Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
File: p9368Tt9vgXaoytYeLi2gCQEWXE.mft (raw, json)
Hash identifier: QJ1OPnNkVWrYFDK+ObpZB5p16AbyaVqrRdCaXoOpiLc=
Subject key identifier: 7D:3E:2F:93:EA:8A:67:F5:39:2C:D4:A9:80:A7:05:7A:DF:7A:FA:77
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 0198D73BDCE4FB10E7FA93214A110F4FA731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
Manifest number: 0DD3
Signing time: Sat 23 Aug 2025 14:01:21 +0000
Manifest this update: Sat 23 Aug 2025 14:01:21 +0000
Manifest next update: Sun 24 Aug 2025 14:01:21 +0000
Files and hashes: 1: DYV8rTZS8uCurZHOoqW-jfWMmWg.roa (hash: oTQ/SBogFSvxJCfk7V0vkU2XYqnVHjZNfcn9byEW2aE=)
2: LwjuDBy22G2-Q-2JO3jMhOy1eNU.roa (hash: lEUkgsAO72uMMjQemqqZ36mEX8JKjX4GaMbgSM4hzTI=)
3: p9368Tt9vgXaoytYeLi2gCQEWXE.crl (hash: 5ZV+7Ah5t4nY4d+z4bs2MyLvAvYIf0HqeErHqURIJLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:dc:e4:fb:10:e7:fa:93:21:4a:11:0f:4f:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: Aug 23 14:01:21 2025 GMT
Not After : Aug 24 14:01:21 2025 GMT
Subject: CN=7d3e2f93ea8a67f5392cd4a980a7057adf7afa77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:03:d3:03:9a:f1:98:c3:34:2e:03:10:b4:
d6:b4:ab:ba:fb:1b:b7:c6:16:d6:8d:3a:d7:0f:04:
79:da:68:5d:17:ef:f5:ec:f3:72:b1:7b:95:44:0c:
33:66:d1:f8:a8:f7:be:8f:97:0f:ae:4b:3e:7b:26:
3e:4e:d3:6e:9b:65:3c:c0:d8:35:30:fd:ce:3d:d0:
4f:a1:72:3e:7a:fb:bc:14:a8:1c:ea:25:23:b1:f6:
8f:f1:58:a3:8c:1d:6e:19:9f:0b:cb:3e:99:6e:d4:
5f:ae:63:a2:64:23:af:9e:56:0c:99:a8:fc:ed:4d:
e3:9a:b9:70:9c:8a:e0:11:80:94:c3:a3:34:ed:f6:
7c:22:5f:c5:46:bc:cb:02:8c:b9:01:b4:7e:5d:6d:
15:04:7c:f6:25:ac:e1:42:9f:51:ce:1b:8a:9a:5c:
87:70:7d:19:5c:b4:71:0e:4a:2c:e1:28:1a:ed:0c:
98:ce:b7:bc:c2:d9:9e:8e:f9:85:4b:49:7b:2e:f4:
69:15:f2:f6:09:78:b7:63:b4:6d:b8:50:5a:a3:15:
97:4a:4d:f3:29:35:f3:7d:1c:7f:6d:42:24:50:f0:
0b:43:21:f1:08:7e:1b:88:38:fe:d0:c5:67:fd:6e:
b7:2b:14:14:57:5c:0d:c5:94:7f:4a:4c:2c:65:aa:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3E:2F:93:EA:8A:67:F5:39:2C:D4:A9:80:A7:05:7A:DF:7A:FA:77
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:aa:98:cb:82:44:f5:25:38:63:21:88:bc:aa:c5:1b:7b:44:
c6:c6:69:7c:bf:4b:5f:77:ab:13:d0:2c:68:c8:61:35:14:57:
9c:fc:84:d5:e3:ab:05:78:7b:4b:eb:cc:ae:0c:bf:2a:0c:1e:
53:71:13:81:94:77:24:87:b4:1f:06:f2:41:3a:07:3c:fb:c2:
6a:7c:be:bc:22:a0:c8:e9:dd:0f:fb:96:bd:40:3d:13:dd:8b:
50:55:00:97:d6:fd:c8:d3:8e:2c:aa:66:8b:ea:18:4d:5f:a9:
48:3a:bc:11:be:f1:89:4e:d6:60:bc:c8:9b:b8:87:cc:c9:58:
93:a9:ad:65:1b:ad:e7:f0:74:a0:9b:8e:a2:aa:5a:c8:d9:79:
8f:c7:c1:c8:e9:da:a1:39:ce:72:06:67:b9:da:0c:3b:54:50:
46:5b:2f:f5:a3:60:41:2b:d3:81:c4:ee:d8:9d:ea:bb:2f:b4:
22:e1:f5:cf:21:9b:10:94:08:51:a0:ee:6d:b9:94:79:0d:57:
62:b2:04:03:aa:7f:65:33:da:de:f5:ff:29:18:9e:1a:f1:37:
fd:ba:a2:f1:3d:7b:ea:78:f8:cf:b8:b9:d3:8f:45:ad:aa:81:
13:16:40:75:c1:43:07:65:25:98:83:8f:92:d2:d1:85:19:23:
14:72:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:14 2025 by rpki-client