Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: Pelilql/Qt8guLImqlwRygK0azoKxGQjMd8yywnQ3nQ=
Subject key identifier: 9C:93:A9:9A:EF:AD:EA:E9:ED:66:C1:F0:76:A5:8A:C1:00:FD:F5:CC
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 0198D661056B2F435EDEAD1593D389CE3261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 10:02:19 +0000
Manifest this update: Sat 23 Aug 2025 10:02:19 +0000
Manifest next update: Sun 24 Aug 2025 10:02:19 +0000
Files and hashes: 1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: buNz8gDf3lC2c5Y107PPMTPlzYo3bskU9aV4r37XxYg=)
2: opYZOi4k9YDcS_3foMnJJa-4gCI.roa (hash: VbpgC06Lnc7NWswjuIad3/ZduRJ+GtOZh31gorgG7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:05:6b:2f:43:5e:de:ad:15:93:d3:89:ce:32:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Aug 23 10:02:19 2025 GMT
Not After : Aug 24 10:02:19 2025 GMT
Subject: CN=9c93a99aefadeae9ed66c1f076a58ac100fdf5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:37:9e:9e:ed:5b:45:84:9a:18:7f:3f:79:
ba:22:9e:9c:42:7c:3b:f2:84:0a:1c:70:e9:ba:e8:
44:35:7f:6d:b7:ea:e4:b8:23:1a:26:25:d0:45:d9:
af:7f:97:69:3f:00:76:cf:2c:9a:c8:6c:4c:a1:83:
be:93:b3:7b:62:c3:24:ac:9f:77:cc:2d:c1:f8:43:
10:c6:a0:69:4b:fe:72:fc:e4:4c:8b:51:1f:52:1b:
0a:2e:a3:4b:7a:ef:6d:06:81:bf:8d:ba:0a:b6:58:
ad:a6:3d:4c:57:c7:77:e2:ef:f9:65:51:4e:9d:98:
a8:d3:c8:18:38:d5:ea:ed:10:8e:10:da:49:ea:61:
3b:61:23:73:35:83:56:c8:3c:73:48:cf:40:95:95:
c6:b7:0a:96:52:a7:2f:01:f2:b1:c3:58:f4:0a:89:
d5:c3:bd:fb:94:9d:cf:84:44:f9:92:19:f5:83:70:
00:f7:af:63:63:27:1d:4d:f1:19:a9:b3:11:ff:ab:
a0:b5:76:e9:3c:a5:94:b5:53:30:54:49:f7:08:1f:
3f:d3:d7:4b:36:92:45:7c:2d:97:31:50:9f:9f:90:
24:81:06:15:f6:3d:91:76:b5:38:60:c0:79:11:2a:
1d:cf:e0:39:eb:e1:fa:2c:01:52:e2:f6:11:7c:b6:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:93:A9:9A:EF:AD:EA:E9:ED:66:C1:F0:76:A5:8A:C1:00:FD:F5:CC
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:6a:ba:95:d8:4b:cb:c2:ce:51:42:f8:9d:e6:ff:07:47:73:
86:48:97:04:68:49:c5:8b:05:d8:8e:08:68:1a:fd:ec:d1:74:
c1:b2:53:54:c1:c8:9b:57:e5:26:8a:17:12:a2:c5:cb:6f:4d:
fa:46:f7:3b:75:0b:81:d1:1d:fe:4e:03:b5:f9:ad:c5:40:04:
02:74:d2:8a:7b:16:43:51:4c:82:60:8c:6a:e1:85:8b:a3:c7:
84:fb:70:41:f4:95:eb:a5:45:92:a8:77:98:a0:77:fe:10:d6:
39:04:b4:33:ed:cb:c0:6c:c8:d8:c0:e3:33:89:08:24:55:8d:
ab:26:82:6b:52:05:ef:04:3e:73:ec:2d:e3:3f:24:b5:33:a3:
df:a0:3b:87:48:29:38:ab:8a:13:ee:eb:5b:a6:4b:b8:2e:81:
5c:91:0b:b6:8f:db:45:1a:35:78:af:a2:76:a2:d3:98:21:24:
dc:35:1c:14:18:2d:dd:b2:55:5f:ad:d9:35:84:40:63:e7:d2:
57:73:41:05:b1:04:48:02:95:d9:f0:98:3e:e8:4b:bf:6a:a7:
bd:c7:e3:f3:d0:43:93:e1:bc:54:7d:cf:27:b1:7c:f7:9b:fd:
f9:0a:de:3f:3c:97:ea:b9:ce:f2:85:63:74:df:e9:38:41:c3:
7b:c2:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:16 2025 by rpki-client