Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
File: CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json)
Hash identifier: psMXJONrMTSrFF0Z0TCR2guVTf7pYfA3DXk5vQkaMTY=
Subject key identifier: 35:B1:0E:2E:FB:CB:22:CE:21:70:58:22:EE:83:4A:F2:BE:A4:D0:DD
Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Certificate serial: 0198D5157FC498F554C1B368B6D699B12F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
Manifest number: 01E9
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: r5YLrGyoEooV7qkWDGOVlPOKtOUZo+r45OyNIYpAF10=)
2: H2ZOh9fIAnQ96NovacR2PdzVa0g.roa (hash: +nBuIb1Jhz2syXSr6RgoJwf6cbGP9SV27ZeU9ljDCeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7f:c4:98:f5:54:c1:b3:68:b6:d6:99:b1:2f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=35b10e2efbcb22ce21705822ee834af2bea4d0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:f0:c1:7b:04:ca:ea:58:b2:3d:db:88:2b:
50:9b:73:e3:58:35:b1:60:70:c2:18:e9:3a:67:95:
7d:33:69:f5:5a:e3:68:91:59:12:2f:e4:a5:aa:ae:
8b:c5:56:e0:ae:9e:f1:c3:44:0c:8d:0e:46:5e:fe:
ae:c7:15:3b:5c:34:d9:59:8a:73:58:4f:bd:fa:b7:
d8:97:ec:58:97:51:44:bc:d8:ea:e7:89:52:b6:f4:
bc:d9:b4:47:45:5e:15:53:de:e7:df:f4:74:ca:56:
a4:75:e5:e6:a2:5a:e8:06:13:39:e9:72:07:5c:e6:
36:35:c8:71:44:bb:41:1a:dc:16:0a:6b:71:5a:04:
72:b5:13:20:fa:24:fb:76:c5:66:89:88:13:d4:c4:
e5:b2:16:2d:3b:ab:49:d2:6b:c9:b2:05:3a:10:80:
84:4d:53:33:99:99:23:5e:a9:99:f5:bb:4f:a0:e4:
38:f8:51:ee:c1:d0:26:2d:e3:df:d0:66:0c:75:93:
bc:b9:c3:86:25:4c:46:da:50:0f:a8:c5:11:5a:6b:
37:77:f4:42:ed:07:b2:c2:02:cd:43:02:b1:78:83:
d3:f1:b4:d5:5f:43:8f:ff:df:43:b7:ed:23:0a:e7:
cb:02:56:df:97:3a:2a:77:04:ab:83:ac:f8:4c:28:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B1:0E:2E:FB:CB:22:CE:21:70:58:22:EE:83:4A:F2:BE:A4:D0:DD
X509v3 Authority Key Identifier:
keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:38:f3:e7:4d:a1:83:dc:cb:e5:fd:58:2d:a6:d5:be:14:5a:
8e:27:7b:76:9a:d7:d9:8f:31:d8:e6:c8:0e:bd:3c:45:01:65:
80:cf:8a:15:c2:ae:24:e7:ab:81:5d:e0:91:17:6f:0b:da:f4:
90:16:91:dc:ff:f6:89:02:18:ea:02:b0:c9:f7:dc:36:3e:b0:
f0:23:cd:3d:db:c9:2c:b2:2c:85:7d:0c:7d:c7:bb:be:1d:27:
30:4e:f4:a2:71:62:c9:1a:7a:b4:35:91:8a:18:a7:65:37:08:
00:f5:90:84:87:1c:30:68:47:cf:b9:2d:19:83:43:71:b2:27:
c4:61:90:c6:73:b9:a4:51:fe:ee:40:8f:f1:77:f8:67:31:9b:
18:f9:92:6f:b7:a8:32:3d:a6:1f:06:55:fc:7f:ba:ae:67:ad:
19:07:94:b5:ab:d3:4c:1b:98:e2:59:a2:4f:9d:fe:bc:e6:31:
59:a5:85:04:7e:c4:b3:e4:09:11:50:85:65:fc:4b:0a:f8:53:
42:22:ad:10:e2:41:46:9b:4a:9a:17:4b:d9:79:75:09:9c:db:
a5:36:ee:23:1c:5f:6c:09:61:c1:e1:e2:76:d2:f1:27:7c:57:
9a:b9:6c:c5:39:b2:63:49:f4:91:30:0f:c7:08:18:22:a6:d9:
c5:d3:29:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:18 2025 by rpki-client