Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier: hcWXVeJngnphKc62mTBCUMC8DwMn4k2UwNYWuJO4NXA=
Subject key identifier: 87:56:F5:9A:BB:F2:EA:74:F8:55:39:4E:C9:06:A8:2E:A8:EC:89:D9
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial: 0198D515C512F05D70BB3465B38AA37C1299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number: 1520
Signing time: Sat 23 Aug 2025 04:00:30 +0000
Manifest this update: Sat 23 Aug 2025 04:00:30 +0000
Manifest next update: Sun 24 Aug 2025 04:00:30 +0000
Files and hashes: 1: 1-uN15WooRn1ILKR5q1XNAneYJkk.roa (hash: ceG95NNBWipckiQC0zFJWFVKiWVKgIWhdLvt9vkMIUA=)
2: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: MkziplXOZFisV5VB0mVx44WnEMbLXYU+vlPg3n+84zc=)
3: rNO8o619Q5SFsmTVHI_QY1wyUDE.roa (hash: Hb7rXVkAK9PEfMPmQwPGTYXFwRIopAaJ4bo+hnJHqKU=)
4: ymgejZXQAFGY4W5XJssEnhi7B6U.roa (hash: 6jBjJYjwNGCZyUd70W3B/Q80kGLCgiNFZzX5URwj3Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c5:12:f0:5d:70:bb:34:65:b3:8a:a3:7c:12:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Validity
Not Before: Aug 23 04:00:30 2025 GMT
Not After : Aug 24 04:00:30 2025 GMT
Subject: CN=8756f59abbf2ea74f855394ec906a82ea8ec89d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:18:52:57:2b:a7:93:29:f3:d5:94:5d:9b:df:
8d:10:eb:49:88:8e:db:57:3b:85:21:cf:40:db:18:
e9:8b:10:99:78:ce:99:5c:e2:e2:19:ef:bc:00:ef:
06:4a:98:43:cc:f1:61:fb:cb:25:a0:60:b8:81:a0:
b0:17:39:30:e5:2b:6c:30:66:c5:63:9b:57:ef:e8:
c3:ae:48:81:07:40:a1:46:9e:cf:b1:f6:8f:13:6f:
8c:83:1e:bb:7a:ce:a0:51:14:4f:66:cd:06:94:cb:
97:5f:37:8d:21:17:36:7c:6b:0c:c9:bd:5c:50:a9:
d2:f0:d0:10:88:71:29:b5:fb:24:b6:2d:c7:71:ba:
72:7b:2f:89:1b:3d:1d:a4:14:97:7c:db:09:b5:88:
fc:29:45:1f:d1:7b:98:c0:ca:85:db:28:e6:da:ce:
3f:b0:98:06:ea:7e:d5:a2:7e:74:7a:73:38:e1:15:
14:f3:b2:bc:f2:c5:07:f9:ba:2d:bb:7a:cc:a9:4c:
e6:5d:5f:b7:33:03:1c:06:79:46:61:7d:64:e7:c0:
37:ad:4f:a6:ca:97:1e:1d:68:42:4d:35:73:3a:01:
51:a5:9a:27:ec:09:7f:f2:f6:25:a7:33:b2:97:8a:
b7:b5:87:df:69:18:d0:88:56:a9:3d:58:b3:71:d2:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:56:F5:9A:BB:F2:EA:74:F8:55:39:4E:C9:06:A8:2E:A8:EC:89:D9
X509v3 Authority Key Identifier:
keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:09:4f:ef:73:26:8e:1a:74:fe:a1:ae:8b:cf:60:13:1d:be:
e8:af:cb:ff:8b:a0:e5:2c:97:ee:d1:54:27:84:ea:7d:e2:97:
b7:fd:39:41:26:05:43:c7:19:4d:00:61:53:07:33:d0:7d:9b:
1f:db:f2:78:6e:0d:2f:8a:0b:ed:48:57:72:8c:57:be:80:8b:
7b:d4:d7:b4:31:86:f2:fc:e9:65:ee:e8:12:14:37:bc:87:80:
0c:98:3e:00:d7:4b:ee:6e:66:26:77:9f:c4:6f:72:39:72:2d:
b0:6d:27:93:90:92:a9:ac:58:2f:ed:9a:ec:19:ed:e1:15:fd:
ab:cf:55:31:d9:bb:8e:cd:df:27:37:c4:99:74:54:6e:a2:c0:
a5:21:a9:11:69:0e:2e:2f:73:57:2e:17:98:9f:f8:78:6a:32:
d8:fd:fb:ef:b0:43:56:c7:b7:7e:4b:0a:ee:64:fe:9f:c4:68:
38:f2:f9:85:c6:e8:80:b0:0a:5b:63:6f:b1:18:62:da:d7:fc:
0c:ba:6d:65:8a:4e:cc:f5:aa:43:9a:5b:bb:a6:bc:20:8e:ec:
41:04:90:db:fe:88:7a:fe:31:12:ec:9e:fc:f2:6e:0a:7c:ca:
b5:88:71:24:20:28:4e:33:40:50:91:d4:2b:54:1c:c3:e4:f1:
0b:91:6c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:24 2025 by rpki-client