Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
File: n78C8E7EMIy1tgeL0GoXywDYM2k.mft (raw, json)
Hash identifier: NrKesTf8k5XYt81VW+JLZED3E15Ul+0V2F0W1KZ88fQ=
Subject key identifier: 99:23:82:2A:3A:92:A7:52:8C:E4:7C:F5:8C:EB:02:E0:72:DE:1A:C0
Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
Certificate issuer: /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Certificate serial: 0198D69850ACED6141E764D98C52F080C22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
Manifest number: D9
Signing time: Sat 23 Aug 2025 11:02:43 +0000
Manifest this update: Sat 23 Aug 2025 11:02:43 +0000
Manifest next update: Sun 24 Aug 2025 11:02:43 +0000
Files and hashes: 1: lB6tM26XvybAjC_i9gyukbY90Gs.roa (hash: QCUB0nbnI7vfbQcfu12QO8f17dboTNQ2oQD6KvaVOOo=)
2: n78C8E7EMIy1tgeL0GoXywDYM2k.crl (hash: 2jkr6zps895YI/sb70pKVXFz9XXMpbScVRilyMoY8sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:50:ac:ed:61:41:e7:64:d9:8c:52:f0:80:c2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Validity
Not Before: Aug 23 11:02:43 2025 GMT
Not After : Aug 24 11:02:43 2025 GMT
Subject: CN=9923822a3a92a7528ce47cf58ceb02e072de1ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:0c:e9:07:fd:cc:8b:74:dd:5b:34:a6:d4:
35:ba:89:e8:7c:da:12:8b:6c:b8:bf:50:0b:87:e0:
f2:36:2e:e3:80:c9:f5:2e:8d:54:c3:9b:d1:f1:d5:
1b:85:57:d5:96:13:b4:4b:b1:f9:a7:07:d9:8b:72:
23:05:c0:98:66:f5:06:dc:00:72:11:22:55:40:4a:
80:27:e8:cb:ab:68:98:e4:5b:fb:d5:91:e9:e4:4b:
c8:41:b0:94:8e:9f:b3:48:bd:91:c2:f0:09:d1:14:
c1:ba:f6:42:3b:ef:73:40:39:28:2e:09:14:b3:02:
ec:89:f8:b8:8a:dc:81:07:17:7b:ae:79:ac:d7:d9:
28:ed:b1:cd:36:94:b7:a1:36:4e:71:7c:7e:c7:f6:
a1:e8:0d:ff:e0:e9:e6:3d:a7:76:a2:fd:1e:a1:25:
16:66:ee:9d:23:54:20:56:c2:ba:45:f6:67:ee:6d:
f5:60:38:2e:9d:f0:de:39:05:be:61:60:5e:28:5b:
66:85:2b:94:8d:cb:18:a2:a5:2c:73:cb:ab:e3:0b:
11:86:90:70:55:0e:f1:20:0d:22:fc:0c:25:9b:6c:
3c:c5:33:1a:91:d0:f1:76:4e:bc:15:71:42:30:7b:
69:40:e8:bc:b9:b6:7e:47:cb:29:bb:f5:a2:55:4d:
90:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:23:82:2A:3A:92:A7:52:8C:E4:7C:F5:8C:EB:02:E0:72:DE:1A:C0
X509v3 Authority Key Identifier:
keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:b2:9b:c3:28:62:18:05:61:93:17:0c:70:51:87:d3:bd:1e:
b4:c3:e4:25:8f:bc:90:75:a9:e3:f1:3c:b6:9a:11:26:66:9c:
64:ec:31:3e:b4:7b:43:e5:46:3a:61:7f:d8:3d:a8:77:33:53:
67:29:50:3d:09:91:3c:e6:f4:f7:e3:2b:cc:1b:42:aa:41:89:
e7:6c:47:ed:b8:f5:c3:88:82:20:53:0e:36:69:56:fd:46:e5:
e9:e9:b3:da:60:f6:aa:d8:83:1f:08:9c:f3:2a:4d:86:ff:52:
4d:85:7d:f4:b5:c0:86:ae:e0:03:a9:c4:1e:7c:ab:1b:43:73:
c8:30:c1:5a:70:d8:23:04:3b:ca:9d:bb:dc:ef:e3:50:d7:02:
17:45:7e:d7:9c:42:91:2c:87:f5:c3:16:2a:38:e9:c8:b2:a5:
26:f4:63:38:16:33:eb:b0:08:d2:f0:ae:af:a8:d2:d0:cb:4e:
97:94:84:9b:dd:bf:c4:e4:47:aa:8b:7f:62:5a:f8:43:3a:67:
be:d7:f9:e2:cf:a4:9a:b1:94:4c:30:8b:ca:68:50:b0:45:42:
5d:b3:8d:69:13:0e:09:42:c1:78:b8:c7:55:07:79:7f:18:97:
e3:1a:c8:dc:75:74:66:ed:a7:17:ab:ad:26:c7:01:3f:19:d0:
6b:5a:5c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:27 2025 by rpki-client