Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier: pUdaVinlVSZPTNy06e7GT96v3bfTY3Cv+3QaxjXU4BI=
Subject key identifier: E5:19:A2:95:2E:F2:03:E0:5B:26:9A:0F:43:15:62:B0:14:9E:BC:8A
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial: 0198D7063BF519DCC7EB3B0600863B7D0896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number: 1151
Signing time: Sat 23 Aug 2025 13:02:46 +0000
Manifest this update: Sat 23 Aug 2025 13:02:46 +0000
Manifest next update: Sun 24 Aug 2025 13:02:46 +0000
Files and hashes: 1: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: glrN6KITIwIgD3YaBOwCvuFImBCLyoPbq7S2gjCvfFM=)
2: DaSMaWZYfnj6ceinzYPrOhJJgQA.roa (hash: tLMLMu2mXxzV//rWf7p3b0LjE6TE93dgy9UoXP39ok8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:3b:f5:19:dc:c7:eb:3b:06:00:86:3b:7d:08:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Validity
Not Before: Aug 23 13:02:46 2025 GMT
Not After : Aug 24 13:02:46 2025 GMT
Subject: CN=e519a2952ef203e05b269a0f431562b0149ebc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2b:de:45:65:b0:e8:dc:9b:ba:5e:fc:85:ee:
c2:1a:3b:0a:da:0d:29:b5:57:1d:80:4c:b5:eb:80:
a4:a4:12:72:a9:33:23:8b:4c:99:f4:3c:8c:9f:84:
89:30:16:ca:be:44:fd:48:86:5d:80:e6:a2:e0:b3:
70:05:0e:80:9e:1e:b3:89:35:68:da:99:4c:27:ac:
e7:52:07:54:66:77:bc:94:30:6a:c6:57:1e:c0:8e:
92:93:f6:58:2b:51:a5:79:e7:d9:3c:08:1d:aa:a9:
05:ca:86:0e:e5:6a:10:80:f1:b5:a4:5d:a0:7f:dd:
af:8e:92:40:83:03:4d:0b:30:ea:27:50:a7:39:f4:
37:97:82:09:8c:59:74:b1:77:1a:62:ec:5a:e4:21:
21:20:f6:84:2c:f1:ea:74:d8:12:4e:e4:11:31:fd:
33:14:f3:3d:40:a1:39:cd:6c:9c:df:fc:4f:a8:b6:
53:77:5d:ba:57:ce:0f:1b:05:b7:51:e3:34:07:8d:
6b:e1:62:f5:0e:8f:20:28:95:11:92:51:cf:3c:7c:
53:d9:39:8e:88:b9:43:2d:3d:65:42:b7:29:dd:8c:
0e:aa:d3:77:5e:fc:0b:9e:93:70:c2:a3:82:98:7f:
a9:d2:cd:7a:cb:f9:e4:0a:72:20:bb:98:4b:2f:a7:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:19:A2:95:2E:F2:03:E0:5B:26:9A:0F:43:15:62:B0:14:9E:BC:8A
X509v3 Authority Key Identifier:
keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4a:6c:3f:4b:8a:65:f6:8c:01:6d:db:30:cf:a0:94:99:6e:
f6:e8:3a:33:3d:43:06:af:ed:fd:de:15:3d:e1:69:65:b4:6a:
9f:8e:1f:06:be:18:96:2b:ec:47:65:83:b1:36:1b:26:72:3d:
95:ab:62:70:8b:64:83:b3:a0:6e:32:22:28:4c:2e:27:60:02:
84:30:c8:b3:b0:c4:87:4e:bd:32:8d:a2:b0:b6:15:b0:96:4e:
a4:90:81:18:a1:b6:db:d1:03:6d:a7:76:22:7e:55:ac:cc:75:
6a:8f:c9:ce:3f:36:8b:49:bd:c1:8a:eb:0f:d7:df:ab:06:08:
9a:00:7a:bb:a5:d1:30:88:26:74:b6:dd:1e:f9:ae:e8:ee:38:
22:f8:85:04:67:d1:5e:73:30:6d:30:31:d5:ec:d8:fb:59:6a:
f8:cf:af:5a:22:5f:30:42:56:cc:56:4d:f4:05:ab:78:4c:04:
9b:76:21:e2:75:bc:6b:ed:7b:c9:43:74:bc:8d:67:0d:fd:dc:
a4:96:73:ec:03:d8:71:2d:2c:41:d9:99:a6:cd:1b:76:e9:1d:
7f:b7:83:2f:32:67:3b:46:ae:c7:10:bb:dd:18:28:22:11:06:
61:dd:26:83:f5:20:37:39:53:02:85:3b:18:64:e9:3e:02:06:
e3:8e:6e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:55 2025 by rpki-client