Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
File: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft (raw, json)
Hash identifier: eFblJlCSVBcwS+0p02BwMpXtdmzOw7a91NEd1R+YjrQ=
Subject key identifier: 03:F2:D4:36:7B:9A:C6:3F:46:DF:77:85:29:54:FF:54:14:17:AF:E4
Authority key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
Certificate issuer: /CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Certificate serial: 0198D54DCBF37C91F7C32AAA196A5DC32B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
Manifest number: 3C
Signing time: Sat 23 Aug 2025 05:01:42 +0000
Manifest this update: Sat 23 Aug 2025 05:01:42 +0000
Manifest next update: Sun 24 Aug 2025 05:01:42 +0000
Files and hashes: 1: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl (hash: GOyoFxphC7s/0C2qFIyQnC0OI8PVlRWwRQD+FYlC7aY=)
2: mNqIiIsivK3RH9-qHlJI1-YYSi8.roa (hash: H9Eh88q+8mpDx8ZuUb0d9LRmXaGpIblFFe9crHh272Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:cb:f3:7c:91:f7:c3:2a:aa:19:6a:5d:c3:2b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Validity
Not Before: Aug 23 05:01:42 2025 GMT
Not After : Aug 24 05:01:42 2025 GMT
Subject: CN=03f2d4367b9ac63f46df77852954ff541417afe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:a2:36:3a:3f:2d:7a:d5:8b:95:b1:ed:b2:
61:02:ac:a4:c6:5b:2f:fa:a8:88:e4:90:eb:b5:0d:
94:b2:91:26:f2:57:0d:d1:41:a9:42:a8:e7:da:c4:
8d:00:e4:7d:49:68:91:b7:ba:e7:08:e7:69:82:09:
89:a6:27:56:bb:86:67:a0:82:5f:4d:45:9d:ba:6d:
3a:07:c9:01:a9:1e:bc:9b:47:84:2a:9d:9a:46:d8:
c7:97:c5:12:ce:58:6b:c8:ea:15:ce:ef:8e:3e:bb:
26:5b:a8:82:61:40:73:6a:32:85:1e:3e:2c:04:10:
2b:16:bf:72:e0:40:3c:8a:59:c8:f7:8f:a7:9f:41:
c1:74:80:aa:ae:78:77:ed:00:b8:7a:02:58:19:32:
fe:7a:a1:84:50:1a:19:09:6f:08:15:d3:ab:f2:ba:
7e:55:8f:12:f2:56:62:3b:e9:97:0d:d7:3e:53:17:
8c:88:3c:e4:eb:85:1a:47:9e:bd:2c:04:98:1a:73:
cb:74:90:23:5c:e8:13:40:b2:c0:c1:cb:57:68:2d:
95:22:25:13:fe:80:ec:5e:4c:ed:10:97:ec:69:c7:
ba:b9:5e:0e:46:b0:a4:54:14:24:82:24:d7:95:78:
ba:ff:16:7a:4c:dd:a1:98:46:6c:df:46:c5:8f:40:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F2:D4:36:7B:9A:C6:3F:46:DF:77:85:29:54:FF:54:14:17:AF:E4
X509v3 Authority Key Identifier:
keyid:F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ca:2a:ed:38:53:42:9e:17:83:04:4e:da:a2:eb:cf:ae:9d:
21:4b:d3:72:b5:85:2a:cf:21:31:3f:24:34:42:e0:15:1d:e6:
90:b9:f2:f0:b7:99:20:42:1f:a7:f0:4f:5a:6a:cd:39:5a:f5:
c5:ef:19:40:de:f8:54:cd:a2:f4:ed:18:0b:62:77:c2:2e:28:
75:fa:7b:3d:01:4c:48:2b:2c:0a:86:13:d5:3a:60:86:78:f8:
70:d4:9b:95:e0:f1:dc:91:6c:19:99:7b:99:96:ee:57:ef:76:
c4:08:79:b7:31:d7:10:23:66:11:7f:f4:c5:c2:97:88:dd:84:
c6:be:b2:28:7f:67:79:54:7d:b6:2e:dd:56:d3:5f:99:16:59:
1f:d2:ef:06:70:c5:d1:62:be:da:a1:7d:6a:2a:03:02:7a:6d:
ef:d2:2d:2d:70:4e:bb:f3:d2:4a:b0:33:79:32:89:7e:3e:d7:
c4:26:83:55:b0:6b:30:04:f7:59:15:15:3e:91:8b:94:cb:a1:
63:b1:a0:15:d5:88:ae:8f:7e:fb:b4:1d:4f:49:79:89:e0:8f:
a6:cf:21:38:85:cd:98:cf:67:3d:fb:15:16:68:b3:c3:a4:dd:
c8:08:6b:45:29:cc:1e:d7:fc:8e:bb:e1:0b:52:25:16:e5:d8:
64:4a:2a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:11 2025 by rpki-client