Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
File: lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft (raw, json)
Hash identifier: VgGS165zz/Kz/1ZCRvZlAkEeCMQD39Yg0CPvGMVxJr8=
Subject key identifier: 79:32:D5:71:C8:EB:0A:8A:85:74:4A:DD:41:E2:BF:A6:40:26:CB:CB
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 0198D6984612E627BDE68DCDFDFE05161AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 11:02:40 +0000
Manifest this update: Sat 23 Aug 2025 11:02:40 +0000
Manifest next update: Sun 24 Aug 2025 11:02:40 +0000
Files and hashes: 1: Aw8VCCK2oT1v-RRBTzm1Icy2wl0.roa (hash: XRXIYDE3PMP8HGRW9qlh0nIOPSOFPTF1lsWNuSlfpmY=)
2: P9x64-P6Zc5aUoIHika_YUJSpL4.roa (hash: wA4s5vuet/tgGLY4KlSltkNzg/nbmHYvEtESrfXIJ8U=)
3: i9LUKRMFfrn-zZJPck6ZTY7F8F4.roa (hash: vYGYhqvVpW6XCnxzEEe+vdIqrrsrJBwJSKWJ04MFhOg=)
4: lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl (hash: ORfFqKyt737pw973vfCKiQMvKqIAayepk6hqnRFoWw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:46:12:e6:27:bd:e6:8d:cd:fd:fe:05:16:1a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Aug 23 11:02:40 2025 GMT
Not After : Aug 24 11:02:40 2025 GMT
Subject: CN=7932d571c8eb0a8a85744add41e2bfa64026cbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a7:14:3d:4d:56:96:07:c3:dd:11:65:aa:d4:
27:af:10:bf:2f:09:17:cc:d1:e0:a3:6e:0d:01:4e:
42:52:f7:e7:23:28:1e:08:05:9b:01:ab:c8:1d:1a:
36:dc:7b:7e:48:51:c9:0b:58:f7:09:0b:97:e5:7c:
4f:a9:82:56:f3:a5:59:c3:98:ba:02:e0:99:5a:3e:
ec:22:7f:98:78:3d:14:15:23:6f:1f:bd:8e:39:d1:
ef:cc:f4:e0:c1:c0:35:80:6d:21:8f:03:26:f1:b4:
66:77:3f:c8:73:6d:78:c1:58:0d:19:ce:8c:f4:b9:
b8:df:c0:bd:5b:06:ed:2f:02:28:61:30:77:69:12:
ed:d6:a8:68:10:d9:f5:ab:43:b6:10:8c:82:d0:82:
f1:52:fa:89:ca:1b:2c:31:85:59:ce:85:db:1d:1e:
a6:47:4b:7f:38:30:86:80:49:20:3e:f9:c5:e4:f7:
92:cf:cb:2a:1c:e1:bf:71:ec:ad:81:9b:f1:83:ae:
bd:dc:e1:47:e1:d8:e3:d6:74:ef:d4:27:8b:4e:7f:
d3:2b:0f:13:bd:95:83:2e:50:a4:ce:65:d1:e8:df:
b3:1f:ea:f5:8f:a4:17:04:79:9c:a7:9b:a9:bf:14:
2e:e8:8e:6e:84:85:32:d0:af:81:4d:e4:d6:66:95:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:32:D5:71:C8:EB:0A:8A:85:74:4A:DD:41:E2:BF:A6:40:26:CB:CB
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ee:8b:4f:28:6d:7e:c3:34:cb:0d:e5:34:60:03:cd:eb:04:
1c:16:bf:96:fb:b5:27:a2:14:90:14:87:08:c6:01:e7:0f:3d:
df:ec:ae:b3:4d:77:3a:67:69:dc:76:25:a5:f6:0a:0a:5e:57:
d7:c9:33:e0:15:75:3c:e0:72:7e:97:5b:7a:58:3a:30:d5:1a:
fd:bb:03:97:08:3e:dc:94:6a:e0:89:23:86:f1:dc:40:23:11:
87:c0:64:f1:e4:5f:bf:0c:f4:95:7b:0b:16:08:34:52:d5:d3:
b3:f0:66:9e:d3:9d:57:90:d8:51:6f:52:bf:81:22:0d:0b:61:
c6:d5:f1:7d:ea:a2:5d:f6:de:94:a5:f8:4f:da:80:39:34:db:
af:80:e5:38:62:94:a8:f9:16:77:11:81:bf:9b:4b:99:d9:58:
5b:c5:12:19:82:5c:4e:63:3a:d0:af:2a:07:51:da:ed:ca:b1:
be:1d:6f:60:7f:f5:92:46:0e:5c:dd:28:5e:5f:7e:6a:a4:90:
89:fe:32:4f:d4:10:72:fe:9e:8c:4a:34:89:c1:3a:9f:9d:71:
3e:90:8d:40:bc:36:71:8f:b3:13:95:43:80:72:db:00:3f:32:
eb:d8:7d:97:85:96:d6:3d:e4:50:26:5d:e0:86:a6:3c:6c:dd:
9c:88:d0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:16 2025 by rpki-client