Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: d+HtXUFTYQQ3ESmVcmKeh7rfpWYERC3zZo1LcJ7fFi0=
Subject key identifier: 68:04:96:95:21:5A:AA:19:C9:F7:45:55:C8:6A:31:8F:C6:37:65:30
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 0198D4A7F7A3E92D9D98C7617B4773621B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0B7B
Signing time: Sat 23 Aug 2025 02:00:34 +0000
Manifest this update: Sat 23 Aug 2025 02:00:34 +0000
Manifest next update: Sun 24 Aug 2025 02:00:34 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: trECom29Q+zGueWqbx36QjKBVIIlXAPioJM8N+oHzG8=)
2: goWXgCcrT8sdpWvs98SjkshS1QQ.roa (hash: pL/QBtJXrUgZbyv/2j+3PUPuF0UtD1Pg09swJJxayTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f7:a3:e9:2d:9d:98:c7:61:7b:47:73:62:1b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Aug 23 02:00:34 2025 GMT
Not After : Aug 24 02:00:34 2025 GMT
Subject: CN=68049695215aaa19c9f74555c86a318fc6376530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:0b:ff:e7:f5:5a:ac:7b:4d:9a:a8:3e:89:
37:d9:3c:28:f1:cb:30:fb:39:81:0d:0d:5a:0e:cf:
f5:b3:c7:ad:0f:94:ea:6f:6a:4c:75:86:07:99:4d:
d5:11:ce:b0:0e:c5:41:02:c4:cf:40:38:5a:4a:2e:
60:e7:3a:34:49:b4:dd:11:9b:4c:84:ee:95:1b:b3:
52:47:f0:f5:d5:03:90:66:b3:c7:1d:bf:c1:30:1e:
48:eb:45:41:06:2f:43:6a:e7:23:9b:89:7a:b4:5a:
29:2b:e6:90:5f:b0:91:bf:00:dd:d5:40:ea:02:b6:
54:01:5c:f4:4c:92:5d:21:08:6f:6b:5f:a0:d3:cb:
47:cc:fc:21:48:8b:49:51:49:92:59:c6:2e:dd:4e:
1a:ae:3a:01:3c:6f:c9:41:cb:bc:39:fe:17:ee:c0:
e1:49:7c:28:dd:36:35:d0:3a:d6:ef:d6:e4:be:af:
67:b0:b4:1b:46:af:6d:ba:db:d1:15:48:7f:4c:94:
b5:d4:97:b1:9a:81:2b:27:7b:a8:5c:80:ad:0a:63:
8f:1d:70:10:9c:e0:37:de:03:ce:24:64:b5:e7:75:
1e:41:87:7c:2e:8b:f9:54:c4:6e:1d:9c:fe:0f:38:
0c:a6:0f:cc:cc:91:dd:5f:a3:a1:9e:a6:b2:d9:20:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:04:96:95:21:5A:AA:19:C9:F7:45:55:C8:6A:31:8F:C6:37:65:30
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b5:d9:8a:62:99:48:bf:aa:9d:40:84:f3:94:b5:51:e9:60:
3b:2b:f9:d2:cc:25:cd:67:a6:f6:7e:5a:de:3c:12:87:06:46:
cd:4e:06:77:e2:f7:a7:28:60:d0:a8:d4:46:96:bd:e6:d7:ea:
84:0c:f1:e6:7b:e6:b3:43:f2:28:e8:6b:c7:cb:85:73:ae:71:
53:e4:ad:86:95:b4:2f:4a:68:15:cd:cb:9a:6f:f4:b5:f8:98:
cf:34:7c:52:5b:ee:ba:6e:b8:f7:8d:fa:61:1e:ac:b4:b3:c2:
9e:3b:88:1e:ad:1b:cf:80:b1:0d:9a:df:5a:25:55:80:a7:4d:
0d:94:de:28:8b:e3:6a:a7:5a:bd:33:93:08:77:44:a9:b8:53:
02:af:09:36:a6:ff:92:e9:ca:57:85:45:29:56:10:4a:f7:61:
82:f9:89:cf:ab:a8:14:00:67:34:20:50:ba:48:65:6f:61:55:
2a:28:ba:1d:4d:5d:66:98:9e:85:aa:4c:b4:e7:c3:f1:71:ca:
6a:c5:37:93:49:1a:ea:e5:58:33:b4:d3:68:bd:7b:75:bb:e1:
77:e8:4a:00:bd:31:56:11:fa:46:17:b4:7a:e6:98:15:ca:b7:
19:56:8b:f4:17:82:32:06:5a:7e:ff:72:aa:01:cf:44:cd:40:
ca:81:70:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:33 2025 by rpki-client