Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier: E9lD7e1xcfpOzn68CLEe+mWTsoJ9a37EbvqP/46Eydk=
Subject key identifier: 46:8F:B5:43:A0:31:C8:2F:5F:EB:CA:07:8B:84:53:BD:E6:C0:CA:3A
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 01991AD2CBDE751E0F33C60FABC99F9E40AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number: 0E86
Signing time: Fri 05 Sep 2025 17:00:46 +0000
Manifest this update: Fri 05 Sep 2025 17:00:46 +0000
Manifest next update: Sat 06 Sep 2025 17:00:46 +0000
Files and hashes: 1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=)
2: 3gHc2sELy-q8GzBNb0pGNEAUeSU.roa (hash: +uoA4jjzPF6dggZHTrB3SBkyhtONGCYmRKaDkDvy7ys=)
3: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: gWX2Bp7dZq2VdGLo85OCrapcc2ScEtwCYvgq/AEfsQA=)
4: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=)
5: S5ZKnLfz4DstONEqZm_YmyZ8kvY.roa (hash: X0rSxal4LbSgFqA0+FsHMQ78+/EIGLIojbhDJzOesXI=)
6: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=)
7: VunL007YcgdB0SQwEVqZksZS8Fs.roa (hash: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=)
8: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=)
9: xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (hash: 9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:d2:cb:de:75:1e:0f:33:c6:0f:ab:c9:9f:9e:40:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Sep 5 17:00:46 2025 GMT
Not After : Sep 6 17:00:46 2025 GMT
Subject: CN=468fb543a031c82f5febca078b8453bde6c0ca3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:63:57:4c:88:61:07:88:b8:9d:32:59:74:
ac:f1:d4:ee:b3:ea:6b:8a:1d:62:2b:74:cd:2e:6d:
28:b2:37:16:3b:93:9d:04:b7:0f:32:7a:e6:af:94:
23:e8:90:5a:98:71:dc:69:ed:8c:96:c1:23:ca:84:
18:52:2c:8e:ac:4b:60:7f:e9:36:d3:af:79:42:38:
ad:16:7c:16:a4:0c:12:c0:2c:92:2f:0e:f1:1b:08:
61:ba:31:f9:be:f9:54:7b:4d:34:23:da:15:c8:d7:
60:38:81:fa:c5:02:ca:1e:c1:4b:8d:e0:a1:34:b8:
42:ca:54:11:32:0d:2c:ab:d6:ff:23:f8:28:cf:a4:
ea:5b:0a:8e:33:f2:d3:43:a7:70:2f:53:6a:e0:29:
77:c0:ea:b5:17:c2:a2:97:1f:de:02:87:9b:39:79:
b7:a3:a9:d4:8f:4a:9f:02:d1:0f:bd:8d:2d:30:38:
ab:64:b3:ff:46:a5:84:dd:c8:9f:04:58:b1:8c:2c:
f6:80:bd:d6:75:7a:2b:b8:f2:b6:5d:d4:92:0c:f5:
26:f3:a9:2c:9d:d7:23:2b:a1:71:63:1d:d4:19:cf:
44:c8:1f:bf:65:b1:de:c8:9e:e9:7b:5a:25:fe:e2:
d7:9f:6f:ff:d2:0a:43:66:bc:da:38:eb:e5:cb:94:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8F:B5:43:A0:31:C8:2F:5F:EB:CA:07:8B:84:53:BD:E6:C0:CA:3A
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:15:f9:1c:12:d1:ed:2b:5e:9b:0c:c4:18:b5:6b:61:8c:00:
b1:cb:18:88:97:36:b7:cb:01:0f:af:c4:d6:e3:16:7c:69:9c:
38:45:b1:9d:a7:33:f5:13:a4:86:98:11:4b:4d:b2:04:da:c0:
1b:03:65:66:e3:3d:a5:2f:b2:f4:12:85:55:90:c4:dc:3a:eb:
48:c6:e4:06:74:cc:7d:02:2d:00:a7:5b:28:eb:b3:2e:2e:24:
11:6e:2b:a6:1a:8a:a2:22:c4:67:b9:cb:24:5c:55:3b:8b:ef:
30:43:72:fd:5c:33:2c:b1:e8:51:bf:39:5f:c2:b6:a0:c2:a6:
6e:9b:92:d1:a6:9c:02:dd:ca:ca:7f:39:92:98:58:f5:97:4c:
fc:3b:04:d9:9b:47:7c:6c:8b:a9:7c:17:03:7b:be:91:6d:2d:
86:82:a5:68:6b:59:08:94:f5:9b:82:31:1f:7b:69:c0:c3:90:
4b:58:79:ad:ea:19:80:34:de:d9:6b:c1:8a:72:02:b5:0d:6c:
fa:b8:9e:c6:17:5a:7c:d6:d8:ad:96:9a:f5:c4:dd:49:86:c1:
b8:43:0b:2f:63:d7:1b:d9:db:57:30:7f:4e:90:e9:c6:47:46:
69:67:61:b9:02:b8:8a:91:9b:d2:f2:be:b0:64:6f:ba:9e:63:
e9:e6:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 17:49:00 2025 by rpki-client