Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: kaDYG14Quysiy1SI5vm5tS8OceUPJ9uKVSnp53/o1DE=
Subject key identifier: BB:1F:63:AE:45:43:A1:45:2C:98:C9:40:B7:22:B0:5D:0B:AA:77:D6
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 01991DD404788AE6D86FD4040CA6E77C197E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 1658
Signing time: Sat 06 Sep 2025 07:00:57 +0000
Manifest this update: Sat 06 Sep 2025 07:00:57 +0000
Manifest next update: Sun 07 Sep 2025 07:00:57 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: 3zrwBCVE3YuswLIyyodGxLxvabRO3r6x2x0x+QegqFI=)
2: SJe0yiKrFFgre-LwlA373na16-M.roa (hash: W+lZ86QtGfH27JSeGBvOgaus0tZU6nh0IODmn6TYevo=)
3: rXYQihXZcHzDYDPfOCw2uf0QxOs.roa (hash: mgxpGPq3j8kcIVwK/lsmtpT+En8AA3E9GG8LueVY7g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:d4:04:78:8a:e6:d8:6f:d4:04:0c:a6:e7:7c:19:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Sep 6 07:00:57 2025 GMT
Not After : Sep 7 07:00:57 2025 GMT
Subject: CN=bb1f63ae4543a1452c98c940b722b05d0baa77d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:47:62:dc:b4:9d:ff:0a:ac:f5:2d:b9:4c:
a8:9d:19:83:31:87:f0:7a:9c:f6:41:9f:7f:d3:1a:
c2:87:9e:26:59:ec:75:ff:f1:ba:5a:c3:ac:8b:74:
b0:03:63:f8:d7:bd:b9:a5:8e:44:ba:4a:bf:2a:61:
3a:78:3b:7d:42:8a:39:38:99:b8:e3:5b:ad:01:a8:
20:98:fa:09:fe:78:65:53:a3:77:10:86:77:f6:7d:
8c:4f:c2:de:8a:de:ab:4a:58:a9:95:80:35:84:86:
3f:9b:27:9c:0a:97:39:39:c1:0e:10:bb:ef:96:e3:
9e:f8:92:6b:1f:e0:22:13:99:36:59:4b:d5:60:13:
02:94:24:c0:aa:58:26:19:93:72:57:51:26:bb:05:
86:c5:9f:48:cb:0b:80:c0:e3:83:79:60:48:b8:3b:
00:3e:0c:0a:ee:0a:3f:dc:94:1c:d4:97:3f:4e:57:
e9:a3:d2:7d:d4:20:f3:b2:e3:de:6b:a3:73:76:c1:
57:85:c0:06:86:44:80:7d:b7:b8:27:33:ec:7a:ad:
20:67:f8:88:f0:d7:a6:bf:99:50:c2:a3:f8:da:74:
06:ee:ff:41:e6:d5:98:26:b2:c7:72:9b:48:20:7f:
ff:06:29:2e:d2:00:aa:9a:f4:34:90:af:2e:8e:ba:
a2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1F:63:AE:45:43:A1:45:2C:98:C9:40:B7:22:B0:5D:0B:AA:77:D6
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:41:c3:f9:c3:9a:ea:eb:80:d5:d3:40:4f:62:49:96:1b:ed:
92:91:1e:62:e2:7e:64:c6:72:93:18:d7:37:73:ff:3f:3f:70:
50:46:5a:ed:ae:64:ba:9f:50:38:52:a4:45:68:01:3b:a4:c3:
99:64:8e:a2:9b:3f:0c:1a:99:a8:55:49:ec:d0:ed:93:5a:e6:
0f:63:f8:65:64:30:b0:28:53:1a:bd:41:34:a7:22:9f:34:85:
8d:79:87:a1:9a:32:e3:16:42:8d:e1:41:c2:5d:82:7e:99:bf:
bc:10:b2:26:9b:13:6d:67:da:2d:b3:2b:fe:cd:0a:70:27:f1:
ae:3e:00:39:85:b0:e1:4b:f5:01:3b:b3:58:04:39:f3:22:60:
e6:6f:ca:fa:2f:49:95:d4:bc:54:4f:93:34:90:4d:12:32:9c:
49:ba:45:42:39:2c:07:b7:8f:12:15:a9:85:fc:aa:e2:5f:26:
d4:13:1d:0a:81:42:eb:39:54:1e:47:2c:c3:14:b9:cf:04:fb:
4e:a9:6f:e7:5b:44:92:29:e3:b1:24:7f:ea:2c:ef:6b:7a:c4:
9d:de:fa:41:05:a9:d3:26:06:bc:39:b3:5a:3d:9a:47:59:82:
21:17:60:10:11:86:7d:9c:a4:39:fa:84:87:b8:2a:e5:dd:37:
af:2e:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:58:06 2025 by rpki-client