Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
File: sWrUSceuS9Isau5fvcCCMEL_-Pw.mft (raw, json)
Hash identifier: euhMsrMYjEBvfqn/yIFwVCpY6Pv6HSYN8MnhgvIQHzc=
Subject key identifier: 31:92:53:76:7C:89:6F:A7:7A:57:A1:7F:52:70:B7:97:0A:76:A7:EA
Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
Certificate issuer: /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Certificate serial: 0198D660ADC1D98ED2169D43EA388003D3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
Manifest number: 09C9
Signing time: Sat 23 Aug 2025 10:01:56 +0000
Manifest this update: Sat 23 Aug 2025 10:01:56 +0000
Manifest next update: Sun 24 Aug 2025 10:01:56 +0000
Files and hashes: 1: _KRug4UjC_BJD-8BnustHPPdTrM.roa (hash: 9gRSSq2OhYrBQVFH3hvus35c9k0k20JUe3qcgY8xpt0=)
2: sWrUSceuS9Isau5fvcCCMEL_-Pw.crl (hash: GH1Ei19RCe7oTmbieIWxzN/v2p5MVII4TlgFL7ZFBIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ad:c1:d9:8e:d2:16:9d:43:ea:38:80:03:d3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Validity
Not Before: Aug 23 10:01:56 2025 GMT
Not After : Aug 24 10:01:56 2025 GMT
Subject: CN=319253767c896fa77a57a17f5270b7970a76a7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:41:0c:7c:e6:a6:b1:60:0e:ae:39:19:ce:
4e:92:4d:f4:90:6b:ae:bf:e3:a3:5e:8d:4e:91:ae:
1c:18:ad:01:13:43:5d:7a:59:46:4a:29:c6:9f:8b:
de:9d:86:61:69:e9:92:85:05:fd:13:7e:22:f3:90:
06:fc:08:af:0a:ab:77:8d:cd:eb:fb:5f:77:7e:a9:
06:d5:54:c5:72:ec:ee:3a:0f:2c:51:2d:72:91:96:
a3:f9:39:f9:b8:13:09:8a:d5:98:f6:53:3e:c6:58:
c2:5d:4e:d0:ce:3a:e4:80:25:f8:2f:33:e7:7a:c9:
d6:7f:a9:fa:4f:d8:1a:db:79:43:57:da:cf:d0:e7:
6d:42:a5:2a:48:63:70:73:01:54:84:fa:1b:bb:30:
80:38:7a:5c:4b:81:3d:ce:22:24:0a:e4:0e:f0:9d:
00:d9:4a:4b:76:17:21:1c:25:28:71:2e:b7:c2:b0:
97:87:d2:db:01:b6:74:9f:a3:40:79:31:7e:a8:4c:
30:e0:a4:be:99:18:28:36:1e:8d:58:fb:c8:5d:37:
25:e9:e0:29:f6:c5:aa:a9:42:c7:63:f7:e1:e3:9c:
1c:44:b0:5d:91:ef:24:8b:11:a9:79:ad:58:37:36:
d1:0c:df:57:0f:8f:39:6c:ba:3b:2b:91:88:e0:6d:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:92:53:76:7C:89:6F:A7:7A:57:A1:7F:52:70:B7:97:0A:76:A7:EA
X509v3 Authority Key Identifier:
keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f5:98:c1:67:0c:69:91:25:b1:06:28:e1:57:b0:0f:11:d8:
e3:13:c2:78:c1:55:a6:1c:5c:c7:e0:65:55:8e:02:2c:93:71:
29:47:dc:b6:41:36:e8:bb:a8:59:57:b3:eb:16:81:9c:dd:60:
5b:fa:81:b8:20:29:39:61:da:06:75:c3:34:44:d8:09:6e:18:
26:12:12:b8:01:a6:7e:e8:f3:c4:4d:5f:e5:03:5e:99:f3:c9:
c8:8b:79:eb:e7:02:8e:2d:18:4f:fc:e0:a1:59:a5:a4:51:c4:
dd:69:77:dd:e9:21:3c:1e:da:fe:a9:14:40:1e:2d:c7:24:77:
7e:21:68:ba:a9:99:e8:41:65:09:a1:df:8c:6e:f7:7f:b8:d3:
53:d8:f6:92:9e:91:6d:31:d9:57:84:19:b5:a2:4c:b3:8f:96:
65:59:ab:cb:96:a9:8a:e7:5b:a2:98:32:d4:e6:7c:a3:cb:9f:
84:64:ea:17:c8:99:07:3b:98:60:36:f8:0b:8a:fb:1d:b4:fa:
5f:7f:89:17:3c:d0:99:f2:c0:53:f5:d1:44:25:b2:31:7f:b8:
9d:40:2c:27:d9:95:4f:74:c4:5c:f2:c6:96:ec:b6:75:fc:b0:
eb:84:31:0c:34:0d:08:c8:1b:26:dd:b2:0d:60:67:35:12:88:
48:93:b3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:54 2025 by rpki-client