Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json)
Hash identifier: /wqZnKkg4XtwdcEgG/2J9kSZ2m8gEWPKbTN76Vfcw90=
Subject key identifier: B4:04:11:91:47:10:CB:39:21:1B:30:8E:DB:57:D9:2C:C9:D4:02:4E
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial: 019922C34B258970BB6FFFBDE2B0060C6D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
Manifest number: 0540
Signing time: Sun 07 Sep 2025 06:00:47 +0000
Manifest this update: Sun 07 Sep 2025 06:00:47 +0000
Manifest next update: Mon 08 Sep 2025 06:00:47 +0000
Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: eN8TTrX/yv9F5NPQ75ys3ga5Hw0rnLy8hr+Rp2yxkxo=)
2: xnHt0Sid4zmp1F0aRhNqu7-Fkzo.roa (hash: YOstIt3g/6bqPmSn4Km52QkT6mGNeFzORgGZTgeX8Ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:4b:25:89:70:bb:6f:ff:bd:e2:b0:06:0c:6d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
Validity
Not Before: Sep 7 06:00:47 2025 GMT
Not After : Sep 8 06:00:47 2025 GMT
Subject: CN=b40411914710cb39211b308edb57d92cc9d4024e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:92:93:61:de:4d:1c:13:5a:40:19:d4:f6:
91:af:32:c3:23:74:ad:ac:ea:0f:e5:17:8c:cc:de:
db:2f:b4:db:c2:c0:b4:8a:82:4d:3a:e8:c5:c7:4f:
ba:dd:80:90:b5:31:32:1e:95:76:70:d2:f8:2d:00:
4a:8f:0b:52:56:1c:04:a5:1e:1e:3e:54:b1:02:ce:
67:30:60:ed:cc:2d:4b:a9:83:e3:e4:13:d2:5f:a8:
38:a4:d7:9c:9c:02:25:91:ae:bc:9f:90:cb:f8:5a:
22:0e:cb:2f:86:82:ed:10:58:2e:ec:42:73:c9:ea:
80:fb:2d:b5:d0:65:01:d4:c5:11:d7:eb:a0:2d:31:
fe:60:04:d7:86:26:67:85:5a:12:9e:cd:85:77:4d:
56:27:bd:53:ab:d4:e6:b4:23:d2:d9:01:5f:38:19:
40:2a:25:35:8e:e4:6a:09:5b:a7:8d:b2:5a:37:b2:
76:ef:4e:e2:e5:8f:74:d1:95:cd:c2:94:91:77:93:
75:2e:5e:54:30:9e:39:27:48:bc:13:ee:62:95:59:
00:80:6f:90:87:c9:4e:24:eb:40:27:46:39:3a:1b:
e0:8e:b3:a0:f3:67:d6:af:ff:43:f4:f0:1e:9d:25:
d2:57:8a:ae:32:8c:48:30:89:00:54:62:d3:86:16:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:04:11:91:47:10:CB:39:21:1B:30:8E:DB:57:D9:2C:C9:D4:02:4E
X509v3 Authority Key Identifier:
keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:38:a1:96:05:e0:f9:c8:a1:34:67:fb:64:5a:14:d2:f2:35:
7f:37:f9:f3:92:a8:ed:dd:00:cb:fb:c4:35:e8:b0:6c:67:82:
e2:de:53:f0:29:e7:e6:dc:74:78:83:3c:97:d7:94:7a:8e:e6:
18:54:31:52:2f:fc:e6:c4:60:2b:c9:5e:5a:77:76:dd:2d:6e:
2c:41:d1:ad:ca:45:23:b9:37:45:c0:2e:03:01:c4:fa:c0:de:
5d:d6:d5:6e:f6:a4:83:c1:08:49:8c:a6:ba:8c:a9:d9:26:75:
ff:d7:b1:40:8d:a1:03:4d:46:ba:07:ba:73:e1:d3:5a:55:a6:
30:2b:39:82:d7:2e:85:59:9b:54:0a:52:d7:b1:93:62:c4:64:
0c:c4:4f:1b:f3:3d:53:53:a9:73:4b:ef:bc:77:df:91:d4:6d:
34:97:f7:b0:fb:b4:65:df:79:14:36:62:08:bf:9f:96:4d:0f:
35:ce:3b:1a:44:a9:e9:27:79:63:de:71:a0:6f:72:8f:97:d0:
dc:53:54:35:92:22:54:8b:05:25:93:38:28:c8:e3:b6:a5:39:
ee:19:e8:63:6b:29:2b:d8:6a:60:ae:25:a0:7c:59:07:75:4f:
9c:1b:ae:42:e1:64:f4:99:1f:e5:43:79:db:4c:8b:df:45:29:
24:28:d6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:19 2025 by rpki-client