Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: QGEbpj0Sqn7e/OtvCSBHyAL8C7wCKasTqbApJwUMJqI=
Subject key identifier: F3:7A:A8:82:2A:A1:2A:AF:1A:DA:C1:29:63:0B:82:70:3F:95:CE:82
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 0198D4743077C43A9CDA132FCC8F849810BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:04:00 +0000
Manifest this update: Sat 23 Aug 2025 01:04:00 +0000
Manifest next update: Sun 24 Aug 2025 01:04:00 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: FTTLBR3K0PkMkZmdV3W6/hgRXlMl+fanoU698UEIiLA=)
2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:30:77:c4:3a:9c:da:13:2f:cc:8f:84:98:10:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Aug 23 01:04:00 2025 GMT
Not After : Aug 24 01:04:00 2025 GMT
Subject: CN=f37aa8822aa12aaf1adac129630b82703f95ce82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3e:1c:dc:3c:3c:16:50:ce:a0:7c:6c:60:20:
f2:0b:bf:34:f2:6f:cf:dc:ae:e0:be:87:e7:6f:c5:
dc:b0:cd:2e:de:8b:f5:a5:30:b7:7a:43:b1:aa:c8:
1c:ad:0a:8e:e2:4d:18:19:a1:e5:3e:2a:c1:f2:eb:
f5:50:e1:2c:98:73:ec:8c:49:5f:88:66:c2:0b:59:
99:ad:40:cb:21:80:c0:4e:66:0f:f1:bf:03:83:7c:
b3:29:af:b5:0c:b5:69:2b:9f:fc:db:1e:96:42:85:
7d:8e:23:fe:57:38:a7:e2:8e:03:f5:51:38:7b:d3:
1f:dd:a0:7a:31:7b:3c:d2:bd:e7:87:c7:bb:15:46:
f7:a8:1d:e2:00:4a:c0:af:79:2c:01:72:b4:42:40:
ea:99:e2:53:85:b9:31:40:12:2e:6e:a3:75:1f:cd:
a3:9d:26:f5:a3:fb:93:ce:fc:f2:be:25:e6:c8:53:
37:76:fd:a0:22:5b:95:91:13:23:b7:b2:16:c2:90:
cd:38:5d:83:11:23:ff:fa:7c:0e:1f:78:e0:60:97:
7d:2f:2f:57:79:4f:cf:8b:26:28:09:99:83:14:d0:
75:7b:db:87:52:cc:ab:52:f3:96:b4:e8:23:94:12:
c6:3d:46:0e:ff:e9:de:5b:95:91:af:d4:28:02:0e:
dc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7A:A8:82:2A:A1:2A:AF:1A:DA:C1:29:63:0B:82:70:3F:95:CE:82
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c7:7b:96:27:2c:d9:92:9c:bd:1d:59:3a:63:cb:ba:e1:d8:
0c:b6:6c:bc:86:97:f2:d9:85:79:82:d0:ef:3c:27:82:54:ab:
e1:4f:18:5a:b3:f9:60:21:ec:29:3c:42:25:8f:06:30:52:7a:
95:eb:42:27:88:72:fc:4d:bc:9f:cd:1d:e4:8f:3e:e2:5c:15:
f5:61:e2:c9:d9:f2:cd:86:5e:93:8a:24:78:6b:1c:07:73:60:
62:6b:4a:c4:a8:14:8a:6b:3b:12:b7:78:d5:2b:e9:fb:15:c4:
41:04:31:e8:34:c6:d6:23:c6:d9:9b:da:ae:53:7e:c9:19:bb:
20:0c:99:d6:da:7d:90:84:12:c0:3a:e8:74:a1:6b:59:18:c4:
65:5a:a2:bb:e4:1c:d6:a7:1b:27:31:81:39:aa:64:82:61:41:
ef:0e:f3:fb:52:32:b3:21:16:b3:70:40:9d:1d:be:79:ba:9f:
2e:2f:fa:25:e0:90:9e:ac:f6:67:08:70:10:2d:5b:13:98:1b:
fc:b6:af:92:1f:4b:43:eb:48:06:cc:20:d0:37:13:1b:ad:58:
64:e0:f5:63:8d:ae:fc:e3:2f:17:65:08:05:2c:b8:c8:56:35:
a4:b0:a1:13:4d:3f:24:7e:bb:6e:96:aa:99:6b:a6:0e:f6:68:
5e:bb:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:42 2025 by rpki-client