Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
File: 9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json)
Hash identifier: nFO0qKSZTZTQiltlxXNQ5Sg2CYmakAw8miKX2jPEw2U=
Subject key identifier: 31:37:E6:8A:19:2A:6D:CC:A3:B2:04:70:D0:D5:19:DC:16:AE:D5:C7
Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
Certificate issuer: /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Certificate serial: 0198D65F442A6D620EF25CD8434E3C73C429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:24 +0000
Manifest this update: Sat 23 Aug 2025 10:00:24 +0000
Manifest next update: Sun 24 Aug 2025 10:00:24 +0000
Files and hashes: 1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: m70taMQ+Zsjxx+AYgg5Pw1blF+ZYY8mV4INO68kAeL8=)
2: Img54cKN_P2HeWXe3kxJunOOT3s.roa (hash: ZYdWRN98ug8vbW7f1puvPVmIzjvPFY5NjRNyBZI+eL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:44:2a:6d:62:0e:f2:5c:d8:43:4e:3c:73:c4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Validity
Not Before: Aug 23 10:00:24 2025 GMT
Not After : Aug 24 10:00:24 2025 GMT
Subject: CN=3137e68a192a6dcca3b20470d0d519dc16aed5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:b0:8e:81:54:01:3e:13:f2:27:d5:6f:4b:
b6:03:65:20:75:af:a5:d0:0c:33:da:4c:dc:82:fc:
4a:f4:d3:0c:13:34:1d:39:c2:48:8f:d9:a3:e1:a1:
a5:ba:6e:57:11:9f:e5:19:ff:13:64:21:75:cf:d2:
b9:e5:50:5e:9b:3f:97:46:cd:0c:8c:d7:a3:e8:64:
76:7e:20:5b:cd:83:d8:fa:12:4d:07:8a:02:e3:e7:
a8:fc:52:d5:28:ee:02:0b:51:bc:a4:4c:0a:93:2c:
ac:dc:7f:63:22:d3:bc:1d:85:a2:d6:32:ef:1f:24:
7b:63:46:26:09:3e:d8:33:41:9c:b2:27:94:33:97:
13:fe:f1:7f:e2:25:b6:5c:67:14:a1:47:6c:b5:bc:
5c:42:ca:20:37:3b:9f:66:cd:f4:94:95:87:58:f2:
3a:c2:9d:1c:27:a9:9a:c0:14:36:cc:24:de:5f:97:
c3:28:3a:28:1f:01:6b:09:ca:19:7e:9a:00:3f:e3:
0e:f9:70:7e:b4:5f:95:5c:43:33:cc:8b:4b:ab:88:
bb:50:49:e5:b8:d4:17:5d:54:dd:ec:01:3a:9c:4a:
24:e6:f5:95:a5:90:38:81:7f:13:31:15:83:9b:e4:
f7:63:42:ce:b4:db:d5:b0:2f:30:41:b9:36:8c:43:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:37:E6:8A:19:2A:6D:CC:A3:B2:04:70:D0:D5:19:DC:16:AE:D5:C7
X509v3 Authority Key Identifier:
keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:07:8b:73:04:40:d0:77:45:1b:f4:bb:7d:46:bb:ac:d0:e3:
ca:9d:a2:9b:45:99:6b:31:8f:eb:79:c6:d7:67:6b:13:a0:c9:
9a:eb:98:47:6c:3c:46:a0:e9:15:67:cd:f1:16:6e:ed:52:3c:
db:d4:ba:b8:6b:93:dd:fd:e8:6e:c2:52:cc:63:be:4b:a9:ed:
c2:4b:23:ab:99:88:3f:f5:9f:9f:18:a6:1b:4b:e6:19:41:32:
bc:80:cf:4c:5a:0a:9a:e2:ac:2f:00:85:2b:2c:13:27:d0:03:
d6:8c:cb:96:be:8b:88:7c:73:dd:ff:9b:55:a0:9f:d2:11:5d:
48:1d:dd:36:71:cd:d2:55:88:a1:c2:23:33:5c:85:1a:5b:34:
88:15:04:a9:cc:be:34:46:03:04:82:6c:af:c1:fa:76:eb:eb:
69:f2:d7:d6:80:a4:a9:68:f5:79:eb:18:7c:da:2c:41:11:f5:
09:75:68:41:7e:2c:a3:15:0e:84:60:c8:cd:05:99:87:a1:2d:
04:1b:11:d8:ce:72:95:c7:b9:e7:95:ee:80:20:97:36:0e:a4:
b0:58:2b:6b:dc:1e:26:cc:d6:45:e7:bc:f2:55:9e:9b:7c:1d:
66:eb:1a:e1:42:0a:ac:29:ab:e7:97:0c:da:6a:24:f6:aa:61:
d2:68:c9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:28:25 2025 by rpki-client