Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json)
Hash identifier: 5MrTodCXCOhD6ak6tSBDqfpW5H3djqcOWkz1pfjxOqs=
Subject key identifier: 79:AA:43:96:E6:6C:C6:AF:B8:D7:6C:B4:17:60:6C:9A:FB:78:0F:B9
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 0198D6CDC55E105C786CB82C2D7C324C4D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
Manifest number: 07
Signing time: Sat 23 Aug 2025 12:01:05 +0000
Manifest this update: Sat 23 Aug 2025 12:01:05 +0000
Manifest next update: Sun 24 Aug 2025 12:01:05 +0000
Files and hashes: 1: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: NNLcoLMQoZn/YIFJPB5XsD9D3c+Xu327MYyR149pNO8=)
2: TDs3SCHkSwxi2Xb9E5-5lxldSWA.roa (hash: UmMaqKmCtjb0oErlYVHbczcMBZ32+2r0z5hmDOfKCCM=)
3: kRIa94MWYWrUOVwjc9XA73SAMOA.roa (hash: CLFC01EOAmxOj0g9Emkl9wa15kGO2yyt+4qXoqbGCJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:c5:5e:10:5c:78:6c:b8:2c:2d:7c:32:4c:4d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Aug 23 12:01:05 2025 GMT
Not After : Aug 24 12:01:05 2025 GMT
Subject: CN=79aa4396e66cc6afb8d76cb417606c9afb780fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:f9:e2:6e:c2:ba:9f:ff:9b:60:9f:a1:1e:
b6:df:d4:63:e1:10:a0:33:af:a3:ff:96:11:b7:14:
55:cb:22:d6:50:8f:39:64:eb:a9:da:b2:56:c5:a0:
01:89:3f:78:b6:e1:b2:5b:e2:8d:89:52:ff:c1:bc:
32:88:66:48:68:0f:6d:97:1c:4d:44:11:ed:e5:20:
17:5f:05:85:d2:c6:71:13:fd:0c:9b:c8:86:04:1c:
bf:40:5a:27:f0:fc:a3:e6:e5:c3:d3:29:83:43:6a:
22:20:2f:ee:cc:58:a0:17:f3:33:ba:98:5b:86:12:
5c:01:a8:86:13:60:c0:32:aa:b5:2d:4d:3b:fa:0b:
1d:5f:16:2d:2e:8f:bd:51:dc:96:26:4f:8d:77:58:
9a:92:31:71:43:a4:be:24:4c:5b:95:1e:ba:30:bb:
36:a5:7d:46:45:46:1d:88:0b:bf:6d:29:cc:0e:cc:
ff:2e:18:07:40:a3:ca:ce:69:6a:f6:37:11:95:60:
c6:6b:5d:1e:d5:8e:d0:3c:a8:04:6b:c4:bd:dc:d0:
40:8f:df:5f:f0:ab:49:c1:cd:59:4f:db:71:5e:f2:
89:dd:f1:e3:ad:ef:24:95:08:89:f5:5e:1d:99:2e:
8c:c7:5e:a6:5f:39:5d:05:32:a0:fb:37:8a:1e:0e:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AA:43:96:E6:6C:C6:AF:B8:D7:6C:B4:17:60:6C:9A:FB:78:0F:B9
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:60:a3:c2:d0:1c:a1:82:52:62:7e:4e:1c:f6:8f:20:16:e9:
8b:a4:b0:cf:bd:19:22:ff:87:04:bc:33:59:74:a0:9e:54:b5:
39:6f:27:e3:0c:64:ef:9c:e2:4c:34:29:da:41:31:5b:b0:ea:
eb:5d:10:91:86:99:10:00:d9:81:b0:a3:42:53:18:9e:43:43:
e3:e6:86:08:b5:c9:e0:1f:49:b9:ab:56:e7:64:9d:02:d3:4c:
0a:5e:fc:60:35:8f:70:36:a9:f2:a5:2c:04:3e:e5:0a:a3:6d:
99:e5:d5:44:35:5c:2d:79:67:98:d4:3e:e8:64:3e:23:4d:93:
c1:90:66:11:97:38:9e:b6:c3:36:c3:ec:2f:74:dc:e3:73:6b:
e9:4a:da:fa:19:8d:cd:4f:c6:ad:f2:7c:fb:73:b4:0d:4f:35:
a6:14:a3:78:ca:b1:da:00:a1:6d:f6:87:75:3b:52:46:03:43:
68:09:b6:54:59:97:09:f8:7c:9b:27:79:62:2b:46:36:96:d5:
b6:51:7b:64:cb:51:8d:9c:65:e7:76:33:a3:02:c8:0e:76:f4:
3b:53:c2:d3:cb:f5:1c:6e:c3:42:9d:7d:5d:08:76:04:89:17:
54:33:fe:e5:65:ab:72:90:49:f4:78:6c:cb:c0:30:b0:4b:f7:
ea:22:11:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:01:41 2025 by rpki-client