Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: nKrgzQ+OkJQ64dhQgRfIfqMeJRSbo8B98+pzJPlpxls=
Subject key identifier: 47:6C:15:AB:B8:EC:64:58:4E:08:75:94:CF:33:62:C6:13:6A:26:0F
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 0198D84FD235C499FCEFAEDE0F4EAB98A9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 0D66
Signing time: Sat 23 Aug 2025 19:02:46 +0000
Manifest this update: Sat 23 Aug 2025 19:02:46 +0000
Manifest next update: Sun 24 Aug 2025 19:02:46 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: LqE5M3RCzvlOIuT7iE3NcKFJ83RSsVSz9FHSYCSUq4I=)
2: khAk69GaviX3ISVPskdgmXYxHg0.roa (hash: iZg+JNU8yAUj+GbVfYYrGDVbFREqgvj716gjoOSNlMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:d2:35:c4:99:fc:ef:ae:de:0f:4e:ab:98:a9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Aug 23 19:02:46 2025 GMT
Not After : Aug 24 19:02:46 2025 GMT
Subject: CN=476c15abb8ec64584e087594cf3362c6136a260f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e8:3f:0f:92:54:b2:04:f1:f7:06:49:8f:59:
3c:90:3d:31:4e:ad:cc:3b:e6:0f:34:c7:bf:cd:ed:
f7:93:95:00:c2:7c:22:94:db:49:02:9c:41:4d:bd:
ba:c8:c0:44:c0:ff:a1:4c:89:d6:5f:3c:0b:95:57:
0d:8c:31:bf:81:94:9c:f9:ee:79:c9:88:dc:b9:5d:
06:62:98:a9:b9:f5:7c:21:e1:b8:2a:d0:2e:ee:38:
1a:6f:4d:6e:e8:e6:8c:64:83:91:79:18:b2:40:42:
94:79:39:74:c5:1e:a4:83:6b:d1:b6:2d:da:de:e8:
81:0e:7c:38:80:4c:90:1f:ae:2f:e6:94:f5:63:51:
ba:78:97:52:29:76:ab:1f:df:01:d5:ca:06:02:d4:
c9:86:65:ca:af:eb:b6:a3:c0:d4:82:02:d3:8b:34:
dd:e6:98:37:34:0c:fe:5d:26:00:b1:23:57:63:d0:
6c:a0:ed:77:8b:97:20:77:0d:3e:6c:30:f1:83:b5:
38:86:cb:b7:53:f2:2c:2b:f6:28:70:27:d3:fd:87:
06:f6:4a:1e:52:b1:e6:fc:50:fd:2a:5e:ac:8d:22:
02:b3:e8:ad:71:28:47:a0:07:fd:1a:4b:10:b7:b5:
ad:1d:ea:83:87:cf:ac:a6:9e:54:8e:83:78:9b:aa:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6C:15:AB:B8:EC:64:58:4E:08:75:94:CF:33:62:C6:13:6A:26:0F
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ce:b4:90:e9:e3:cd:a0:b4:73:04:7a:35:18:0c:8b:bd:4b:
7b:b9:18:81:2c:80:2b:90:99:67:fd:99:a7:ef:42:cb:60:59:
9e:cc:a4:f1:88:35:d7:69:3b:e6:c4:63:67:bb:6e:45:05:90:
d6:4f:36:7c:63:33:fe:f1:9a:85:b3:8b:bb:d0:a2:2c:82:34:
98:d9:8a:f6:7e:b8:8a:9c:fd:b6:83:d3:6c:f0:b9:4e:9b:83:
4c:8b:db:01:70:8d:73:ad:de:c5:5e:b1:e8:d3:c4:55:42:36:
f3:92:d2:f3:d3:d2:e3:7c:92:74:5f:71:a4:11:c6:17:37:a1:
14:45:29:12:cd:4c:31:2d:d2:48:77:45:d0:ac:7a:f7:60:85:
ac:bc:48:64:ef:c1:f2:e1:78:fc:44:fc:61:f1:af:81:22:8b:
1c:d1:2a:1c:76:5a:d5:cd:17:cb:eb:c9:d4:91:58:52:9c:6e:
51:76:1c:fd:39:c9:12:70:00:35:a0:6c:b8:d1:eb:4f:97:ca:
da:c1:38:a6:75:05:14:c4:cb:8b:22:43:14:97:13:cc:68:94:
b7:ed:a9:a4:e6:8e:79:d6:ff:b8:bd:01:82:dc:13:b3:0d:0a:
cc:42:34:f7:0b:a5:0d:60:ad:86:c2:24:88:5b:67:cb:12:9c:
99:7f:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:06:52 2025 by rpki-client