Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File: v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier: g4pu1EWo5goPFKWbKNn1iPPHzeOAXPljIDogL0iGoQ8=
Subject key identifier: D6:04:7B:1E:5E:4E:A1:D1:C7:55:91:49:33:85:26:74:A4:3E:3D:83
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 0198CBA5A4311EAEA155E218E97B7AAE5481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number: 0A89
Signing time: Thu 21 Aug 2025 08:01:26 +0000
Manifest this update: Thu 21 Aug 2025 08:01:26 +0000
Manifest next update: Fri 22 Aug 2025 08:01:26 +0000
Files and hashes: 1: Pbu77IMqgBIggCHuoPCgPeA-JYI.roa (hash: MfbYLWDGe0vBfVw8/15weNnWm0f+1AXVR3Lu2ooMJ2Q=)
2: SJ31osOZq8GAkUzTcgDMle6L-Ko.roa (hash: OpBd6e9+J397K48R0gJPVRSyhgNBftdRPHKKbxpf8EI=)
3: TLegbcgI8kzdZX0LyaY_jBKsLjM.roa (hash: jfnT8EG89ibu6lVDZPQfuHKOWHv4n9hSUWRGapOkR0I=)
4: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: KutWbiwzkPzYYh5TosqsIgXloFN6t3pdyotnceJqVq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:a5:a4:31:1e:ae:a1:55:e2:18:e9:7b:7a:ae:54:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Aug 21 08:01:26 2025 GMT
Not After : Aug 22 08:01:26 2025 GMT
Subject: CN=d6047b1e5e4ea1d1c755914933852674a43e3d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9b:41:70:fc:4b:2c:8b:b2:29:f0:16:00:6b:
eb:be:91:1d:81:d2:d5:b4:80:a8:56:a3:c9:fb:2d:
3f:ae:67:94:28:10:eb:f2:3b:5a:da:d9:b7:90:4a:
c1:87:dd:a4:df:f1:45:7c:ce:26:a8:67:8e:4c:94:
f6:43:3e:0b:2f:b1:08:5d:a3:02:7c:d9:60:5b:be:
4f:66:56:38:83:74:a2:8b:18:21:81:c8:16:61:15:
b3:46:33:3d:c9:34:e4:2f:e8:de:93:1f:cf:b2:dc:
36:49:6e:29:5e:b5:31:4b:f1:ca:6e:d9:09:f4:0c:
23:cc:8d:9e:e4:92:70:0b:72:36:9d:04:c7:9f:2d:
41:98:c7:c9:bc:4e:6f:1b:b7:86:fd:5d:e2:27:de:
dc:31:fc:d1:47:65:1a:2b:8f:65:06:89:d2:9c:af:
b5:48:4d:1b:a0:eb:bf:e5:f2:7e:44:4f:aa:6b:6d:
75:32:0b:b3:c3:c3:0a:dd:04:d3:39:d9:c7:5c:45:
c4:48:39:b8:80:3b:18:0e:37:a2:02:cc:19:f2:12:
de:fb:c7:06:fe:a7:87:35:dd:8b:3e:67:48:00:a0:
b3:f3:74:a9:b6:bf:24:3d:9c:b8:78:eb:16:e7:57:
7d:ae:06:05:06:8b:8d:b1:4c:1b:27:95:69:ed:06:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:04:7B:1E:5E:4E:A1:D1:C7:55:91:49:33:85:26:74:A4:3E:3D:83
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:dd:9a:f5:d9:37:1f:86:2e:4e:c3:c2:a4:6d:24:19:7f:6e:
0b:5d:9d:d7:41:f1:88:e4:48:67:96:d5:df:a9:4c:38:4d:71:
5a:3b:4c:21:0f:c2:0b:c5:0f:40:c4:3a:a4:ad:c7:ba:06:33:
ac:db:ed:a4:5a:55:37:38:bf:cc:f1:7c:7b:8c:8d:2d:b3:ac:
b5:b2:e8:30:8d:b8:42:0e:11:cb:60:d9:8f:80:b0:66:67:ac:
6c:86:d6:c0:a2:31:e8:d9:29:8f:16:b2:3b:23:8d:ea:9c:2f:
00:f9:91:a1:44:b5:f0:91:73:2e:19:8f:9d:3f:a7:74:5e:4f:
53:de:76:99:55:ca:85:66:92:99:94:d3:16:5b:bf:ab:2b:a9:
50:a0:4d:15:10:ba:3e:e2:44:01:64:a3:00:5f:84:11:1c:c1:
02:6f:2c:94:70:2c:19:f4:b1:ad:1e:7c:3e:be:06:c4:4e:08:
b2:c7:7f:5e:cf:56:7d:4c:93:0a:eb:52:d2:9a:36:e5:28:0e:
f2:39:39:22:d8:6a:d5:1e:06:6e:49:ed:90:11:b7:41:ca:e8:
ab:b4:b8:8b:6b:bb:1a:8d:e5:2a:6b:93:4b:46:1b:16:89:3d:
95:dc:95:37:69:fc:58:f2:24:58:07:ea:7d:33:30:37:92:05:
22:f2:86:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 11:11:02 2025 by rpki-client