Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
File: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft (raw, json)
Hash identifier: DZKuPmIZw6wykHB+lf/khtOlaW+rzA5RgMPUBWt1xos=
Subject key identifier: 85:7D:D8:57:C3:40:9A:69:56:28:62:EF:BB:F3:D5:AE:73:DA:50:FF
Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
Certificate issuer: /CN=f50e225bfb45218b997719804ea287f1751cf20e
Certificate serial: 0198D706323C9AF888FFE391CC74436EAB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 13:02:44 +0000
Manifest this update: Sat 23 Aug 2025 13:02:44 +0000
Manifest next update: Sun 24 Aug 2025 13:02:44 +0000
Files and hashes: 1: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl (hash: cflKNi39VF7dQnkAy2SUYMBpkygw3cDfdxGRfyBJ85U=)
2: tCReBQEfist-xvNAig7wcNT_kFY.roa (hash: eAnNRfWeMAKf3K2opw1l/ihLmhFWT1Klsp1nr6sdAiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:32:3c:9a:f8:88:ff:e3:91:cc:74:43:6e:ab:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e
Validity
Not Before: Aug 23 13:02:44 2025 GMT
Not After : Aug 24 13:02:44 2025 GMT
Subject: CN=857dd857c3409a69562862efbbf3d5ae73da50ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:b4:bf:65:50:74:4d:0c:d2:e6:ab:89:b8:
f2:60:0d:64:b5:d5:44:81:59:0c:d2:36:27:dc:84:
a8:2b:9c:42:f7:4b:ff:67:32:f9:c0:32:82:aa:6e:
ed:86:00:59:d1:17:09:5e:d2:12:d1:e5:75:62:c1:
68:8d:87:1f:8e:54:a9:dc:72:1e:15:28:75:32:01:
19:ca:70:05:53:e9:ff:b7:58:c9:60:06:0c:aa:f7:
10:d7:2f:bb:95:c1:d5:d7:cf:da:05:c0:dd:4e:98:
92:6d:44:ea:86:d3:d2:d9:b2:c8:c9:39:1b:ad:69:
bc:77:30:57:3d:d4:2d:02:1b:47:9d:9b:3f:b7:ec:
08:cc:78:68:03:ad:2e:80:69:01:a5:5b:07:c2:a5:
fb:72:6d:87:c5:01:98:b4:53:8e:f7:ee:ed:d2:b4:
d2:d3:ec:c3:f7:42:cd:15:34:c9:8b:e9:15:3c:75:
ee:4c:f7:8c:46:10:18:f5:2f:2b:d3:73:2b:e2:8a:
0c:95:bd:13:b4:c1:d4:56:d1:2a:d0:5f:0a:f8:68:
53:c8:e2:ab:3d:cd:dc:e0:28:4f:69:a2:e4:b4:25:
3b:0a:10:e0:25:94:43:87:09:8f:6a:74:c7:ed:4e:
00:56:0d:79:75:e8:f2:99:34:ab:da:43:51:eb:32:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7D:D8:57:C3:40:9A:69:56:28:62:EF:BB:F3:D5:AE:73:DA:50:FF
X509v3 Authority Key Identifier:
keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:61:b6:a7:ce:24:47:89:3f:d4:53:98:72:47:86:8a:82:57:
fc:0d:db:29:5b:58:d4:14:15:f0:f5:e9:fb:1f:9e:9d:79:b5:
22:d2:84:a7:4c:c3:88:0d:46:63:cc:e9:63:53:45:e1:62:f7:
86:2f:c5:21:3d:49:cd:3f:1b:bd:6d:0e:9e:17:79:2b:81:d0:
6a:23:60:e4:60:2b:61:6f:43:89:96:22:b7:8e:b1:5f:e4:a0:
da:18:e5:ef:db:e3:18:df:e3:2c:0d:ef:81:45:42:9a:93:f3:
26:b7:89:71:94:8f:2a:be:61:d2:35:99:ea:19:8b:98:52:e1:
0e:93:cc:7f:2b:2b:b0:54:a1:44:2a:d1:79:72:34:ae:36:3b:
f3:7d:5e:6c:54:98:d3:01:da:02:27:b4:27:3b:97:cd:3a:23:
37:41:64:6f:6b:16:ea:b3:66:cb:31:ac:ec:e5:3a:87:b6:e2:
65:af:c0:a1:57:67:e2:86:00:4b:c4:a3:3f:49:ac:61:c1:29:
4d:4e:be:e2:83:dc:cd:8d:a1:14:7a:8b:54:9d:ed:2e:58:d8:
d5:9d:2d:33:ea:22:55:e8:8d:6f:a0:0e:cb:61:29:dc:b3:cf:
03:6d:30:c4:ed:e3:53:4c:ef:60:af:75:5d:a3:23:f7:d2:a2:
4a:25:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:25 2025 by rpki-client