23 Aug 2025 12:00:31 +0000
Manifest this update: Sat 23 Aug 2025 12:00:31 +0000
Manifest next update: Sun 24 Aug 2025 12:00:31 +0000
Files and hashes: 1: 67zW8t21om1pTXvyuagS0QWX12s.roa (hash: arwG9XkQ/+2dVagELL/zq8/mCR4dYaym8bqyA1sBk4A=)
2: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: 8WA34+jis+ezwSmWpwrUhP7XaRFlQ6SzwBIN+FUeQKg=)
3: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (hash: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:3d:0d:d6:cd:6b:e3:b4:0a:39:93:11:9f:6b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Aug 23 12:00:31 2025 GMT
Not After : Aug 24 12:00:31 2025 GMT
Subject: CN=36e92dff69aac1486632d50240a909126caeea85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:c5:63:d3:18:65:7b:23:15:f3:f7:ce:01:
91:dc:e2:dc:4f:00:fe:3e:e3:15:66:75:a5:9d:be:
ea:74:58:b6:89:a3:8a:d3:c5:87:13:17:5a:fd:10:
0b:a1:a5:de:54:d7:60:4e:23:bf:fd:b3:76:fa:24:
25:e3:5a:c4:8a:78:7c:6c:b3:95:5c:64:e0:48:a4:
41:be:cb:be:aa:a8:ee:d8:4f:1b:16:2b:25:8b:9e:
91:ac:37:59:1d:7b:8c:bc:10:84:33:41:82:b0:c5:
48:d3:15:df:25:e5:28:48:ba:af:c5:21:06:31:d5:
70:5f:97:9f:18:67:5e:cf:78:5d:24:d6:f3:bb:a4:
39:f2:ba:d3:1b:fe:9d:45:a6:33:04:de:61:37:eb:
f0:f0:e6:c2:9d:f6:f3:83:18:88:46:00:96:1f:57:
af:e0:74:84:1a:45:57:8e:44:59:ca:a0:f4:ef:b1:
ae:d1:b5:4b:22:9e:ef:6d:f5:38:6c:4b:d1:97:d4:
0c:f7:23:1d:5f:2c:14:8c:ca:9e:48:bb:f0:73:b7:
d6:17:8f:6f:58:2e:1f:bd:85:5c:8c:82:93:36:d0:
c3:cb:8d:68:28:38:8c:3a:18:69:a5:78:da:1a:f5:
e2:c3:4a:ab:4d:c4:93:4d:ca:00:fa:21:9d:85:08:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E9:2D:FF:69:AA:C1:48:66:32:D5:02:40:A9:09:12:6C:AE:EA:85
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c5:28:d0:6e:7f:ac:93:08:f2:8f:bb:7c:4e:fc:02:38:6b:
f9:e2:90:fd:05:f1:93:50:43:1b:5f:c7:fc:40:23:59:5c:0a:
21:a1:b8:56:ad:e9:4e:79:39:75:2b:d6:f4:db:ea:b9:23:0a:
b2:fa:3b:b2:5d:29:48:55:ff:0b:04:fe:ab:2f:c6:e3:15:c9:
3b:e7:25:7a:11:b0:d0:4b:07:7b:8f:ff:a2:bb:90:96:d3:a1:
2e:ee:c7:e5:a0:9f:a2:eb:02:6e:c8:7e:53:1e:65:2b:6a:27:
92:ab:88:d3:db:f5:5e:9b:4b:54:a9:ab:35:ca:42:31:3d:06:
d4:af:d0:f1:5d:e4:9a:45:3d:9e:a3:1e:88:d2:0e:23:c8:b7:
11:1f:24:a0:89:ab:52:b7:36:a1:b5:dd:d5:61:c9:5a:76:c4:
85:ec:be:35:57:61:03:6a:c3:5e:36:b1:37:32:2a:af:10:dd:
2c:d1:07:31:0f:fd:24:df:b5:7d:b5:4e:15:e6:48:96:16:73:
93:99:be:64:b3:c6:67:9b:c6:f4:65:62:15:fd:40:a7:2b:76:
f8:cd:44:6c:8c:22:74:0c:e1:7c:b2:6c:f3:75:3b:36:53:15:
05:64:d1:8d:b5:78:d5:fe:93:a4:50:3e:4f:c4:e2:92:19:66:
a9:f1:f3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:34 2025 by rpki-client