Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier: gXN+G4F8CffC0CLfYTVGnicCD7IBr2dtFeGilQ215Dk=
Subject key identifier: F3:D6:81:90:EF:75:5E:A0:13:50:DA:4C:94:51:C7:FC:26:CF:62:11
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 0198D54E4CFC259E62D99B04DCAEFDEFBE40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:15 +0000
Manifest this update: Sat 23 Aug 2025 05:02:15 +0000
Manifest next update: Sun 24 Aug 2025 05:02:15 +0000
Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: WwdVRn0bBYKfQT0Se316v86i2GGnRbNRtxYzsizvwyk=)
2: scYwC-e6lFDetGsqMlwn-CerbGM.roa (hash: zF9JwzHkhXPpsqlzXkaGHeYsm+/OmjpyP3gHhfOOwfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4c:fc:25:9e:62:d9:9b:04:dc:ae:fd:ef:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Aug 23 05:02:15 2025 GMT
Not After : Aug 24 05:02:15 2025 GMT
Subject: CN=f3d68190ef755ea01350da4c9451c7fc26cf6211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:e8:05:f7:bc:b1:58:90:2a:f9:87:f7:6c:
1f:b9:b7:9b:49:96:78:4b:85:08:48:69:ce:51:0c:
e6:e6:7b:3d:14:d3:d5:5a:94:0d:db:e1:6a:0a:57:
e9:0a:56:cc:a6:c5:ce:d7:e0:1d:f2:6a:31:f7:c7:
31:f5:bb:1d:77:33:6b:21:a4:65:d1:06:40:1d:d4:
70:82:e0:8e:1b:99:b3:72:f0:f9:eb:1c:e5:75:fc:
e3:dc:21:17:9f:a6:50:e5:f8:4d:89:63:33:01:99:
ed:1c:ec:09:4b:d1:aa:d8:9e:38:35:37:21:f0:d8:
f5:aa:7e:3e:50:cf:ec:8b:19:ae:cf:55:f8:1b:cf:
ef:c2:8c:db:5e:41:8b:1c:5e:ff:13:5c:0b:16:f6:
68:50:26:90:e8:a7:82:2f:de:7d:f4:23:fc:85:4d:
2d:ed:7c:c7:76:5e:a1:a9:00:a8:ea:8b:4f:5c:31:
20:76:b5:1f:5b:83:e9:16:ff:1b:76:ae:27:2d:cb:
00:5a:f6:ec:60:2f:e4:b7:c4:1a:0f:a1:4c:52:de:
5d:8b:c3:71:9a:49:1f:97:23:0b:e8:22:df:7e:b4:
d3:f8:85:6c:eb:49:d1:87:ca:a2:23:4f:be:ad:67:
dc:a4:6f:b1:b6:63:8c:18:a0:50:e2:c8:e2:60:c8:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D6:81:90:EF:75:5E:A0:13:50:DA:4C:94:51:C7:FC:26:CF:62:11
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f6:a8:0f:47:53:0d:b4:5c:fc:b9:0a:c3:33:a7:d6:bd:7e:
cc:22:f8:fa:63:0b:b9:d3:f2:6b:c2:9d:ef:93:c9:ec:60:06:
eb:94:51:b4:ac:f7:7d:a8:81:45:e7:d0:d7:cb:5e:36:4f:de:
1a:b8:13:d8:52:cc:5e:a0:63:72:3d:3e:a5:c8:f2:2a:24:13:
ff:88:43:fb:6e:a8:0b:4b:54:ec:ca:4f:c7:bf:f6:50:b3:ce:
26:54:a6:de:1c:ac:7b:a4:51:9c:0d:63:94:90:2a:03:44:0f:
9b:9b:73:f8:d3:4f:02:59:ee:4c:7f:07:0b:e3:cb:47:7b:f3:
79:1d:76:11:ad:5a:c7:9f:24:73:3a:6b:18:5f:57:2c:5d:28:
c0:76:7b:65:93:ed:5f:80:87:25:25:b9:fc:17:00:15:57:dd:
45:6c:24:28:e8:17:a6:49:ec:fc:bb:4b:94:73:aa:99:09:ef:
49:2d:c0:4c:d1:e8:2a:d9:20:62:17:fe:18:10:53:f1:14:8f:
38:e5:bc:f0:91:ac:c4:7d:cd:0e:a3:e8:8b:75:00:4f:fb:49:
db:85:16:b3:3e:7d:d0:79:ef:74:63:43:8f:18:7c:23:07:f7:
24:34:69:8f:27:8e:9f:bd:1d:2d:75:bc:7b:7e:76:f5:88:ce:
3f:8f:53:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:15 2025 by rpki-client