Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier: ukuq2hoDTWyRNPf0+dJ0+Q5s/cAWydFFmcWvVxl/6m8=
Subject key identifier: 8F:7B:B2:42:5F:81:AF:D8:18:FC:15:52:46:17:91:2D:4A:4D:8E:D0
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 01994F654DBD7130C5D1B0771FEAC47792A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number: 066D
Signing time: Mon 15 Sep 2025 22:01:02 +0000
Manifest this update: Mon 15 Sep 2025 22:01:02 +0000
Manifest next update: Tue 16 Sep 2025 22:01:02 +0000
Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: H6kdFDm2sikKfNmkaZWt6ZSh3XPTVCnOb+Izw/OcPCU=)
2: iKhGCzGlkdUH-YeR40es_shy-iQ.roa (hash: UctZx1wGvAAr9xLOczqP8p1as4JR/y4gz7WSAX7sYrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:65:4d:bd:71:30:c5:d1:b0:77:1f:ea:c4:77:92:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: Sep 15 22:01:02 2025 GMT
Not After : Sep 16 22:01:02 2025 GMT
Subject: CN=8f7bb2425f81afd818fc15524617912d4a4d8ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:59:fc:1b:97:cb:bb:78:e9:51:f2:c4:5c:
30:46:3b:6f:20:d7:6e:90:d6:c5:50:62:85:01:53:
fb:de:b7:4d:18:66:f1:c1:a8:c6:bc:d5:38:42:40:
4d:7c:d6:65:ae:5d:79:d4:ec:b0:5b:07:72:27:dc:
70:7b:53:9b:b4:5e:ca:47:e4:0a:5f:ff:24:a6:2d:
89:87:f1:a5:8f:c0:cb:ee:41:79:a3:27:c7:d3:41:
92:d1:74:20:8a:87:20:da:f6:eb:b0:8c:7b:f1:58:
5e:6a:96:33:87:23:12:c3:f3:47:00:ef:df:68:03:
f2:30:96:17:8d:d5:36:d2:cd:3a:bf:0e:c1:0a:45:
8c:b0:69:ec:8b:18:fd:a1:e3:14:97:1f:61:74:e4:
cc:f9:80:59:cf:fe:a2:fb:8a:b6:cb:63:d8:db:43:
08:1f:36:f9:f9:1b:94:26:78:9f:53:07:0d:ea:7d:
76:fd:59:0b:d1:6d:79:c5:6a:df:85:5d:69:9e:87:
c7:51:93:77:23:bc:08:6a:98:fd:42:eb:8a:d7:f7:
7c:17:e0:a4:8a:87:59:ae:88:0b:95:cc:d4:a0:64:
2d:b6:7f:c7:3e:e9:6c:5f:e0:24:2e:db:65:4d:3e:
a8:ba:0d:94:0b:37:64:b1:7e:f2:33:8b:2e:e8:23:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7B:B2:42:5F:81:AF:D8:18:FC:15:52:46:17:91:2D:4A:4D:8E:D0
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f7:be:4b:0f:7d:49:63:2b:67:84:4e:cf:1e:3e:55:fa:c0:
b8:b2:1b:28:e6:f1:a7:4c:02:08:23:39:77:73:7e:c8:b7:06:
6f:40:fa:a2:18:e3:e0:38:eb:39:21:2b:51:8b:b6:2b:c2:4b:
b9:a4:94:3d:12:19:2f:c0:7f:31:7f:3c:3e:9d:f3:d0:7a:b9:
f2:06:af:47:8a:2c:3f:3f:4f:ac:b8:70:b2:29:a9:8f:9b:02:
01:4a:c6:cd:35:b7:b9:ce:7a:ca:d9:7d:af:ca:10:18:13:d9:
22:c7:32:57:4b:29:25:e4:b4:34:46:86:9d:d1:a8:c6:05:63:
e2:35:15:7a:31:cf:0d:64:5a:73:9e:3c:c4:ac:6b:2f:30:83:
97:2c:64:8f:bc:bc:aa:1b:ab:3c:97:df:18:58:46:0f:74:4b:
22:65:d4:4b:f3:a4:7c:e4:03:ca:4e:a5:01:be:08:62:d8:ba:
dd:6d:8c:30:34:30:b8:6d:5c:df:c5:15:b9:33:49:a3:74:f2:
aa:df:4e:23:93:d1:39:89:8c:21:3a:7e:28:9b:99:3a:9e:70:
15:8d:b3:ff:06:e7:c7:bb:6a:49:63:c1:91:05:09:a7:ff:18:
df:f0:7c:32:47:28:4e:54:af:e4:88:2f:75:25:34:6b:eb:38:
4c:33:cd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 06:33:37 2025 by rpki-client