Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: l+xs3o0m+5PfAbGzCm1QaJ6xPvwwDxjNNO1TU231K4w=
Subject key identifier: E9:2C:0D:D6:DB:C3:45:78:C0:D7:78:06:9C:56:14:69:A4:F1:32:A0
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 0198D583F10E1D9B4DBF6F3A0BC1646B29AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:50 +0000
Manifest this update: Sat 23 Aug 2025 06:00:50 +0000
Manifest next update: Sun 24 Aug 2025 06:00:50 +0000
Files and hashes: 1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: apfiAi6zGtdtA5XGiKVgSQdV4n5Yxw2ChoMWT1Rk/H8=)
2: LF_3HwZmRrCki2d-FP5TfnY-Yfo.roa (hash: OqUUHUSkyKdGpgaBU1hHW7IYtyTJfajGz9ID3t644ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f1:0e:1d:9b:4d:bf:6f:3a:0b:c1:64:6b:29:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Aug 23 06:00:50 2025 GMT
Not After : Aug 24 06:00:50 2025 GMT
Subject: CN=e92c0dd6dbc34578c0d778069c561469a4f132a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:1d:a0:b3:61:3d:b1:28:66:70:8a:a4:80:
47:ef:87:e6:5d:79:6e:c7:be:83:54:af:5f:69:8c:
78:1e:19:cc:89:7d:14:0a:41:ff:43:69:6c:92:64:
b3:05:d1:7a:48:a9:63:c6:78:d0:82:9d:a0:bc:b8:
30:7f:37:41:1e:c1:5f:48:83:6a:a7:e5:59:2e:f5:
af:6e:0d:9d:44:da:72:53:c4:ca:3e:7a:d1:cc:9a:
92:4e:7e:fe:5d:8c:f2:51:8c:7c:09:4c:c2:97:53:
5f:c1:c0:5e:d6:7f:1e:63:e6:aa:da:fe:7c:2b:db:
70:9a:97:19:b2:df:04:8b:9e:7b:6d:16:64:fc:56:
77:6b:22:3e:0a:18:1c:64:f3:10:aa:c4:d1:72:03:
88:16:30:fe:13:60:28:1c:68:3a:c3:6e:13:73:e5:
cf:b3:3f:5b:dd:0d:8b:ef:55:74:52:a5:06:2e:be:
f3:82:9d:14:e2:23:d7:59:50:9e:fe:98:f8:e7:87:
4f:26:d8:21:82:0e:86:65:e0:e4:88:6a:56:5d:85:
aa:77:22:cd:01:57:f1:d1:56:e6:9b:dc:a2:ea:ef:
8a:9f:25:f0:5d:d0:6d:99:66:33:2e:9a:8d:a7:17:
f2:bc:f5:00:e3:fb:d3:99:c1:12:ee:e8:c8:36:e8:
72:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2C:0D:D6:DB:C3:45:78:C0:D7:78:06:9C:56:14:69:A4:F1:32:A0
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d3:25:7d:ad:11:c6:75:9e:ab:66:52:d8:65:da:b8:15:8f:
57:28:21:86:ea:6c:18:55:8d:03:49:bb:73:8f:76:05:7a:2c:
55:a8:3d:db:3f:b4:eb:0f:cd:06:29:d6:7c:78:75:a5:af:a6:
78:3b:dc:b1:04:59:a7:8d:8c:78:d3:02:e6:a4:82:65:67:78:
d6:f1:b0:ae:68:4d:1b:88:04:98:93:12:c3:2a:6d:ba:51:d6:
ae:a2:4f:88:46:28:99:65:26:ed:42:7a:01:d1:1f:58:bf:d5:
04:1c:6e:d8:d6:7f:67:9a:b5:82:8c:02:03:35:16:d1:28:2d:
2e:71:0d:72:44:a7:8f:38:0c:ed:60:8b:0a:c6:71:e9:b3:67:
90:41:63:d6:f2:c1:f9:31:83:fc:a0:4d:9d:8a:be:55:54:b4:
f0:a0:13:07:72:a3:4a:9c:d3:66:84:8d:c3:a2:6e:7a:95:c0:
23:ca:0f:1c:48:3b:a6:05:70:06:fd:03:56:32:6a:fa:15:3d:
7c:31:0c:3e:1e:37:f8:18:f1:65:01:08:58:88:4a:38:8e:a5:
9f:4b:76:07:38:64:b2:54:2b:ae:11:dd:73:6f:24:6c:32:4e:
83:44:a7:f1:a5:0e:4a:bf:9a:3d:6d:ef:73:b6:be:df:fb:ba:
9e:cf:ed:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:29 2025 by rpki-client