Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: MKlISzK9t+KlyaQkiSAmvEazI44+psbvPWK0xb27K50=
Subject key identifier: 3B:7C:DF:30:D8:32:71:A1:5B:CC:49:AE:56:2B:F4:6A:76:D4:9A:BD
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 0199375C6DABBDA7773AF9E1A54F5173D569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0881
Signing time: Thu 11 Sep 2025 06:00:28 +0000
Manifest this update: Thu 11 Sep 2025 06:00:28 +0000
Manifest next update: Fri 12 Sep 2025 06:00:28 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: AvZyEauXH32w4jZGfGb6FpdFxX4yde89HqFiqNuk0WU=)
2: N6LVOXDpApHcakcmSkzmPFC6k_k.roa (hash: JBlMcthOLqVJmLIR25J/oCOwYGgINMhp1piHtiBmVPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:6d:ab:bd:a7:77:3a:f9:e1:a5:4f:51:73:d5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Sep 11 06:00:28 2025 GMT
Not After : Sep 12 06:00:28 2025 GMT
Subject: CN=3b7cdf30d83271a15bcc49ae562bf46a76d49abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:9c:d9:af:0c:4c:3c:47:e7:f1:c3:84:07:
1b:d8:89:3a:d8:ff:bf:bb:ed:fb:c3:68:04:f3:e9:
cc:69:91:85:7a:3d:a1:df:16:33:7a:0c:7b:81:a5:
79:88:dc:7b:44:93:5a:ca:1a:d1:f3:7e:26:81:cd:
cd:fb:55:40:bb:e7:a5:e6:f0:e6:02:85:f9:b2:d1:
52:f1:6f:0b:a9:da:e9:57:d4:11:79:72:a1:1c:82:
49:57:f8:b9:a2:c3:72:55:b9:08:7e:10:15:76:23:
f5:1d:7f:cc:e0:58:a7:a2:e4:e0:20:34:ca:07:34:
dd:36:f8:57:79:1d:89:57:02:dc:82:17:be:9c:f1:
b4:b6:b1:6c:2e:8d:8a:f3:83:be:dc:bc:53:74:4b:
ba:7b:ec:2e:be:84:d7:31:69:70:c1:4d:c5:a6:c0:
6b:e1:af:d6:b6:1a:88:43:b5:30:9d:83:39:81:9e:
8c:ab:d5:b2:bc:f2:31:8f:08:ab:f4:5e:4f:33:65:
3a:3e:60:6c:e0:24:bf:32:c3:cb:1b:f8:98:3a:3a:
ce:64:02:5a:e6:bb:24:4f:ac:6f:31:83:28:9a:16:
ef:93:a9:34:ce:a1:cf:91:1a:af:38:c7:fd:b8:8d:
50:4b:c2:b2:b6:5f:e7:60:dd:ed:6e:6d:a0:fb:23:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7C:DF:30:D8:32:71:A1:5B:CC:49:AE:56:2B:F4:6A:76:D4:9A:BD
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3a:48:a2:ce:72:a6:9c:c1:08:b6:4e:69:2a:e2:59:96:9c:
75:3e:f8:77:08:5c:cc:a5:6e:fb:fa:10:fd:34:94:00:a2:9a:
a9:68:41:4d:b9:a2:0e:4f:6d:b8:96:8b:a5:62:f6:35:85:0d:
1c:41:80:d4:54:fa:26:ce:26:96:fa:2e:14:c1:26:64:df:f7:
ef:f7:58:7d:a3:44:ac:71:8f:bd:99:bf:eb:24:60:20:61:72:
cb:ac:b2:e6:7f:df:00:90:4e:78:68:2f:f6:95:39:50:9b:3a:
3d:6b:b9:7a:dc:1e:cd:9c:11:8a:99:05:88:8a:38:b2:ff:99:
98:37:32:7b:fb:ee:1c:0a:0d:11:e1:79:e9:17:fc:50:a1:0a:
d7:e5:8b:bf:59:01:31:83:d6:5e:e2:3e:91:e5:40:5f:de:a5:
4b:05:59:be:67:9b:85:9f:7b:4a:c2:2c:bf:41:bc:14:01:2c:
e5:64:6f:49:e0:e8:d0:a7:f9:25:31:7b:09:9c:3d:87:c5:e5:
b4:02:e1:95:50:d2:dc:a4:62:dc:ae:cb:79:b4:ee:d5:bc:40:
7a:4a:16:ad:bd:47:30:dd:8a:24:4f:8f:39:77:fa:4f:f2:19:
4f:5d:f8:b7:de:af:c3:80:27:e8:f7:14:64:7b:16:bc:11:2c:
3f:fe:5e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:54:47 2025 by rpki-client