Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
File: 9JUCyXSCsoUChSyX75vToKKl6fA.mft (raw, json)
Hash identifier: DtAbozUayL5GbLzKchTGjRCmPopCMuiKsuPA9KfqSrk=
Subject key identifier: 5F:02:BE:FE:55:BA:0D:E3:2F:E9:04:32:7E:2A:13:02:24:D8:ED:47
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial: 0198D7E17D54D7678F091E83CE3CA61BE962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
Manifest number: 141B
Signing time: Sat 23 Aug 2025 17:02:15 +0000
Manifest this update: Sat 23 Aug 2025 17:02:15 +0000
Manifest next update: Sun 24 Aug 2025 17:02:15 +0000
Files and hashes: 1: 9JUCyXSCsoUChSyX75vToKKl6fA.crl (hash: cndbsxtZV1cWF1sOAkivHx/AVoMNkwyAXQ/IWJzhcb0=)
2: EaZvYH2YGiO37NZ1bGFHkmEdMcw.roa (hash: HSZLZ0cKEKUvUtWkwWARshBwReQDxlGBdY+EDDOfXjA=)
3: NbJCCt6mZbGhQhsVck9Ye84ql_A.roa (hash: 1GHJ4CqSoQFt3IGPoRuzPcM9vgZHBXB7ib41DM1rbg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:7d:54:d7:67:8f:09:1e:83:ce:3c:a6:1b:e9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Validity
Not Before: Aug 23 17:02:15 2025 GMT
Not After : Aug 24 17:02:15 2025 GMT
Subject: CN=5f02befe55ba0de32fe904327e2a130224d8ed47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ac:b6:67:12:52:5a:24:0e:57:c5:c1:7d:6e:
67:6d:68:cc:f3:a1:db:22:1d:79:39:e8:9c:8c:6b:
f4:54:a6:5e:f8:cb:47:d7:46:75:05:33:32:4c:c6:
0f:a3:93:9b:63:bf:00:02:5a:bc:47:c7:33:57:98:
de:bb:57:fd:e3:60:e0:e1:05:be:97:9f:b4:28:44:
41:bc:98:dc:52:0a:cb:fd:3e:68:40:d3:c4:22:34:
8f:b5:72:91:7b:ac:33:21:cd:2b:a6:88:53:46:60:
a5:4b:1b:57:a5:44:99:a6:2f:b4:4a:f6:51:d1:dc:
c4:ac:2b:ce:a4:a7:55:22:99:ce:ac:2a:4e:a8:1b:
b1:08:91:cf:ef:7c:1b:8f:14:ff:db:c0:59:79:96:
8b:b0:f2:9c:49:c4:73:e2:b2:b3:55:11:d9:d3:1c:
2d:82:c9:e8:8d:34:47:3b:b3:2f:59:c2:a6:b1:50:
ab:25:c2:f4:e6:54:f0:4e:4b:2a:fb:d9:b9:5c:b0:
f2:c0:2c:dc:a6:88:b7:6b:2a:f6:95:37:96:76:80:
a4:1c:c5:6e:7c:5a:71:bd:cf:97:72:95:d6:45:e3:
b7:56:d7:96:b0:a9:ae:66:c1:76:4d:e0:30:cb:66:
2f:7d:45:5f:95:82:09:93:b4:a1:08:0b:2f:74:68:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:02:BE:FE:55:BA:0D:E3:2F:E9:04:32:7E:2A:13:02:24:D8:ED:47
X509v3 Authority Key Identifier:
keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b2:98:71:41:0f:bb:63:0a:ef:39:5c:30:8d:b4:fa:29:7e:
9d:67:18:4d:41:99:d2:41:cc:42:d1:9a:37:6f:1b:68:a1:5f:
12:80:fd:de:55:46:1f:02:3d:97:c6:4c:b3:e0:fd:6e:5c:49:
a0:bc:53:3c:2d:e7:c0:8b:f8:fb:8b:51:58:25:77:98:32:ba:
b5:67:94:69:29:e4:4f:2f:5b:31:df:f2:f3:f2:65:b3:f7:0c:
a7:1d:f4:3e:e8:10:ac:53:c4:2a:e5:f3:9f:13:30:1f:48:f3:
fe:cf:e0:c7:0a:1f:f0:52:0c:9c:1e:6a:ca:e9:a9:95:45:28:
d1:e7:b3:19:08:54:e9:57:cd:70:38:09:3f:52:6d:a1:08:68:
4f:3a:ac:2f:fa:68:16:9f:47:81:38:de:74:a4:49:f5:a9:0a:
09:ff:49:e2:47:47:e8:b5:8a:a4:09:96:a9:47:d7:fb:46:e9:
02:1c:f5:d2:7e:ab:d5:fd:10:51:f6:cc:8c:98:df:56:7d:2d:
df:46:6d:24:5c:79:ec:dc:54:1a:d1:08:b6:ba:d3:65:e3:b3:
31:a3:99:44:4a:6c:84:86:b8:bb:89:33:7f:57:96:b6:3f:69:
d3:11:6f:00:70:55:4e:0b:e0:0f:48:a7:9c:e9:44:97:39:31:
ab:a2:74:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:37 2025 by rpki-client