Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: 8lFMXZ73XlxsoEj0HX/gRZG3759xSnCehufE9EXzJPc=
Subject key identifier: 42:C9:96:47:79:D2:B6:94:A1:0D:07:C7:86:C1:6E:DA:D4:7F:94:09
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 0199239FB5B53829B3D50992833497C59499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 0D08
Signing time: Sun 07 Sep 2025 10:01:33 +0000
Manifest this update: Sun 07 Sep 2025 10:01:33 +0000
Manifest next update: Mon 08 Sep 2025 10:01:33 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: 3R3JVKOvBiuZ7Tt+J+sEeDlXBxGYbX2s/d81j2sGNWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:b5:b5:38:29:b3:d5:09:92:83:34:97:c5:94:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Sep 7 10:01:33 2025 GMT
Not After : Sep 8 10:01:33 2025 GMT
Subject: CN=42c9964779d2b694a10d07c786c16edad47f9409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:b7:ff:04:ec:4b:08:a5:3c:4c:0d:71:36:
ec:d1:6e:d3:4d:e2:49:69:d4:0f:4d:45:96:34:ec:
04:92:59:cb:35:fe:31:50:7e:fc:37:cc:19:7b:3a:
d3:23:fa:c4:cc:d0:27:44:bc:ad:c9:e0:45:99:a4:
62:77:79:34:d3:be:ca:07:9f:36:80:ed:0d:bf:42:
a1:5a:52:7c:dc:bc:4b:2b:dc:74:46:84:32:3b:e6:
b8:20:2f:84:6e:e2:b6:9c:1e:27:f2:cd:c3:59:3e:
fc:58:c6:95:32:82:02:3e:7a:c8:9a:b8:38:08:46:
b1:17:4f:f5:cf:ca:d7:ec:1a:a6:c9:6b:01:17:86:
07:78:c2:37:d9:c1:37:c5:e2:22:17:cf:68:79:42:
f0:b0:e9:24:c6:f1:78:c1:1c:ef:4a:10:96:b2:31:
f7:fd:43:2a:cc:9e:6c:aa:b6:7f:e6:e0:c4:b7:34:
8c:41:9a:b9:a1:a8:3f:a6:04:d1:ca:f3:59:6f:f7:
fe:87:b9:99:55:3f:77:e8:8e:f8:ee:54:74:71:92:
0b:59:a9:9a:e0:18:ac:0b:a8:69:5e:cd:62:c2:da:
b5:a9:46:3a:fc:62:42:17:22:c5:b8:f1:34:a0:01:
10:ef:d7:6b:57:a3:76:36:db:81:64:d6:48:2c:25:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C9:96:47:79:D2:B6:94:A1:0D:07:C7:86:C1:6E:DA:D4:7F:94:09
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8d:36:01:90:c1:89:64:2c:30:5b:4d:d9:26:10:5c:d6:0a:
0f:74:03:40:d9:9d:66:50:23:38:25:48:82:41:6b:7c:30:b6:
21:ab:0d:44:85:9c:44:c6:4c:40:b4:8b:63:4a:25:de:5f:c5:
40:61:70:17:10:4b:3a:1f:70:95:4d:05:90:0a:73:55:b0:af:
9c:9c:a9:ef:f4:97:4f:4f:a1:54:ab:20:9c:f9:4e:49:a8:ee:
0a:68:fd:0f:cd:a5:c4:98:b0:e0:c3:80:5d:80:fd:d6:5d:35:
b6:61:7e:be:2e:0b:d7:6d:f3:52:0d:02:23:57:06:ca:04:f4:
fb:fa:35:70:2e:fc:95:93:9c:b1:6e:1f:e5:b1:2d:3a:2b:16:
88:0e:4e:eb:ec:bc:ac:20:80:3e:15:ee:58:a9:95:aa:f8:c5:
dc:81:c4:6a:9a:89:39:5c:31:20:53:cf:46:dd:b0:4f:f0:a8:
ed:ab:71:64:da:aa:18:c5:64:8d:9d:13:02:e1:d1:5c:d3:d9:
33:87:96:4d:1a:49:7b:9c:b7:e5:09:b0:04:90:f4:31:d7:dc:
eb:27:ef:f9:e1:0f:e4:29:e8:5d:5c:f8:1f:ac:a2:ee:12:19:
4d:ae:23:52:5f:ef:b1:0f:a4:fa:9a:82:70:1d:3b:7a:35:a1:
4e:4b:c6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:23 2025 by rpki-client