Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: Mb4yXy2totcxsIM8am1CHkqXyQVLJum2LRxpk3kpcdA=
Subject key identifier: B9:D4:B4:6E:07:AF:77:48:D6:CE:E3:E4:40:54:4A:43:1B:5C:83:64
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 0198D62983379E977AC09F2D096180D09277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 05C1
Signing time: Sat 23 Aug 2025 09:01:41 +0000
Manifest this update: Sat 23 Aug 2025 09:01:41 +0000
Manifest next update: Sun 24 Aug 2025 09:01:41 +0000
Files and hashes: 1: 7DAxFJT5VyzcSgHTnJmDdUKxQNw.roa (hash: 37ijJqs68GCjjpypVGN9wvpiuMLosaLv3KKoBIsmUtU=)
2: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: y0FQ8eJjTLy2dxBHrSFqMj4rf7FCF08vTe3p/vs1wSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:83:37:9e:97:7a:c0:9f:2d:09:61:80:d0:92:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Aug 23 09:01:41 2025 GMT
Not After : Aug 24 09:01:41 2025 GMT
Subject: CN=b9d4b46e07af7748d6cee3e440544a431b5c8364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:84:1b:bc:d4:af:0f:97:36:06:df:51:65:
ff:82:e7:cf:26:b5:53:54:2e:bd:6a:c5:89:51:66:
59:c2:bc:2d:34:83:91:87:ac:02:65:a2:eb:ca:5e:
08:0a:93:6b:64:04:83:49:32:12:5d:ee:94:2d:50:
5c:1e:7d:69:3c:88:4f:83:3f:4f:43:56:d4:b2:78:
23:59:9e:6a:ed:fb:65:a3:23:25:ab:9f:3f:c8:a1:
8e:a4:03:79:34:34:f3:1e:ce:11:d0:33:a7:68:ce:
cb:4a:9d:11:8c:ab:7b:e4:30:48:ce:25:7e:ce:69:
14:57:b7:0e:3c:11:a9:97:8d:aa:7e:3e:b3:8b:9b:
56:be:78:83:ce:c9:ef:71:b2:02:97:f8:08:3c:3d:
d2:d7:9a:a6:a5:97:82:7e:d7:ce:40:10:21:1d:98:
21:e1:cb:16:2b:72:c5:16:a6:7c:16:fe:09:e4:b8:
27:3c:f6:e1:83:d4:c0:63:96:ea:a2:29:d8:a1:52:
fe:54:b6:d8:c1:d7:54:15:14:2b:f9:37:7e:27:f0:
f7:27:72:87:3d:65:4c:0f:d8:9e:9a:65:af:f8:df:
2c:d3:1c:5e:95:a7:90:b2:97:be:d9:06:fe:e8:50:
45:66:01:1d:30:b0:f1:42:cd:80:f8:de:b2:91:2a:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D4:B4:6E:07:AF:77:48:D6:CE:E3:E4:40:54:4A:43:1B:5C:83:64
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3c:31:34:97:c5:a5:cc:0e:e9:8f:99:2a:0e:97:1f:49:c5:
32:a9:13:a5:56:8a:d4:8d:56:85:bb:d5:a7:1b:44:9e:bd:0d:
3f:11:c0:bd:2f:c3:42:1a:f6:5b:96:b7:93:ed:d8:fe:a9:10:
bc:bb:de:14:5a:4d:42:46:56:f1:50:9a:f6:06:f3:11:6f:ba:
4d:9b:92:ff:42:2b:63:00:dd:92:d8:fd:2b:7d:db:9b:73:e5:
4d:88:8d:8f:25:37:76:db:87:8c:5a:8b:73:d8:ac:4b:3f:c5:
1c:4a:d0:30:87:7d:09:ac:56:52:93:5f:b2:1d:2b:e9:bf:4e:
68:c6:f3:28:5b:97:ce:a7:98:fc:a2:40:d8:6c:00:2a:02:74:
d4:9d:ef:5e:80:02:6d:bb:33:71:20:bb:3a:15:ee:ed:7d:f6:
e9:5d:3f:10:65:52:cb:5f:ca:f9:bc:e9:61:60:6c:4e:da:ad:
7f:f5:78:0f:21:84:13:18:a3:8f:51:0e:76:52:a9:09:8e:54:
02:a1:3a:ac:7d:f2:92:3e:3a:c0:76:fe:67:c3:46:8d:1b:85:
db:4b:91:1d:ab:95:fa:e2:5b:bf:28:ff:25:ab:ed:37:c2:59:
74:92:1e:d1:8c:f2:69:c5:af:61:7f:b3:60:ef:55:76:e7:a5:
92:6b:2a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:37 2025 by rpki-client