Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: v3F+V+GlghTWWxii+sGIdkRxIltYHzcqVRTwkBmd1oU=
Subject key identifier: 31:24:CF:53:BA:AC:57:2D:19:34:4F:32:07:1E:FF:A5:F1:E4:59:97
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 0199239F2401E52FF8547761650A11C7C50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 1475
Signing time: Sun 07 Sep 2025 10:00:55 +0000
Manifest this update: Sun 07 Sep 2025 10:00:55 +0000
Manifest next update: Mon 08 Sep 2025 10:00:55 +0000
Files and hashes: 1: BmvH7Z7uqcJeleMQ8G7clQImys0.roa (hash: lHLdYcAsPsm30xzIk5bUgfaHNZnvFrDG5BK0e9ZCPyo=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: +DwbBONtBIlC6w4+iC3PF7vfcsTdcA5FAwz0ZJcLddg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:24:01:e5:2f:f8:54:77:61:65:0a:11:c7:c5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Sep 7 10:00:55 2025 GMT
Not After : Sep 8 10:00:55 2025 GMT
Subject: CN=3124cf53baac572d19344f32071effa5f1e45997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:76:83:a2:27:0a:cf:2d:b9:df:7f:8b:cd:52:
06:7d:0a:7c:74:d0:60:d5:c0:1e:84:d4:ac:10:63:
ca:c7:ec:c6:78:20:7d:73:5c:2a:8e:5b:78:44:c3:
37:59:9a:22:43:94:6c:39:46:a4:ee:f8:1f:8d:3c:
93:75:f5:34:f8:7f:66:24:ae:24:36:e9:da:cc:3a:
5d:d8:49:66:77:b2:55:f6:0b:44:44:b1:0d:8d:4b:
00:c0:d0:3b:f9:15:1b:f8:25:ab:e1:28:f1:d4:98:
ab:21:54:81:de:e3:31:dd:cd:3b:5d:a6:b9:87:4e:
86:b2:84:61:c6:9c:42:27:f9:cb:dd:44:8d:0a:5e:
02:17:67:25:4b:75:22:44:45:9e:24:9f:61:2a:c1:
af:20:7c:83:f8:34:9c:a1:d5:ae:4a:28:fa:71:3b:
c4:34:8a:fa:d0:87:81:c3:fc:b6:66:35:d4:f0:4f:
2a:e8:b8:45:e1:52:d8:fe:a0:b7:00:73:9b:42:90:
57:fc:47:fb:b3:0d:7a:0b:5a:e0:75:73:e5:45:d6:
e1:b8:33:b8:93:cd:42:b8:a0:d1:05:12:17:43:99:
b3:04:68:35:3d:02:65:31:cc:0d:7e:17:ee:cf:6b:
7c:5f:b4:5e:ff:a8:f5:86:3e:27:e8:13:08:f3:9b:
ba:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:24:CF:53:BA:AC:57:2D:19:34:4F:32:07:1E:FF:A5:F1:E4:59:97
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e7:2f:94:01:20:d5:02:a2:f3:f9:b2:13:58:fe:e2:1b:45:
eb:ac:3d:47:d4:d1:d9:7e:73:d3:f8:f8:8f:0b:fd:3d:6f:fa:
8d:35:35:3b:5f:0f:d0:6a:87:f5:b8:f8:8d:f0:f4:da:1e:89:
13:56:56:33:1a:98:7c:85:87:21:fe:3a:4c:2f:12:89:4c:5b:
f0:eb:81:86:29:a0:40:5b:f9:66:b7:de:28:27:23:70:53:25:
49:7a:06:2b:3d:42:aa:0a:54:69:36:08:4f:54:58:7d:88:08:
49:ff:d5:7b:1b:45:4f:7a:81:56:29:0c:5d:ad:a5:55:1a:4d:
43:30:5e:a8:30:78:df:6f:35:b4:04:e1:d5:92:ff:2b:d3:36:
0e:22:2e:3e:94:8e:32:5e:a7:45:01:f9:df:89:b7:25:3f:a8:
6b:96:98:a5:8d:89:22:bf:61:9d:74:a5:16:b6:2c:ab:9e:b7:
e8:8c:59:8d:be:a9:ce:34:0e:ab:c9:1d:b0:db:68:e3:bb:85:
06:18:39:48:78:96:e9:bb:b7:b4:37:a3:6e:5b:14:bc:21:8d:
f6:73:03:9d:9d:7f:d2:da:30:fb:f1:80:47:bc:d5:4e:ed:67:
12:64:c0:86:9c:3a:1e:06:51:3f:53:2b:d3:cd:08:69:3d:05:
a7:69:b2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:03 2025 by rpki-client