Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
File: E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft (raw, json)
Hash identifier: O+NB0XfSoiMTgIjOqlzfR8DZjGscJcCj7/k4yspzHlU=
Subject key identifier: 92:BA:57:5A:7A:6A:F5:C4:10:9F:DD:11:65:BD:45:8D:B7:29:6D:F9
Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Certificate serial: 0198D4DFFA17E569A992229485F204F4E199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:44 +0000
Manifest this update: Sat 23 Aug 2025 03:01:44 +0000
Manifest next update: Sun 24 Aug 2025 03:01:44 +0000
Files and hashes: 1: 0ISUdIwuZLNqVWNNfjNPjkkfb0A.roa (hash: X8YDNwD9PGK+IazmDttNRD5zMBvc8bSCuQ7N4xzf1ko=)
2: E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl (hash: aIMC5alZ6xUqlicVw8dyVva8L2DwwtJfBTDfalVZA1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fa:17:e5:69:a9:92:22:94:85:f2:04:f4:e1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7
Validity
Not Before: Aug 23 03:01:44 2025 GMT
Not After : Aug 24 03:01:44 2025 GMT
Subject: CN=92ba575a7a6af5c4109fdd1165bd458db7296df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9a:80:82:96:dc:a2:e4:62:f7:c2:ec:b4:b8:
10:5c:88:98:c3:24:72:3f:e6:61:35:9c:91:38:f8:
73:dd:75:d8:bc:9e:60:1d:56:58:5b:bc:bf:14:49:
28:68:74:58:cb:96:e6:f6:16:16:5a:63:56:b2:ff:
f7:02:6d:25:dd:42:00:f4:7d:34:c4:d7:9b:22:0c:
aa:8f:5d:48:4f:38:3f:cd:67:aa:df:bd:e7:ca:0f:
76:03:4b:1d:5e:c8:b1:a8:89:72:d6:ce:35:a5:c1:
12:ef:19:5c:bf:d0:7f:47:c8:4b:59:69:7d:34:d8:
57:fb:a1:74:de:ff:23:0a:fb:d0:02:40:2e:a5:69:
e3:d2:f8:33:38:45:24:b2:85:17:20:24:97:e1:99:
d8:b3:e2:a7:a8:28:23:2e:fc:0b:1e:d0:a0:cd:2a:
82:d6:2e:77:0d:a8:de:2c:47:6d:59:d8:7e:b9:6e:
d5:70:a9:08:6a:53:0d:5b:da:7e:0c:14:a7:ba:ba:
f5:57:44:75:b8:2e:34:78:9b:83:e0:0f:30:52:78:
7b:a9:9a:6f:60:02:33:ac:7d:e2:c5:85:7a:80:9a:
73:8f:fd:e5:19:ed:47:c3:bc:a4:a3:6a:f9:40:6a:
e5:86:c7:69:e3:83:90:91:63:49:51:c0:f7:8f:61:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BA:57:5A:7A:6A:F5:C4:10:9F:DD:11:65:BD:45:8D:B7:29:6D:F9
X509v3 Authority Key Identifier:
keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:66:72:8a:8d:0b:32:b7:8f:b3:94:e5:29:7c:4a:ca:b3:2f:
e1:86:22:88:3a:5b:0b:95:aa:ea:15:78:d4:fd:4e:08:d1:f6:
ea:e5:04:84:80:53:8a:15:dc:62:1a:32:bc:43:db:81:bb:77:
2b:9f:ad:cd:eb:d3:93:7d:08:8e:60:81:9e:7f:e3:92:8a:bb:
e9:98:7d:24:f7:f2:f2:7e:3c:71:75:5b:1d:41:54:14:c7:5b:
d2:d3:4e:5d:77:69:46:06:99:ea:6b:6f:08:cd:32:0e:65:b3:
d1:18:c9:9c:4a:21:93:d6:18:9e:43:0d:54:ef:f6:a5:8f:af:
b9:98:5c:f4:2d:ff:01:d8:09:9d:67:ac:af:0a:38:62:0a:00:
51:74:ca:02:8f:7e:2e:4f:37:fd:ac:25:c0:c4:92:8d:24:f9:
e4:01:59:91:95:db:a7:81:67:90:79:ce:a1:3e:71:24:aa:cb:
de:12:87:e3:97:6b:ba:9a:c6:8d:95:08:6b:83:56:98:b4:db:
c4:96:6b:00:d9:c5:39:4a:c1:30:a5:e4:00:75:72:ec:f7:b7:
e6:68:71:ca:ec:86:2f:65:17:c3:af:0b:c4:e5:bf:d6:a2:d1:
7e:8c:42:20:4e:0e:cd:8c:d3:26:c0:64:f8:e5:03:7f:57:d7:
e3:a9:70:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:30 2025 by rpki-client