Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
File: 9q2iC9mLq990w9Vs14raZu2HoUg.mft (raw, json)
Hash identifier: +aRoqg0WCUpyJ20bRaJOlBJuR8qkmkFm8/FP6MpQ2bU=
Subject key identifier: 61:11:9B:2B:CA:89:75:10:D7:1C:97:77:5A:93:CD:CC:2D:4E:94:E1
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 0198D4E06F545C65354F7FCDEB6F8E145F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
Manifest number: 0A10
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: 9q2iC9mLq990w9Vs14raZu2HoUg.crl (hash: ifGxaa3sQklIKmoITH1rvTAYoKOmgF/g81kIPyiilf4=)
2: s-x7d6jJvL70qmh-6OnRq31TKUk.roa (hash: 2DbOtbQA27lHr7qNRTboKovEtkv/3fhOLEwI/H6E4D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6f:54:5c:65:35:4f:7f:cd:eb:6f:8e:14:5f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=61119b2bca897510d71c97775a93cdcc2d4e94e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:cd:e5:d4:42:a5:af:7a:a1:e4:86:42:29:
e5:c4:10:0e:14:eb:19:d1:a2:67:ac:4c:f8:37:f3:
f4:ba:68:a3:59:d7:44:06:21:16:6d:02:00:92:ea:
4c:61:59:23:19:a3:8c:e8:98:f8:d0:ac:8b:05:51:
0b:71:a7:46:6b:45:4a:1f:eb:c1:7e:4a:81:fc:f9:
38:bf:d4:fd:8f:af:34:f3:ac:db:a5:f2:59:09:e8:
f0:35:d8:08:38:c9:e4:bc:e7:3d:2c:47:04:0b:d2:
8d:15:68:e8:e9:78:70:1f:d4:56:b9:97:f9:e7:48:
ba:bb:e4:a7:de:3d:41:51:16:b5:c7:f1:70:f6:51:
d0:49:a8:4a:33:b9:b2:96:03:bf:14:6d:7d:8d:db:
8a:19:d9:43:74:90:6f:1b:4b:1b:99:2b:2d:b3:75:
01:a7:e2:6a:c8:70:30:74:09:1c:2b:81:c2:2d:51:
92:db:36:e2:d2:a7:64:08:6d:69:a7:05:06:49:41:
5d:c1:0d:f4:f9:fa:db:ae:ee:03:f1:18:c5:d5:2d:
f9:87:ce:d5:0b:e9:97:8b:46:5c:f6:90:b8:1b:c9:
e4:e0:95:2a:c1:6a:da:57:bd:2e:d7:30:57:fd:40:
bd:82:b5:fa:cb:c2:57:12:a2:c5:2b:95:9a:6e:9d:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:11:9B:2B:CA:89:75:10:D7:1C:97:77:5A:93:CD:CC:2D:4E:94:E1
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f1:e0:ad:32:35:e5:32:6e:85:1e:9b:de:5a:8d:bc:2f:4b:
3b:20:75:8e:dd:7c:bc:e2:09:a0:c6:21:bf:d9:f0:00:3a:3e:
38:39:11:c1:78:38:fe:b5:8c:65:4b:3a:87:8f:fd:d4:ab:a2:
73:15:05:68:5d:d5:81:60:02:9f:d9:c4:fa:cc:65:89:56:7f:
f0:3d:6c:24:e5:f9:e5:09:aa:18:8f:f9:9b:1f:45:91:09:80:
6b:14:19:c0:a7:ab:ac:13:f1:51:7a:25:c9:5a:2b:ba:13:7a:
c9:b5:51:80:d4:a0:dd:28:0d:5c:8a:6c:df:9d:33:b1:fd:4b:
c6:3c:0f:df:21:fa:48:ed:10:c4:a7:c0:83:44:ec:c4:02:9e:
2a:ae:a5:6e:f1:98:9a:e8:d8:9c:b6:65:95:1f:b4:87:b4:d2:
6d:40:26:29:47:0d:0d:53:f8:11:c2:71:56:e3:7c:94:04:6f:
a4:22:1d:28:b9:54:26:06:e5:39:b1:14:51:97:46:ae:90:8c:
01:31:3f:4e:38:97:ed:47:47:be:11:eb:70:11:5f:bc:8b:01:
7c:ab:fd:b0:de:fe:84:65:1c:ec:62:90:c6:91:9f:2b:9c:80:
c9:13:5a:db:d9:51:1a:cf:fa:8c:70:da:62:e3:02:7c:b7:ad:
42:a6:9c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:21 2025 by rpki-client