Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: aIsZBG3AJx1m8bVuzcU7sBNJ+A5wn11LuSlz/7/z/6A=
Subject key identifier: 49:EE:CB:AC:7C:02:5B:8D:B8:4C:24:E3:8E:CB:14:CB:91:A4:4E:FC
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 0198D5BBFA4AEBAFB071D20B1F279840EEEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:02:02 +0000
Manifest this update: Sat 23 Aug 2025 07:02:02 +0000
Manifest next update: Sun 24 Aug 2025 07:02:02 +0000
Files and hashes: 1: 3gQqwuDknMD1by1_10QyLFjqTSQ.roa (hash: 7rS6ATpFIQATm/1nB63KRTZ9v2IEBgVrsScfZWZHuYo=)
2: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: C8FqB9LSSr/qGTATUT3UKelBVvgDk+NtIDhFAmT5VD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fa:4a:eb:af:b0:71:d2:0b:1f:27:98:40:ee:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Aug 23 07:02:02 2025 GMT
Not After : Aug 24 07:02:02 2025 GMT
Subject: CN=49eecbac7c025b8db84c24e38ecb14cb91a44efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:88:b4:32:55:12:47:92:95:04:e7:32:5b:d3:
ba:63:45:ad:8a:42:1e:e6:1e:f7:00:a8:aa:2e:7c:
42:0c:48:97:57:5a:00:e3:20:88:eb:51:1a:f8:d9:
1e:51:3a:82:90:d1:bf:c7:7a:fd:89:98:7d:57:05:
41:7a:40:b3:94:dd:ca:d2:ff:c6:31:f9:53:a5:c4:
ab:60:5b:54:3a:6d:29:5e:04:c5:d4:88:c2:bd:8b:
92:ee:8b:f1:13:33:c7:9d:7e:74:4b:46:5f:57:92:
0c:a6:bd:9c:f9:f1:95:a6:4b:4a:f6:a5:4d:bc:4f:
e1:1d:ab:a1:61:07:52:57:51:0a:78:b6:5f:96:ff:
ea:3f:e6:33:3e:22:20:f1:62:f9:78:f3:f3:5d:2e:
f7:f8:05:9b:63:8c:7a:01:d6:af:0c:25:cc:04:c7:
ba:60:82:af:13:de:fc:57:92:7d:4c:41:77:94:69:
16:51:3d:ce:b4:ba:99:46:41:f2:38:c7:78:89:c8:
cf:d8:3d:2d:bc:51:7a:71:9f:5f:b5:2c:8c:52:1c:
4b:22:ae:8f:2a:01:f2:0a:5d:24:cb:55:38:f8:e9:
6f:0e:f2:38:cf:ff:1f:40:15:d9:b6:2f:69:46:8d:
87:17:ed:cb:17:7f:4b:ea:e0:04:70:d6:22:a6:78:
b6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EE:CB:AC:7C:02:5B:8D:B8:4C:24:E3:8E:CB:14:CB:91:A4:4E:FC
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:31:36:78:99:4b:1a:1d:8c:a3:b8:9a:04:85:ab:20:66:fc:
c5:b4:21:76:d5:7c:4c:20:39:4c:a8:f2:e8:23:43:a5:61:15:
02:d3:b2:b4:4f:8c:a4:88:6f:6a:42:e5:a7:3e:98:dc:b0:db:
43:7f:b4:03:36:73:d7:16:94:69:b1:c3:57:be:f6:c4:4c:19:
9c:47:17:5d:40:77:45:03:56:d1:a2:04:65:de:90:9e:e6:ac:
27:03:cb:07:1b:1d:1f:22:18:db:43:e0:f4:3a:03:87:bc:f7:
0c:84:88:36:6e:67:9c:bc:a0:86:d2:7c:18:20:56:24:6d:75:
1e:1c:7b:7e:a7:19:77:7a:ab:a7:b3:0d:df:49:5d:2a:09:d5:
34:d0:1b:d5:f1:c3:4a:53:e3:34:f1:c8:79:d1:dd:0b:f7:cb:
e7:7e:3e:84:b3:79:50:d1:7b:79:01:e6:c7:19:b5:5d:d3:7f:
d3:bb:61:29:2f:ff:88:d0:c3:2d:93:dc:dc:88:bf:6e:2c:5c:
d1:32:f7:45:5b:bd:cf:5b:a2:15:8a:06:32:5a:33:4c:5e:74:
63:aa:0b:5c:8e:6c:d6:9a:ba:f1:6a:5a:f1:26:36:87:06:6c:
65:84:76:62:50:d1:8a:70:0f:49:d9:34:69:e8:9c:aa:b2:45:
00:19:31:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:53 2025 by rpki-client