Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: NW3p8v2eUmibJLd8VIy6hj7kmbCWOiChlksaZsv8N+I=
Subject key identifier: 8B:E7:A0:ED:6B:58:14:E6:3B:B3:8D:2D:D6:44:5C:54:AE:48:BB:81
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 019931917FE5F9BE94B444CE94957A288D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 09E2
Signing time: Wed 10 Sep 2025 03:00:43 +0000
Manifest this update: Wed 10 Sep 2025 03:00:43 +0000
Manifest next update: Thu 11 Sep 2025 03:00:43 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: 7CSnThChd947SFWRVuz2jgqX9Po9kP0O51iaPgeMynE=)
2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:7f:e5:f9:be:94:b4:44:ce:94:95:7a:28:8d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Sep 10 03:00:43 2025 GMT
Not After : Sep 11 03:00:43 2025 GMT
Subject: CN=8be7a0ed6b5814e63bb38d2dd6445c54ae48bb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:d9:36:6f:64:e3:9a:6d:55:97:e7:d9:69:
37:2a:37:4c:ed:41:03:4f:4c:ca:33:4e:3d:40:15:
a3:e7:65:51:74:3b:60:ec:b6:86:be:73:f6:0f:29:
c6:a5:27:16:ff:c6:ed:e6:30:6d:3e:58:00:ad:0a:
19:27:44:ac:6c:a5:66:f9:18:1e:ef:4f:6d:11:52:
d0:eb:62:62:f2:98:32:6c:dc:6a:16:eb:ed:e1:e5:
e6:fe:86:7b:46:8d:7d:f1:59:c4:71:dd:0a:da:d1:
64:87:92:61:a7:d2:98:90:b5:08:7c:b6:55:ff:9a:
d6:2e:4d:85:f8:9e:6f:89:a6:54:cd:d9:46:c2:82:
8a:75:5b:9e:f7:9e:fe:cb:e8:be:ef:80:ce:7b:50:
18:b5:22:72:b5:68:a6:14:4a:32:5b:16:5a:9a:4f:
b8:81:71:48:20:47:a9:1f:ee:44:89:51:00:a5:6e:
dd:d1:74:46:30:48:a6:76:2b:4e:b3:00:72:73:8b:
1b:5a:4e:07:6e:5d:bd:9e:37:bd:d6:ec:a5:3a:96:
d3:9c:77:c3:9e:3c:cc:d0:1a:28:38:30:37:84:a8:
a2:18:f7:50:a5:30:ed:53:88:8f:34:a0:42:ae:af:
f4:a0:74:4c:ec:6a:af:04:a7:62:55:ae:af:f6:ed:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E7:A0:ED:6B:58:14:E6:3B:B3:8D:2D:D6:44:5C:54:AE:48:BB:81
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c3:10:76:8f:61:01:09:0e:80:a9:16:f5:e0:e9:8b:1c:e0:
ff:33:52:45:76:80:54:9d:84:0c:c6:80:23:5f:ec:8f:fb:ec:
ff:cc:a5:e9:6c:90:16:9d:7b:fd:88:0f:33:25:0b:99:3b:e8:
e2:3a:41:d2:76:65:7a:a6:48:26:c4:9d:82:35:f3:12:7d:36:
d5:e4:1f:40:85:9b:7b:31:dc:dd:30:a6:1b:82:a3:55:71:c5:
d0:e8:d2:23:cc:99:70:cd:07:09:d9:12:7d:f7:4a:f4:90:19:
6f:9b:fe:6c:a8:99:cd:cc:d2:ff:d1:23:4f:44:0e:fb:b3:30:
a4:5b:d2:ee:b2:c2:ae:cb:db:83:be:bb:f2:bd:ee:b9:4b:a3:
8c:13:5f:19:02:a3:45:91:70:2c:dd:fb:54:d9:ef:b3:6d:d9:
2d:1b:7f:aa:9e:59:f8:cf:09:94:cc:29:a2:46:35:7b:d2:bd:
00:66:8a:02:a8:35:49:3e:85:ca:43:ae:e6:c6:a2:09:34:53:
12:6b:a1:c8:0e:4f:d7:7c:b1:64:e3:24:d7:27:f2:86:b0:6c:
7f:73:53:46:6b:7f:21:a6:97:ed:f5:cb:86:e0:b5:dc:33:38:
92:86:b8:f0:6b:41:c7:8a:c5:26:29:f0:de:4a:f5:56:e2:ea:
ab:43:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:50:09 2025 by rpki-client