Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: pCkrKeSX9uDCQoKo3mtlq7q3/kQVWwm8zLWdLbsnRzU=
Subject key identifier: B7:50:07:33:BC:EB:92:90:7C:BB:1D:A5:F4:BB:B7:8D:43:1A:27:6B
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 0198D404AC8807BA48371FEE6022E69D6AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0AC3
Signing time: Fri 22 Aug 2025 23:02:12 +0000
Manifest this update: Fri 22 Aug 2025 23:02:12 +0000
Manifest next update: Sat 23 Aug 2025 23:02:12 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: p7r7euV6m6NDRBJBdcxdFYt1u3SO64oUumHDPT9oKLg=)
2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=)
3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:ac:88:07:ba:48:37:1f:ee:60:22:e6:9d:6a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Aug 22 23:02:12 2025 GMT
Not After : Aug 23 23:02:12 2025 GMT
Subject: CN=b7500733bceb92907cbb1da5f4bbb78d431a276b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:32:a7:0a:3c:b5:93:9d:de:9f:93:d3:46:
b7:0a:7d:bd:74:b6:27:aa:1a:84:29:3d:3c:5e:3d:
87:8a:32:d4:bc:12:4b:2e:5d:20:1b:1d:dc:c1:04:
8c:f2:28:49:0d:f5:f1:61:94:d5:84:71:9d:ad:46:
ec:a4:ef:95:14:83:91:a7:01:70:18:47:71:49:e4:
24:6d:c1:cd:8d:42:95:cb:81:64:c6:9c:c1:2b:16:
28:52:50:bf:58:3c:9d:d4:18:7c:02:9b:41:81:b0:
ea:4e:1c:d7:e8:05:73:2d:ed:4d:b2:77:97:8f:82:
d5:d9:3a:b8:af:2d:b2:f9:cf:50:0c:c6:47:81:37:
b6:08:a1:e6:be:91:b1:19:19:cb:ab:76:4a:9c:f1:
d8:03:c4:79:7f:09:8d:2b:af:82:ad:6c:29:06:17:
ee:6d:d5:50:ab:70:31:41:c3:2e:3a:b5:91:d0:41:
6e:08:95:fd:5a:d0:20:bf:c1:4f:6c:06:cf:f0:0c:
79:df:64:3c:48:cc:4b:19:7e:2b:29:94:55:4e:34:
f9:e3:0d:9f:b7:27:85:50:ea:ba:24:b5:62:a4:ac:
f7:53:ae:05:5e:90:b8:40:3d:c9:15:e5:bd:a7:fd:
f5:d3:88:16:81:24:5e:bf:28:8f:da:23:16:b4:a7:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:50:07:33:BC:EB:92:90:7C:BB:1D:A5:F4:BB:B7:8D:43:1A:27:6B
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a5:da:2e:bc:b7:1a:8f:09:e1:a2:29:84:0a:a5:5d:eb:7f:
90:2a:4d:f9:91:d4:07:63:18:1b:80:16:47:7e:b6:71:82:3e:
5f:64:88:36:d4:65:3f:2f:cd:93:40:69:26:d9:37:79:e1:4f:
bf:aa:cf:0d:4c:85:6f:a5:b9:b7:b3:99:07:62:39:5f:bb:f9:
55:6a:83:26:34:33:81:50:a2:30:f0:37:c3:6a:71:1b:0d:f2:
4d:b8:ac:b4:52:5a:95:05:e4:a4:67:0c:28:9e:6b:51:d7:01:
6d:a6:0f:a5:0b:a2:7c:97:46:ad:c4:9f:c3:4d:38:91:28:0d:
02:37:5f:ba:d6:71:fb:68:21:7a:e9:39:50:db:6c:20:e4:98:
a2:e5:0b:a1:dc:a2:0d:09:1e:12:47:46:0e:de:8f:fb:a2:8f:
98:27:6c:97:dd:72:b3:14:d2:9e:2d:2d:5b:8e:7d:b6:51:04:
36:a4:d9:2b:c0:5b:30:cb:4a:48:1a:c0:fd:32:f3:e9:3a:b4:
b8:9a:be:a3:77:19:75:3c:8b:d1:a6:25:86:a1:e3:61:4a:50:
5d:0f:6b:41:f5:ed:64:5e:b1:76:50:31:6b:aa:39:8d:7e:7e:
0b:23:dd:36:df:57:12:17:dd:42:ea:7a:43:cb:59:03:fa:30:
62:ba:7c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:18 2025 by rpki-client