Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
File: _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json)
Hash identifier: IBg8741tjLNlrlPa0bHg9FG61ba26kA/QZPDsfjAN9E=
Subject key identifier: BA:9F:F0:FA:C3:CD:11:B6:5B:6F:25:A0:97:FA:53:8F:C7:95:4E:E1
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial: 019921B09A6D3DB46E0D5CD3F9B22600C645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
Manifest number: 1426
Signing time: Sun 07 Sep 2025 01:00:45 +0000
Manifest this update: Sun 07 Sep 2025 01:00:45 +0000
Manifest next update: Mon 08 Sep 2025 01:00:45 +0000
Files and hashes: 1: GKGUA1ULBuEBg6UZcKqTCkNmhrM.roa (hash: S+MOcu2hV7fbEQM0gv8ckh0dyXeXiOXULnIXULZ3i+k=)
2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: X48XAWHp9JiAMHddhTlYD3YB3BVlA7EJj43nRNeurk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:9a:6d:3d:b4:6e:0d:5c:d3:f9:b2:26:00:c6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Validity
Not Before: Sep 7 01:00:45 2025 GMT
Not After : Sep 8 01:00:45 2025 GMT
Subject: CN=ba9ff0fac3cd11b65b6f25a097fa538fc7954ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:78:3a:7d:68:6d:a3:c6:a2:fe:7f:74:10:ca:
85:d6:90:6d:24:ed:89:ba:e4:e0:dc:3f:7c:b1:70:
bc:db:4c:89:9d:89:25:13:39:b8:8f:5f:53:c5:07:
c8:76:b3:18:f3:91:4a:c6:2a:d2:b8:2b:d5:0d:46:
44:01:91:97:d2:3b:56:71:28:6f:4f:1e:51:39:39:
1a:9b:c1:5c:e6:fe:eb:4c:1a:58:73:b4:95:39:05:
6b:6f:a8:0d:00:a5:bd:7c:11:43:92:66:9f:76:73:
73:0c:cd:d0:94:bb:b0:7c:35:90:08:f4:28:ef:ba:
54:a9:f2:0e:91:21:29:e6:00:db:fc:a6:e8:37:98:
cf:c7:c9:53:e4:22:6a:13:84:47:ee:a2:53:1e:b9:
99:c5:72:10:9f:21:35:c8:94:77:56:af:de:8e:00:
2b:13:88:04:df:09:7a:1d:3a:b0:5a:52:a5:68:80:
c4:5d:11:12:5a:99:4a:c7:6c:94:52:d5:ec:5c:6f:
fb:45:a2:e0:42:16:6c:e8:2c:6c:83:92:80:5d:de:
1e:2d:69:65:b5:24:94:a5:d0:c9:a5:16:af:94:27:
76:18:73:03:7d:b3:92:fd:fe:e1:95:36:08:6c:dd:
c7:a6:2b:b1:e5:a5:2d:89:dc:d9:20:91:1c:b2:f3:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9F:F0:FA:C3:CD:11:B6:5B:6F:25:A0:97:FA:53:8F:C7:95:4E:E1
X509v3 Authority Key Identifier:
keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7a:ab:33:80:33:ec:a3:18:18:eb:b5:65:de:49:69:ea:93:
02:a2:bc:3e:b2:9f:77:28:9f:4a:11:9a:19:0e:3c:d0:2c:d7:
5c:7b:ff:fe:b5:22:34:3f:8c:e9:43:ba:03:7a:3c:df:85:1b:
95:b2:91:31:48:62:18:20:c8:3f:f7:b6:47:4a:2d:08:02:e8:
e1:9c:a0:17:17:d9:ab:34:9a:2d:8d:77:12:ab:3d:99:f8:ce:
ec:ba:97:7e:c1:17:e9:b6:9c:a7:1e:21:69:de:07:a8:b4:f6:
a4:33:0e:fa:ca:36:22:9e:ec:e5:54:92:98:70:bb:6b:c1:8c:
9a:a0:1d:16:db:a3:28:00:c8:15:cf:b1:49:80:24:37:e5:48:
05:20:1f:22:23:de:c7:69:25:02:73:6c:d5:27:a1:aa:12:94:
90:94:39:33:d8:76:a7:37:c4:46:13:0b:4c:70:66:f9:93:8a:
3e:1b:75:36:55:83:ea:a9:1b:89:3a:11:d5:68:2f:8e:87:a8:
8e:2b:81:a0:14:18:06:81:ab:70:b1:e4:b3:3f:35:e0:e1:51:
e4:b7:ba:73:06:33:f9:9e:25:37:36:43:26:d1:04:35:ee:fe:
77:0a:d6:01:26:d2:c6:f3:0c:2f:e7:a9:a1:9c:7c:e7:ad:87:
e6:70:ba:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:44 2025 by rpki-client