Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: onmXN3VtFtHW4a3e+auD93gAbFw6YQBv7jHixR8FjWw=
Subject key identifier: E9:DC:00:12:38:73:90:F6:D4:77:4F:56:D8:FC:C3:22:EC:00:95:A8
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 019934253A94C0C475C353853DAFDEAAF1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0AA4
Signing time: Wed 10 Sep 2025 15:01:18 +0000
Manifest this update: Wed 10 Sep 2025 15:01:18 +0000
Manifest next update: Thu 11 Sep 2025 15:01:18 +0000
Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=)
2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: WqwYpeDq3HyMREbHR1G+GYSDk9sC+BCOmhI7PGZdG1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:25:3a:94:c0:c4:75:c3:53:85:3d:af:de:aa:f1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Sep 10 15:01:18 2025 GMT
Not After : Sep 11 15:01:18 2025 GMT
Subject: CN=e9dc0012387390f6d4774f56d8fcc322ec0095a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:8e:0c:5a:d3:8e:c0:54:20:80:b9:d9:f3:
36:8d:90:45:8f:ea:d3:05:f3:a2:d7:a4:2f:58:10:
2b:40:88:ac:cf:f5:f2:8c:4c:e7:cc:84:d9:92:a3:
65:73:4b:14:31:1a:2e:05:93:04:93:c9:eb:01:7c:
84:8f:f7:e1:b8:61:64:0d:c3:86:10:c6:97:74:84:
21:59:69:fb:d3:f2:d2:78:e2:67:20:19:60:0a:c2:
83:f5:5a:35:d8:a4:d9:54:b0:82:66:ad:f6:3a:3b:
60:86:77:95:4d:14:f9:8d:25:8b:71:3b:b1:2d:e7:
50:af:4b:75:39:8d:de:ce:d0:e5:28:2d:d9:d8:8c:
96:12:da:1c:27:46:15:74:77:65:3c:3c:d6:62:82:
5d:f1:ad:c5:41:8f:06:58:dd:4e:d0:69:19:f8:90:
0d:89:9b:ae:6a:e3:ec:0f:d1:f9:e0:bc:3d:82:50:
7b:90:7a:be:1f:bb:f3:50:0f:6d:be:56:40:7d:bf:
17:1d:53:87:f3:39:77:9d:08:81:ec:c3:b2:cd:25:
13:a4:a5:af:39:ee:9b:2a:e7:71:7b:2c:5c:bd:8d:
04:32:83:8a:a9:2a:2b:fc:29:2c:82:36:dc:77:88:
f6:9f:2f:cd:bf:f3:68:52:c6:3a:74:84:23:45:4d:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DC:00:12:38:73:90:F6:D4:77:4F:56:D8:FC:C3:22:EC:00:95:A8
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:42:6c:34:f2:1b:6c:cc:23:e2:49:8d:ea:32:35:b9:df:47:
e8:28:eb:61:8e:e2:4f:c2:79:69:ca:79:1c:aa:38:36:68:4b:
be:5b:b1:48:67:bf:25:70:6d:d1:24:15:2c:25:dc:20:26:7b:
c7:b5:0a:ca:64:0d:df:7c:fc:ae:c4:1c:3d:1f:c0:42:b8:97:
42:5f:c9:72:0b:87:ac:5e:f8:68:7f:e1:06:e8:52:bf:6d:51:
59:0a:5c:77:fb:4d:b1:60:55:f2:00:63:aa:ac:9e:4e:9a:0a:
26:a6:28:cd:1a:df:92:3b:c6:a6:85:e0:1f:8a:e4:1f:5f:7d:
07:d8:31:1d:b6:b6:9e:b7:c1:49:d4:4e:25:6b:68:c2:5f:45:
e8:3e:7c:16:f5:2e:fe:cb:97:0b:c1:ef:31:4f:04:7a:9d:2f:
04:96:9d:94:f8:ca:e3:cd:15:fd:1d:7e:7d:75:c0:91:b1:fa:
2d:5c:3c:52:da:22:7c:03:72:e1:da:8b:84:2e:62:87:2c:45:
90:09:95:1a:79:26:11:fe:98:e9:6b:cf:03:7a:21:38:95:67:
c0:b2:f6:55:62:18:03:3c:5c:97:3d:7f:ea:d3:bd:84:fb:bc:
43:ab:50:27:4e:72:6c:e8:cc:31:a1:0f:f8:fa:df:36:5e:34:
10:ce:2d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:14:35 2025 by rpki-client