Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: G2868+zGa+q7DU32xIIHUjgLKFpD9iXg44Il5BhnwVA=
Subject key identifier: 3A:FC:BC:9C:E8:4E:D2:5C:44:03:FB:67:B4:A7:90:D6:1F:D8:57:7D
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 0198D73AF026C6EDE4D58E01230A6272A8A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 14:00:20 +0000
Manifest this update: Sat 23 Aug 2025 14:00:20 +0000
Manifest next update: Sun 24 Aug 2025 14:00:20 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: kitNxpvSNueB/Rin/XgzfZkYUKPcRjDQESuwGGEi2Hs=)
2: fGeYBTeIqUGlzWkeYCJZuXTV3NA.roa (hash: NVWcI0sfwe5T87MmDN6gYp0EndXzVclJkGdW6buL8Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:f0:26:c6:ed:e4:d5:8e:01:23:0a:62:72:a8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Aug 23 14:00:20 2025 GMT
Not After : Aug 24 14:00:20 2025 GMT
Subject: CN=3afcbc9ce84ed25c4403fb67b4a790d61fd8577d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:0a:ce:24:4d:0f:f8:9a:8a:30:85:05:0a:
e9:7a:97:b6:4d:83:86:1c:22:24:77:ac:c8:56:c7:
65:62:23:4a:5b:18:f0:ba:80:a0:f8:1e:d5:fc:24:
36:0d:ae:6a:0f:4c:13:2f:c9:cf:85:6e:77:a0:54:
c6:d4:dd:68:3c:d5:1d:00:92:e4:4f:ac:8c:b8:37:
d6:53:ee:66:0e:a0:87:ca:8d:c0:00:44:8b:5c:2f:
dd:52:60:82:20:ac:2f:fa:56:01:94:72:53:ee:04:
e3:29:e0:26:8b:e7:db:38:e4:73:81:96:3a:a9:93:
27:c0:a2:f4:86:92:4f:2a:d0:96:7f:1b:4d:d5:36:
72:98:b9:a9:6f:83:69:46:3a:cd:f3:41:c1:3c:c1:
7a:74:a2:6e:2d:6e:94:1b:d5:d9:14:91:90:d8:07:
f5:8e:32:43:35:de:bf:d5:de:f5:b6:e5:ca:95:16:
b2:d2:07:ec:be:aa:63:75:5a:98:22:8b:c6:da:f4:
90:92:35:44:bf:5f:42:72:58:54:7a:25:ad:0f:5e:
5d:e9:e4:c3:b2:8f:4f:ec:d0:08:d4:e1:67:98:ae:
b9:30:a5:ef:e1:ec:0f:eb:88:c9:75:3e:33:6c:9f:
f7:50:98:06:33:bd:e9:e7:b3:15:26:e2:d2:48:e3:
d1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FC:BC:9C:E8:4E:D2:5C:44:03:FB:67:B4:A7:90:D6:1F:D8:57:7D
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ac:b1:54:42:70:ac:cf:32:0c:f1:34:a2:f9:00:e6:42:fa:
97:7f:06:14:02:4b:25:e0:0a:01:7b:15:fa:18:66:d0:84:1f:
8f:92:c8:4b:75:40:67:1d:16:0f:44:af:a3:c4:0f:3f:ba:5f:
c2:3b:8b:e0:cb:d2:25:99:02:d8:86:fd:c0:5f:bd:66:66:18:
e3:f4:e4:a0:82:08:e0:c6:cd:3e:3e:6b:42:ee:b8:da:bd:c9:
25:c2:f8:ff:a6:fc:c8:e8:a5:2d:05:c5:13:40:bb:a9:60:7e:
8c:be:a1:04:f0:3d:fb:4c:25:1f:51:69:06:50:62:4f:74:70:
69:6c:1c:fb:61:68:e1:80:9d:8a:1b:60:e4:c5:6e:ba:55:72:
36:87:58:ee:d7:2c:2d:31:c7:9e:b5:28:91:d5:31:06:a9:74:
d3:07:10:e8:71:a0:ad:5b:6e:76:d9:78:61:5f:bd:e3:95:52:
44:59:28:6c:42:a2:85:3c:14:66:02:9a:98:05:c0:40:5a:60:
67:34:72:80:ab:11:88:15:48:87:8e:fe:5f:ad:bd:bc:22:86:
6a:4e:4f:41:3b:1f:90:aa:76:98:e8:84:28:24:29:ef:a0:ea:
67:d6:dc:1e:de:d9:34:a7:0f:9c:db:40:dc:62:d7:78:ec:2f:
15:ea:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:10 2025 by rpki-client