Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: sOYAn5w3+EEZHJBTQ/8iNsRq6I+DYmry27M7xwA4TsE=
Subject key identifier: 74:73:E7:56:42:81:29:F2:A9:AD:E2:01:88:62:14:D2:D5:2F:CC:9B
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 0198D6983F5C08A4B3704C8F5471E8EAF931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 11:02:38 +0000
Manifest this update: Sat 23 Aug 2025 11:02:38 +0000
Manifest next update: Sun 24 Aug 2025 11:02:38 +0000
Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: ExSLrrWXWe7A5swIJsKHyRMFBUDr35Psiox6TlnzSoY=)
3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:3f:5c:08:a4:b3:70:4c:8f:54:71:e8:ea:f9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Aug 23 11:02:38 2025 GMT
Not After : Aug 24 11:02:38 2025 GMT
Subject: CN=7473e756428129f2a9ade201886214d2d52fcc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:f8:f8:39:88:cd:97:3e:7d:22:ff:aa:28:
fd:12:49:d7:20:b4:5d:76:dc:c7:b8:77:6d:fb:b5:
ee:9b:d2:76:bd:80:65:06:31:5a:c9:38:e3:c0:a9:
c1:42:81:92:89:46:fc:b7:5f:04:ab:3c:3c:b3:95:
bc:9f:af:e7:9f:e9:d5:0c:6e:0f:f9:53:db:77:c9:
4a:57:c8:dc:60:9f:4f:e4:12:63:1b:fa:05:9f:5b:
18:a7:ee:7b:fe:35:5f:5f:72:48:67:68:52:9d:6c:
dd:6d:2b:27:32:b8:00:41:04:22:ba:60:d6:1c:f7:
74:3f:60:8d:8f:69:d2:1b:c6:54:e5:39:8d:d2:1d:
96:1e:8a:8a:19:b5:8c:50:4f:22:ce:7a:ac:7e:9e:
47:9c:b9:b1:30:0a:dc:fd:d3:c0:9e:3a:75:76:f2:
85:77:51:0f:b6:d9:53:cc:0b:52:ab:6c:49:35:9a:
de:0f:0f:11:b6:af:b3:4a:26:c5:96:3a:5d:e3:3d:
0b:b3:36:73:90:e9:88:8b:14:14:43:99:5c:4d:e3:
11:3d:4b:02:b0:b0:16:67:02:9d:36:7c:72:15:bc:
67:20:3a:b9:46:62:35:91:e3:78:98:97:b1:b8:8e:
2a:a2:f6:c0:dc:e4:af:90:d0:f0:b6:8f:a3:ba:c2:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:73:E7:56:42:81:29:F2:A9:AD:E2:01:88:62:14:D2:D5:2F:CC:9B
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:40:2a:d5:21:19:65:0a:05:c7:9d:eb:d6:88:70:da:18:93:
db:af:c0:9f:0d:b2:da:7e:2a:5e:4b:67:89:9b:f3:ca:b0:1d:
40:6f:6a:c3:42:8f:57:13:6a:51:97:fa:12:80:42:fa:36:d7:
ce:53:7e:4b:dd:d1:45:d6:fb:66:aa:38:59:6c:52:aa:2b:70:
1d:05:d7:d3:ce:9f:6d:04:47:3f:b6:5d:d9:08:c8:2b:20:cd:
98:e5:2c:84:c4:18:f3:c6:5c:5f:25:53:c5:37:ae:42:4f:39:
d1:1f:a2:d3:f2:98:a5:a3:ff:b5:53:93:49:4b:2f:73:9b:d8:
30:b6:5a:a1:6b:92:e0:29:25:93:26:2d:48:83:39:08:8f:69:
2b:f3:e8:d7:b4:c3:58:9f:e0:95:db:2e:a5:f5:85:92:11:71:
d7:39:16:ba:e8:aa:36:ac:d9:63:7d:da:63:42:96:56:94:be:
6c:e6:c0:a6:17:be:b2:7e:eb:13:d7:66:6c:2e:cb:9a:36:79:
51:e9:5b:43:30:be:47:00:90:5c:a3:c3:4c:00:f0:0b:3a:ab:
15:d8:27:f7:65:3e:68:a8:6a:b0:5f:b6:4d:dc:49:88:f0:65:
13:ca:ef:2f:5b:ec:07:51:73:2a:c2:5a:7c:39:7a:e8:11:1f:
7e:31:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:34 2025 by rpki-client