Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
File: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft (raw, json)
Hash identifier: gnWNE5H+tyUHwvtvt5rDt5MypS6hu39uV8i0jswfOqU=
Subject key identifier: 58:F2:61:28:E1:9D:63:7B:6F:C2:97:27:36:2A:47:CF:A9:C4:5F:0F
Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
Certificate issuer: /CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Certificate serial: 0198D473464AA63A6BA8EE2A86EB0FA4C926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:03:01 +0000
Manifest this update: Sat 23 Aug 2025 01:03:01 +0000
Manifest next update: Sun 24 Aug 2025 01:03:01 +0000
Files and hashes: 1: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl (hash: cMtFTNHLJ9ZeioqrXoQUbS9GmCNi+OONhcUiNyMirNk=)
2: iZXergsmx3c-YFSPwK1duaC7zXE.roa (hash: ux75uK3r8KWiMZRMZNyHuR7X45YAulKv87yeHOUi7Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:46:4a:a6:3a:6b:a8:ee:2a:86:eb:0f:a4:c9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Validity
Not Before: Aug 23 01:03:01 2025 GMT
Not After : Aug 24 01:03:01 2025 GMT
Subject: CN=58f26128e19d637b6fc29727362a47cfa9c45f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:4a:35:60:2b:0a:16:28:1e:6c:1d:a1:a0:
94:30:ba:e6:e0:12:83:0e:49:76:28:cc:a6:99:9e:
71:48:89:36:46:2f:a0:6b:ee:32:f9:b9:6f:bc:fe:
79:57:5c:03:87:c3:a8:3b:88:d5:3b:f9:7b:cf:44:
b5:1f:f0:82:44:6f:c6:a4:bf:c4:91:21:1b:22:93:
36:31:24:cc:41:dd:94:25:3a:00:f4:00:ee:2c:a9:
b2:76:66:7c:85:10:bb:f4:26:45:6e:b5:33:5d:3d:
0d:30:22:cf:42:a9:70:cf:99:00:0a:45:40:1f:c5:
cd:61:a7:81:62:bb:af:71:13:6c:09:9a:22:a1:2c:
f4:7f:77:7b:aa:c0:55:47:e9:12:8a:84:12:50:2d:
86:8d:f3:46:45:76:76:11:aa:44:0d:15:2b:51:94:
f0:85:45:ff:a8:0e:ee:5a:3a:f0:9c:3c:59:48:0c:
b8:8b:6c:b0:75:c1:1d:80:cb:09:38:16:75:5b:df:
78:73:34:f4:06:a4:12:10:18:b5:47:87:a4:83:93:
c6:b8:0d:97:3d:dd:cc:e7:17:31:f5:6c:01:5f:84:
4b:ed:e2:71:03:7e:29:c1:e7:2a:6a:a2:33:04:a3:
61:69:bf:e3:1d:03:49:31:db:00:42:9a:63:e0:09:
ed:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F2:61:28:E1:9D:63:7B:6F:C2:97:27:36:2A:47:CF:A9:C4:5F:0F
X509v3 Authority Key Identifier:
keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0c:e9:d4:91:3b:24:25:de:33:4e:ee:4c:29:74:c2:b4:6b:
e5:e5:83:22:ae:35:cc:bf:0f:2b:94:35:16:62:4e:8e:c1:24:
65:07:72:69:2b:38:c8:67:a5:15:ac:94:57:c9:9b:60:50:28:
96:51:5c:65:95:75:b4:fd:8a:61:c7:12:c0:31:d5:e4:48:a5:
fb:02:d5:71:16:f7:54:1c:0d:ab:c7:db:2a:c6:53:42:3c:c8:
3e:c0:31:6e:8f:05:6f:d4:c8:bc:3e:86:28:4d:db:d7:32:f4:
5f:76:85:8a:b2:04:b2:f4:d8:29:1b:61:af:8e:1a:6b:56:2c:
68:98:02:0e:81:df:b0:23:54:04:f3:1a:af:2e:74:7d:9f:2f:
8f:c8:54:e1:3d:73:db:c0:5b:d7:95:9d:56:22:99:26:43:24:
ec:c9:3d:86:46:ca:47:4f:54:b3:ef:d4:78:74:c5:ab:e5:4f:
7a:c3:7b:76:22:1a:06:03:16:e3:2e:ad:95:72:3c:b5:4f:f7:
a2:6a:16:38:c8:9f:f6:84:db:ff:7b:09:e7:af:26:62:42:5a:
97:48:84:56:3c:f2:c9:f3:aa:1d:86:ad:c5:d7:73:28:83:cb:
41:19:da:2a:f1:a1:6a:0e:80:b5:71:c1:2e:6b:86:ef:99:d4:
e8:e7:39:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:16 2025 by rpki-client