Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: xyfS28GdkAybrMpRo+I3ekWAL47fAg/p95tBTTglyGo=
Subject key identifier: F3:EC:98:89:9E:AF:D6:B1:E6:38:ED:25:11:AF:75:B5:74:BA:E0:86
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 0198D7E173F251CB2D5E82D03FA8D52914A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 17:02:13 +0000
Manifest this update: Sat 23 Aug 2025 17:02:13 +0000
Manifest next update: Sun 24 Aug 2025 17:02:13 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: WlUxdWto8/1f8j+BwpneJD9g9P2cj7eGtIXkH/N7TW4=)
2: h04E6GUTfk7g-nszYeXV5v59Z7g.roa (hash: D0nODnBLfeAlBTbUkjxGcmmT4S/QYeiGnt9Aow5Sjx0=)
3: xJetAjXRbPTX957PRc-ZRikOCag.roa (hash: zIdEISxA+75bDRZATAE0MJ7G/Gr2I74NP3sEuTFZFW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:73:f2:51:cb:2d:5e:82:d0:3f:a8:d5:29:14:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Aug 23 17:02:13 2025 GMT
Not After : Aug 24 17:02:13 2025 GMT
Subject: CN=f3ec98899eafd6b1e638ed2511af75b574bae086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:f6:3e:a3:c2:14:dd:6d:bc:64:88:c9:bf:
d6:79:bc:c7:4c:70:43:df:de:0d:19:e4:9c:9f:3c:
fa:e9:3b:ba:5d:73:9b:e6:bf:b2:e1:5b:5d:45:04:
3f:89:e7:74:b5:80:7a:fd:1b:78:97:1e:ae:bd:78:
5e:bf:9e:d8:c5:4c:12:61:95:40:65:31:cb:3f:d2:
1c:bf:53:62:cd:51:c8:01:9a:1d:c1:84:c6:49:28:
0f:ed:32:64:82:bd:53:5d:04:52:5a:ab:4f:3f:35:
25:7f:de:3a:49:b2:09:ed:30:b1:0a:8f:e6:7a:c6:
e0:c8:2e:af:12:7c:ed:8a:8d:50:9d:40:f4:af:0c:
42:24:ce:f5:92:39:4e:31:1a:40:f0:b7:2e:17:9c:
f3:88:a7:4e:e1:7e:ec:fc:79:f8:bf:99:6b:e5:7a:
cf:48:3a:80:eb:f9:a6:86:e7:03:f9:37:8c:50:12:
3d:5a:c8:7b:67:9d:5c:15:9d:f9:ef:bf:bb:c5:45:
38:b0:fa:82:4d:2e:8a:47:e2:c5:57:79:8a:db:3d:
db:71:c4:1e:92:da:38:60:cf:ee:06:b2:4b:ab:2f:
b5:6b:42:57:95:5f:25:78:14:20:52:c0:9a:19:7f:
68:35:3d:48:11:62:4b:d1:5e:14:97:72:54:28:46:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EC:98:89:9E:AF:D6:B1:E6:38:ED:25:11:AF:75:B5:74:BA:E0:86
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f8:ad:5f:a9:cb:93:b2:1b:cc:f2:98:97:8f:e4:a4:37:ad:
f7:4b:5f:c7:da:bd:71:e2:bc:4e:82:9c:b6:f0:df:3a:b2:2b:
31:ac:f3:b2:5c:70:bd:2e:fb:a5:b7:bd:62:1d:98:6e:bf:4d:
48:c6:96:df:d3:82:82:6c:65:55:2c:99:b0:85:a9:5a:6c:cc:
b6:84:eb:5f:69:8e:b7:17:cb:34:3b:10:66:9f:ae:f5:b3:1c:
5f:25:50:71:19:4e:0d:c0:49:b4:3d:fd:c9:a8:11:c7:09:ca:
74:24:5e:a8:4f:65:5d:5b:92:d4:38:59:1a:80:22:e7:7d:c1:
6d:09:d0:f7:01:25:1c:46:6e:f5:57:be:80:15:ea:b8:c3:3d:
57:c9:06:9c:c6:14:07:8d:c8:cc:2a:17:ec:d3:ef:40:d6:15:
d2:96:55:0c:9c:cd:a4:58:04:bb:12:71:9c:44:b1:68:f6:e5:
6f:09:1a:17:98:4a:9d:38:a0:64:88:25:2a:d3:25:9e:31:70:
b4:f4:e4:01:61:9c:fc:30:8e:52:f0:4b:13:20:35:3e:73:3f:
ee:e1:3c:5b:6b:1f:86:02:86:3c:49:08:eb:1b:1a:c4:3e:80:
0e:07:66:52:78:c6:5f:74:b8:e1:70:c6:d3:dd:05:3f:93:b5:
1e:40:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:55 2025 by rpki-client