Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
File: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft (raw, json)
Hash identifier: JYgwG/aVr9p6iVtqTMoe5za1m14cn8jcQuM5LcYGb6s=
Subject key identifier: C9:04:0A:1E:35:EA:89:80:E6:66:81:19:1C:43:42:C5:24:AE:81:17
Authority key identifier: FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
Certificate issuer: /CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Certificate serial: 0198D5157979B1A52AC1A613CB5039EEC02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 04:00:11 +0000
Manifest this update: Sat 23 Aug 2025 04:00:11 +0000
Manifest next update: Sun 24 Aug 2025 04:00:11 +0000
Files and hashes: 1: GDYfoKKG3yFaIjJkJ3YCAK8hLqA.roa (hash: erb5aM2h7W5I1XqnWYG/lDx7/8zDPLRd0RbZw0dE/qs=)
2: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl (hash: ekBAxnQzf5qA6CROCijDah+4DBh8nHs5hAPnqUuqtZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:79:79:b1:a5:2a:c1:a6:13:cb:50:39:ee:c0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Validity
Not Before: Aug 23 04:00:11 2025 GMT
Not After : Aug 24 04:00:11 2025 GMT
Subject: CN=c9040a1e35ea8980e66681191c4342c524ae8117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:da:14:3c:af:2b:72:c4:7b:73:bc:78:50:
da:23:80:d8:dc:9e:93:1c:ec:ee:3f:58:3d:0a:af:
ea:8a:ce:fa:97:e5:4d:43:1f:07:28:9a:95:3d:2d:
96:1d:0f:de:01:1a:ce:25:f7:21:c1:6b:9d:be:80:
fc:05:1d:ac:7a:e0:f4:79:38:c2:6d:03:75:c9:37:
32:2c:ab:d4:12:b3:93:9c:03:b9:d6:a6:72:f7:3c:
14:7d:5c:e0:c2:d3:f2:82:5e:31:a2:c2:25:eb:ec:
8b:86:9f:fe:f6:6a:15:e7:c5:f2:af:cd:4b:85:28:
b2:b7:21:29:f9:fc:8b:da:f0:eb:f5:c2:d4:20:27:
4e:91:fe:99:bb:5e:70:ae:77:67:d6:8d:29:fb:4b:
e1:3f:ad:34:21:9c:9e:17:6e:a7:e0:a8:83:fc:40:
95:77:d6:6f:2c:a1:ec:25:e9:49:cf:7d:a3:e7:9d:
d9:f4:18:c2:ae:e4:27:4b:e6:67:0d:40:ca:c1:38:
60:d7:fa:13:8e:d5:34:a2:31:c6:56:c1:08:d0:a9:
2e:91:da:d0:52:31:b5:45:63:0e:5a:1a:1c:fd:f3:
4f:62:e8:52:84:bd:fd:df:fd:08:aa:e5:00:72:f2:
ab:71:da:8d:18:e5:ac:b7:79:a7:ce:87:7f:98:fb:
fe:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:04:0A:1E:35:EA:89:80:E6:66:81:19:1C:43:42:C5:24:AE:81:17
X509v3 Authority Key Identifier:
keyid:FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:48:67:09:52:33:3c:44:66:33:aa:5d:c6:97:e8:7f:dd:61:
50:9d:79:32:eb:98:49:89:c2:69:16:64:4b:86:e1:34:39:26:
39:a2:d4:4f:9e:e4:d5:96:f5:3e:f5:48:4a:69:17:53:2f:28:
2c:16:09:44:93:0f:55:20:ed:38:0b:d1:4e:8a:e5:c7:d7:79:
97:3c:d8:29:3d:5d:a6:24:13:ef:5c:08:d0:32:40:00:f4:6f:
e9:20:da:c1:ae:9a:e3:79:86:44:ac:19:03:a2:09:7a:ea:34:
e1:41:1a:08:fe:83:9f:0b:17:b5:9c:3b:56:cb:4d:76:cf:d6:
6b:2e:93:04:01:ca:35:de:28:1c:ac:52:6d:84:41:b9:21:d5:
cb:48:35:ea:26:2d:b4:bc:96:f0:08:ba:30:73:f0:52:36:f2:
05:30:52:71:bb:18:a5:4c:f0:f3:4c:37:81:6d:48:ee:72:4b:
e5:94:77:8a:b2:af:7b:c0:77:6f:d5:88:d0:6e:bd:db:5c:7d:
e8:dd:5a:38:d5:6c:c3:7d:35:4c:cf:1d:8e:47:27:87:13:fe:
2b:84:f1:2c:cd:82:64:01:8f:1e:76:04:e5:73:7f:6c:f3:6e:
d8:57:dc:ef:b9:63:fc:fe:18:2f:ad:86:cc:d7:12:3e:cc:87:
db:b4:4d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:24 2025 by rpki-client