Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: vk2m8FHuT92cFf+Nku7i62mD2SdSehlo36zaK4jS+Xo=
Subject key identifier: 8F:9E:89:26:9C:F6:65:E1:AA:7E:11:4F:A9:63:CE:B1:83:A7:F7:56
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 0199315A76CF1EDC8C28ED200FCF0F1311D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 1688
Signing time: Wed 10 Sep 2025 02:00:36 +0000
Manifest this update: Wed 10 Sep 2025 02:00:36 +0000
Manifest next update: Thu 11 Sep 2025 02:00:36 +0000
Files and hashes: 1: 9-NB3ppe0EfeL2Nj37oF8VJ41t8.roa (hash: ZMKYndtOmSHpSKO5kfkDg42yZItGmF3H5NrIrUVaQPk=)
2: W3ef7yk_8thOKV8fePQf_c3aBKs.roa (hash: q4TpxDQr4+wv6OyV3D6r4UE1e0P7/7+4PMrtZl4uXJc=)
3: YRU1Ojg5qyXEoXOhvO7oLvQPC8c.roa (hash: TDJgwlET1jOQj6C/tybMD3s4rcsYrcr30h1aS7JqjFc=)
4: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: ll7q/2JGBPq95CswthLlUirx11aNnwW5Q6JnljmbK/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:76:cf:1e:dc:8c:28:ed:20:0f:cf:0f:13:11:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Sep 10 02:00:36 2025 GMT
Not After : Sep 11 02:00:36 2025 GMT
Subject: CN=8f9e89269cf665e1aa7e114fa963ceb183a7f756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:24:73:a3:4c:a5:28:73:f3:b1:0e:c1:98:
b1:bf:04:b8:79:b2:29:42:ba:7b:90:f8:0c:f2:4b:
fd:86:e2:52:42:c5:20:ff:8d:51:69:49:0d:49:65:
f7:44:02:b5:63:3a:43:20:9f:84:45:cc:41:6d:72:
f6:6d:9a:f2:31:12:c6:34:1f:85:1f:23:73:0d:67:
56:70:3b:46:f4:2b:ce:5f:71:5a:a1:a6:9b:cb:23:
4e:2d:c1:62:8e:77:b8:7b:a2:49:29:a4:86:0f:f4:
7b:47:c4:4d:ce:30:d8:f0:c8:3e:0e:58:30:91:f5:
5f:01:80:d1:2d:08:35:ed:11:3f:02:19:41:e1:36:
fa:16:94:38:1f:6b:90:1b:fe:4d:50:39:8d:30:f4:
f0:58:bb:46:b1:e8:70:9e:9c:f1:1c:9c:af:9c:ac:
53:c4:05:cc:08:2c:5c:e7:97:e5:fa:d2:c5:a3:4c:
4e:ca:71:0d:c7:ff:b7:23:27:57:4d:93:25:1d:56:
13:39:48:d4:b0:00:79:44:19:07:6b:b3:6c:f2:93:
cc:2b:f8:93:14:c4:15:27:69:fe:1b:ac:24:31:27:
0a:49:46:e0:1e:78:d4:2b:54:71:eb:c3:5b:21:7b:
70:0f:80:b4:44:db:8d:3b:32:b6:f4:d0:d9:9d:99:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9E:89:26:9C:F6:65:E1:AA:7E:11:4F:A9:63:CE:B1:83:A7:F7:56
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6f:81:5c:62:6f:d8:e4:5c:a5:e3:01:3a:4b:da:0f:31:eb:
e6:d1:90:75:7d:ef:04:f3:83:57:ad:72:bd:50:3e:03:85:f1:
d5:23:a0:73:2d:fe:b8:ed:9b:13:1f:53:41:6d:a5:5e:1d:33:
02:da:15:f8:75:c5:e2:d5:0d:da:0a:07:fb:ab:84:dc:19:0f:
21:05:aa:26:aa:54:15:1f:af:e0:98:4b:e8:5d:12:7a:80:d5:
49:38:cb:e1:6c:b5:94:43:f2:b4:ab:2a:55:76:ab:bd:cc:ca:
c3:ea:5c:51:59:f4:ad:d7:2f:da:c9:c3:1b:b8:5c:64:5b:51:
8b:9e:54:e9:7b:2e:f2:49:95:c1:02:8b:4a:79:fb:ba:06:34:
4a:fd:63:65:47:1f:65:ba:47:5d:29:56:18:65:3e:35:a1:ff:
68:24:11:5c:d0:f2:52:4e:13:b4:9f:c7:5a:2a:7c:4c:68:38:
36:43:63:5e:47:07:18:53:0c:5a:95:46:a1:19:0a:f7:70:87:
0d:64:be:12:5c:63:d7:2a:05:fb:35:0e:be:70:f1:39:8e:12:
11:10:12:7f:db:e3:53:6a:df:dc:19:98:74:ff:12:2b:35:67:
79:a9:a5:43:6b:be:d4:d6:94:48:49:25:77:05:37:ee:d6:7c:
a2:b8:07:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 11:45:42 2025 by rpki-client