Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: 2GI9+zAFdurRRNJmtIMfgD/HUT7iaE3eaHNByaMZ+bk=
Subject key identifier: F1:5D:D0:66:24:AD:26:18:7B:FA:47:51:8D:27:AF:27:7E:29:12:A7
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 0198D6CD02CDE54EFF8820CCFA5736A3850F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 12:00:16 +0000
Manifest this update: Sat 23 Aug 2025 12:00:16 +0000
Manifest next update: Sun 24 Aug 2025 12:00:16 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: jmmRHfTAdELpZjaZlnsNfDQzHNbMZ7WAP6Beg8WWxdg=)
2: FNrF4gJ9GeSqn1QNR00c9Q4ygYg.roa (hash: 2ncm1gP0ao8l2RvVLkDskRllvyDwCE2AZXVvFGp+UKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:02:cd:e5:4e:ff:88:20:cc:fa:57:36:a3:85:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Aug 23 12:00:16 2025 GMT
Not After : Aug 24 12:00:16 2025 GMT
Subject: CN=f15dd06624ad26187bfa47518d27af277e2912a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:90:0d:55:c4:f6:01:26:04:9d:c7:24:26:
e9:e6:9b:94:9d:85:43:35:d9:5e:ca:39:b0:32:9a:
d1:72:55:0f:84:c3:10:09:38:eb:b6:f1:78:33:e8:
2a:63:9b:64:15:69:f9:fd:2f:b6:40:58:ba:7a:dd:
ad:d6:c5:51:d0:fc:7b:e9:10:8e:f0:3d:1e:09:c4:
f1:5e:c8:21:6c:c8:a3:32:5c:4c:fb:f7:f3:d8:d2:
99:aa:7a:1e:08:de:fb:0a:2a:40:f3:5f:6f:82:cf:
d9:7e:d9:8b:e3:db:a4:6b:9a:0c:5b:99:17:de:07:
35:26:24:86:66:f7:4c:b9:89:8c:96:b9:0d:8d:1f:
03:a7:23:59:f7:2f:71:fe:80:b6:d0:c0:c7:37:ec:
d2:b6:2d:2e:ce:0f:41:1f:11:c7:d5:51:42:42:c2:
ad:d8:93:f7:4a:24:38:92:f4:12:9f:9d:96:20:c9:
8b:7a:59:ae:10:36:b1:e2:1a:5f:b7:22:fc:af:a4:
a6:68:76:08:1b:1e:19:7a:40:cd:88:6f:17:f8:a4:
24:6e:0b:91:ea:7f:a3:dd:fd:4b:e4:56:c4:01:a6:
df:2e:35:4c:c4:b8:9f:0f:62:13:fb:b5:41:64:af:
c1:86:0e:42:4c:70:fd:b9:b9:0f:3d:27:bc:16:40:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5D:D0:66:24:AD:26:18:7B:FA:47:51:8D:27:AF:27:7E:29:12:A7
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4b:13:57:62:ed:bc:41:f6:d0:59:56:3e:e1:1f:ec:03:c1:
14:04:cd:04:27:17:46:d7:6c:fc:b6:21:15:fb:37:cf:ba:7f:
e3:a2:64:8f:c0:50:e1:4d:9b:7c:31:08:b3:3f:e7:9d:0b:ee:
47:48:a7:22:63:91:ad:45:c1:b5:78:40:aa:9d:99:a9:7c:24:
78:86:e7:6e:5f:54:14:d9:68:e9:b1:fc:59:27:57:c0:4e:79:
3d:34:17:5b:8e:db:c3:66:fd:22:c0:4e:e8:42:79:50:28:f2:
1d:51:65:f0:2a:c7:67:8a:2c:8d:c0:4b:87:f2:66:b2:0f:9f:
1d:f3:7c:bb:56:06:24:4e:63:26:52:8c:2e:96:4e:20:f6:9b:
af:47:e8:d0:80:54:fb:d2:74:9b:7a:0f:6d:46:29:bf:33:5e:
b7:15:c1:7d:1e:d5:d6:22:80:3b:20:6e:73:9c:79:1c:0a:45:
af:a7:39:f6:36:97:63:14:d0:82:d2:49:8e:b9:20:63:02:cb:
0d:96:ce:23:cd:70:f0:22:ac:57:c4:bd:a0:b3:d1:73:c7:35:
f5:a4:ef:be:c8:63:d7:20:d1:6d:b3:3d:36:c1:f0:1b:25:da:
12:f8:77:d1:a4:2d:19:80:b0:14:85:0e:58:bd:4d:b1:f4:d3:
e9:25:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:53 2025 by rpki-client