Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
File: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json)
Hash identifier: TQEgfMmw8A+/y5Ku1hN1SlMl1FEU34T76gHO5sGCYAg=
Subject key identifier: 04:CD:6C:D7:78:32:1D:91:1B:6E:DA:58:89:C8:FC:E3:83:D0:A0:49
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Certificate issuer: /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial: 0198D5BC4776C0BB4DCFB3E5CAC32D5655F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 07:02:22 +0000
Manifest this update: Sat 23 Aug 2025 07:02:22 +0000
Manifest next update: Sun 24 Aug 2025 07:02:22 +0000
Files and hashes: 1: 1-qQeR-EbZDs_qM5ldnB8c124Szc.roa (hash: ofMkv+rY3TqWIfaJFchO8QPgkzQdWyH95GmuYP6Ctek=)
2: 1GAA9RXUZFiO200bDHHgj0azbq4.roa (hash: tS4ee1uFzhVa+UdElOzwvh+A6ENy1LuuOQxxEe9qEtY=)
3: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: kfJN6Oxsc+1Vt8wPC6XNb40WFXwGA29+NBgzXAIBPiQ=)
4: S8bkAVPKOZ-Wv8bcLyLv58IY5XI.roa (hash: WjxXP1OmvNWD7wvgFTcDicv8zRYqIUNqNm/DyzGISFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:47:76:c0:bb:4d:cf:b3:e5:ca:c3:2d:56:55:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Validity
Not Before: Aug 23 07:02:22 2025 GMT
Not After : Aug 24 07:02:22 2025 GMT
Subject: CN=04cd6cd778321d911b6eda5889c8fce383d0a049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:03:27:ee:d2:6f:5e:13:18:2e:e1:b8:b6:
fe:32:af:ef:74:2b:27:01:ce:6a:db:10:3d:24:28:
6e:de:0e:8e:46:8f:53:78:d9:ca:5f:12:b0:2c:8b:
64:17:48:2d:f0:e1:44:52:a8:1c:71:5c:94:f5:41:
a0:1f:87:3d:92:24:60:cb:98:f0:fb:e8:7f:41:52:
00:40:c8:53:42:40:df:01:7a:9a:66:b2:2d:93:80:
f1:83:e8:e8:d2:f1:46:2f:7e:ed:b9:bb:e3:77:b3:
d9:95:e3:95:d6:f8:4a:e1:6a:17:2a:49:2f:df:78:
02:2b:c7:b7:ac:5f:de:1e:61:c5:fb:be:e6:06:b7:
2a:8f:82:48:47:47:e5:7d:0c:c0:27:c4:4e:41:7e:
d8:93:8f:a2:a9:40:0a:f7:07:c5:2d:c3:98:72:43:
a0:45:e4:86:1c:9c:19:c1:32:cd:43:08:25:74:11:
ef:d5:f3:a4:9e:89:dd:71:1e:7b:a2:02:c8:cf:10:
ef:e2:01:7a:10:41:33:c1:69:ec:f5:c3:fc:58:f0:
dd:00:c8:16:17:3e:70:9d:95:a5:b0:10:3b:bf:9e:
58:50:47:b0:95:fd:47:12:79:88:13:32:38:09:86:
7e:93:28:91:5a:42:fd:07:6d:85:a6:93:80:ac:17:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CD:6C:D7:78:32:1D:91:1B:6E:DA:58:89:C8:FC:E3:83:D0:A0:49
X509v3 Authority Key Identifier:
keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f4:69:80:ef:fa:d4:3a:75:69:c1:22:a2:a1:db:16:d8:c2:
7a:77:b7:8a:d5:c2:49:13:3a:be:31:d3:dd:e7:60:23:cf:e5:
18:9d:58:b1:35:28:62:77:9a:0d:c8:20:6f:85:34:4c:93:43:
eb:0a:f3:5e:94:e0:ef:79:4d:08:35:db:98:c6:3b:0c:03:35:
8e:41:46:76:f9:0a:12:a3:e4:e1:f8:d7:85:2d:64:8c:cd:62:
a2:3a:c3:82:c0:d0:c0:9f:0d:b7:13:d9:04:62:cd:f0:86:2f:
6f:0a:ad:2d:06:48:40:82:b9:cd:60:94:32:c2:12:05:86:aa:
5d:f4:5c:06:a3:f1:95:7c:91:03:81:64:ed:86:4a:2a:11:aa:
de:f7:1d:6e:1c:cb:8c:7d:e9:00:10:b6:a4:0e:5b:1a:59:91:
7d:90:c1:5c:25:96:28:d6:5a:53:7d:cf:09:ef:29:65:ee:76:
86:cc:98:a6:77:40:8f:b9:3e:fe:bc:d4:40:49:96:9d:04:b1:
14:80:53:2c:9f:4e:97:a4:4a:b6:24:62:7f:61:02:a4:6d:7a:
c0:da:b0:0c:f8:d0:b4:7f:98:8a:93:66:31:5e:56:df:69:9f:
26:cd:f2:d3:72:f7:8e:4d:3c:c3:4c:5b:7f:6b:c2:0b:d3:71:
d7:47:3d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:10 2025 by rpki-client