Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier: nsdccNiAewrnep4Jy6/ZdCMBEXMAIeiJWExsi4zUWx4=
Subject key identifier: 40:7A:5B:A3:2C:7A:EF:F7:D5:58:33:9F:D8:89:D3:E8:26:68:3D:53
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 0198D5BBA7F2AA6E8F342426A6741CDBDC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: DzXtSOhVmVfcARFltedJne6XGzFqx5L+oz+O9djXs4s=)
2: FAJKZDo6nLNipexAJT8L9FAGXrE.roa (hash: NVIidy7uobZX7hs2QRQ052g+pZeZGSMOgKQJmZ0nDuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a7:f2:aa:6e:8f:34:24:26:a6:74:1c:db:dc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=407a5ba32c7aeff7d558339fd889d3e826683d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:51:a6:c4:1c:57:c1:27:81:60:b2:ae:9d:
e6:f5:4c:cc:93:6e:4e:c2:dc:3b:f8:b4:d7:2e:d4:
6a:41:3c:53:45:85:32:5b:bf:ce:6b:39:e4:5a:fc:
ce:01:cc:ef:15:8b:2f:68:66:79:43:68:8b:54:ab:
60:8f:c1:a0:d1:08:cf:a7:dd:a2:cc:96:be:8b:85:
f9:36:43:cd:01:2e:f1:08:58:50:97:d7:6f:29:e3:
b8:fb:f3:d0:5b:79:98:53:63:f4:bd:35:88:a1:05:
eb:5b:09:9b:09:bc:c1:f3:ae:32:9b:0e:47:bd:da:
27:b4:d9:04:37:f1:31:94:b4:ef:28:b6:e3:96:25:
11:d1:2f:50:6b:18:78:ab:44:99:07:fa:0d:63:62:
0c:e2:4c:93:24:bf:c3:45:0a:d8:7b:3e:7f:ac:c5:
fd:de:46:99:18:1c:19:e7:0f:ec:10:8e:86:0e:b1:
40:83:30:5c:b3:20:71:6d:8a:2e:e1:9f:45:a5:8c:
c9:af:19:d2:ef:ee:aa:07:b6:eb:e8:ff:95:3f:3a:
73:2b:70:a5:b5:8d:cd:8b:77:30:69:c4:53:c5:0f:
05:02:a6:ef:eb:e6:08:fa:1d:d8:03:f9:fe:07:c2:
2d:17:9f:54:80:ea:0d:e1:6a:e8:00:c5:33:4c:24:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7A:5B:A3:2C:7A:EF:F7:D5:58:33:9F:D8:89:D3:E8:26:68:3D:53
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:00:5e:57:ad:00:31:5a:48:f2:40:bd:37:4e:ae:44:50:c4:
da:e8:bc:72:c0:50:6a:b2:98:61:15:1f:37:43:91:eb:7f:7f:
67:05:a9:3c:b9:0a:e1:5d:64:5d:7e:c6:06:91:1b:b2:a9:7e:
bc:e4:d0:bf:aa:9d:c9:12:0f:ae:5b:5b:1e:4f:2f:5f:26:87:
7e:ce:33:d9:a5:30:5d:77:df:28:b8:59:1e:87:fa:05:58:d9:
ad:c4:00:78:bb:6e:1c:0e:91:19:96:98:c4:47:21:e9:fd:22:
b2:db:7b:27:ba:ff:cd:98:0e:1d:ca:05:87:71:df:f3:d2:c8:
2e:8a:c0:f4:be:aa:cc:09:9c:de:aa:52:49:aa:6e:cf:65:1a:
ff:e7:0b:d0:3e:f7:55:24:ec:fb:ce:8b:1a:28:5b:a9:7d:bd:
42:19:69:3f:27:ea:8d:6b:b3:94:67:5f:90:2a:e1:b4:32:61:
d5:6c:48:3e:71:a4:72:62:2e:10:65:29:74:8e:7c:c1:d1:e7:
3d:5d:44:bf:68:dc:0f:29:3a:84:33:6b:dc:bb:97:77:57:53:
84:24:62:c2:ae:84:1e:01:0a:4b:6a:1b:02:30:6d:b6:c5:cc:
86:e7:72:72:e0:73:1d:67:c1:d7:12:38:08:b7:d2:71:da:7d:
eb:34:03:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:43 2025 by rpki-client