Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
File: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json)
Hash identifier: mA6s5HaQ4okfS9he450LW4cTozW41CrD/gPRHTB5A7c=
Subject key identifier: 20:E8:6C:6D:4E:B1:58:48:E9:71:A5:07:BB:0A:2C:27:92:0D:33:83
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial: 0198D4A79D4BB1C793F011E4B33AA63FFB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
Manifest number: 0CDA
Signing time: Sat 23 Aug 2025 02:00:11 +0000
Manifest this update: Sat 23 Aug 2025 02:00:11 +0000
Manifest next update: Sun 24 Aug 2025 02:00:11 +0000
Files and hashes: 1: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: lBeD8FuUwlb28ou6QBlInFC8UfmWfNk5/tiRZKw49RY=)
2: g4B1jDEDEnpyKjOUdwNXtiRBKVo.roa (hash: 7UWQudX+rqrs+vIGMtBiZa4lyOkbMuzxNBR2/83QsfI=)
3: mFCab-YMnaPwjq0SGjjSKVSwCvs.roa (hash: NwTUf2FCA+SWI7PlbFVRLa9grCf7O5GxOtog8KpH75E=)
4: v7xbsCROsO2MbuE9UwU0B__Qrug.roa (hash: jCAaO9QdtJabTsyOLEVBcqZmMxtQhkEo4Y5qTf+e+S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:9d:4b:b1:c7:93:f0:11:e4:b3:3a:a6:3f:fb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Validity
Not Before: Aug 23 02:00:11 2025 GMT
Not After : Aug 24 02:00:11 2025 GMT
Subject: CN=20e86c6d4eb15848e971a507bb0a2c27920d3383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:1d:01:a9:c3:d3:8b:48:ab:c3:46:c2:d9:
e6:77:91:de:14:d9:b9:f6:ee:89:5e:92:20:4e:69:
6f:5b:ce:9d:4d:9e:a5:48:02:04:02:e5:e9:60:18:
2c:cb:03:b7:eb:8d:bb:c9:94:57:b5:59:41:63:17:
67:7b:e6:5b:e3:c0:32:fe:12:00:56:b6:b2:68:6b:
2d:d4:ec:ac:33:96:ed:6f:4c:8c:af:a7:b3:68:30:
7b:61:97:00:93:e9:ac:d9:c6:83:ad:78:49:35:7b:
89:6b:02:28:01:16:e3:be:d3:55:e0:54:ff:af:8e:
3c:e7:c3:b1:a5:21:37:74:7a:20:ef:dd:41:28:c6:
8f:a7:4f:fb:34:72:bd:8b:5a:72:e6:d1:48:8e:9d:
d0:3b:5a:69:82:c3:7c:56:0b:df:91:71:1c:c5:22:
4b:5d:e6:b7:03:05:3d:4c:19:ac:4a:6b:a4:bc:95:
af:f1:37:5a:3e:27:a2:4e:1b:83:81:1a:d2:fa:f0:
27:73:bc:37:db:6e:bd:e9:93:f7:06:a4:7a:c4:bc:
e3:83:ed:0c:f9:c5:27:9a:a1:6c:5d:0c:ed:d9:31:
15:74:aa:49:52:83:14:31:58:86:d8:5a:d7:63:d6:
6c:42:80:04:4c:ff:a9:3a:fb:16:d0:81:cd:5b:88:
fa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E8:6C:6D:4E:B1:58:48:E9:71:A5:07:BB:0A:2C:27:92:0D:33:83
X509v3 Authority Key Identifier:
keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9a:9a:0f:69:33:db:78:75:03:33:25:47:e7:a3:ab:13:21:
1a:db:a4:bc:80:90:51:cc:c4:9f:38:c1:8b:92:de:22:13:65:
e5:22:b9:60:5e:99:d3:38:5f:64:a7:65:41:77:f9:59:d3:a4:
c1:81:b1:97:da:5c:b3:ec:5e:7e:97:63:a2:cc:82:b2:2c:0f:
1f:72:73:68:a2:b1:7b:e3:f1:6a:61:d3:49:07:e8:df:a3:6a:
64:5b:5a:e2:3f:6f:b8:26:44:4c:3f:fc:49:fc:92:74:87:38:
c3:14:10:98:75:69:5d:88:56:ea:ca:7f:68:e6:99:19:9f:40:
39:24:a2:95:33:07:63:fd:2d:6d:7a:44:a4:7c:62:3b:0e:9e:
cb:07:bc:78:06:14:79:f3:f0:48:99:c5:7e:22:27:bd:76:42:
93:fd:4e:bb:bc:ef:03:c1:9d:94:a4:08:e6:b0:f8:37:2e:b6:
0e:82:c9:17:f0:b9:67:35:ee:e6:eb:75:f9:e2:34:be:9f:d2:
34:a3:57:61:7c:e2:fd:08:bf:38:07:a7:b7:e3:55:f0:1f:3e:
e1:41:26:c7:0d:15:22:a7:b9:62:b4:71:53:8f:d2:c7:9e:e2:
68:dc:05:49:07:2f:75:a5:25:eb:50:bf:84:f4:16:2c:85:2c:
c7:ba:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:12 2025 by rpki-client