Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: IBzeBP3umlfHCdjIo+kM24YzqL9vL7CFyJPKKbacuWQ=
Subject key identifier: 7C:1C:71:7F:40:76:78:BB:DF:2F:E6:77:7D:C1:20:A1:E9:DB:95:6A
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 0199312507EA469665D9F153E815D0EFEE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1683
Signing time: Wed 10 Sep 2025 01:02:14 +0000
Manifest this update: Wed 10 Sep 2025 01:02:14 +0000
Manifest next update: Thu 11 Sep 2025 01:02:14 +0000
Files and hashes: 1: 0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa (hash: qV9D4m0x0M6TJ4fUI73uoZNgwejKGUBXdkrfKOtrD44=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: osoMf2R4+TTrukzqc3rCX9/jLJ3+pL+mzW0O9VZTUr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:25:07:ea:46:96:65:d9:f1:53:e8:15:d0:ef:ee:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Sep 10 01:02:14 2025 GMT
Not After : Sep 11 01:02:14 2025 GMT
Subject: CN=7c1c717f407678bbdf2fe6777dc120a1e9db956a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:9f:93:b6:9f:f1:c2:f8:8b:f7:dc:93:b9:
6e:90:b8:23:98:a4:f2:9e:4d:e6:e6:61:74:8a:aa:
44:99:d2:a1:30:88:b9:b8:45:55:5c:e3:a9:11:5d:
90:60:9b:92:34:74:9b:0c:60:93:44:e8:a8:e8:fb:
c5:07:9c:22:99:91:65:89:53:53:95:90:b0:6d:f1:
9f:18:a4:a4:38:9f:bb:8d:18:eb:fd:62:a5:6b:d6:
66:a6:48:b8:52:b1:b8:8a:4c:33:af:05:06:46:2d:
1f:2a:11:9d:b8:bc:77:c6:8c:70:01:a6:96:b0:1e:
17:e7:a2:9c:54:04:35:99:73:92:16:ba:ad:33:f4:
b5:cf:bf:12:1a:72:03:4f:91:16:e5:ae:72:03:1a:
74:92:38:ce:b0:a5:04:73:88:b7:53:33:47:e1:1f:
84:68:64:ec:03:7b:3c:78:f8:cf:bf:eb:fc:46:b5:
88:4b:1d:59:28:35:78:d6:b2:39:28:e6:3d:5a:de:
d5:99:f5:b7:5f:62:80:02:f1:1e:db:34:24:11:2d:
80:a5:64:3d:c8:5b:4f:bb:cb:02:fd:dc:c2:a0:8f:
d5:45:e7:8e:2d:a1:48:89:d9:89:c2:fd:31:ef:78:
99:0c:da:b0:c4:9b:25:b2:e2:37:00:b5:0a:b6:d4:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1C:71:7F:40:76:78:BB:DF:2F:E6:77:7D:C1:20:A1:E9:DB:95:6A
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5a:1e:72:ba:da:b3:3d:27:db:44:68:b3:64:f3:bc:3d:73:
90:49:a7:47:0f:cb:1b:6a:2f:d6:b1:23:03:cc:9e:5d:fb:82:
6e:e4:ba:7a:2b:32:cd:39:28:3f:48:07:bd:9a:c2:a9:dc:3d:
33:50:52:4c:57:a1:15:99:c2:4a:61:a7:1c:94:3b:4e:ff:b2:
11:e5:2f:f0:df:ce:61:eb:f3:59:2f:22:ba:c5:b0:58:15:ab:
2e:6a:bd:a9:0c:8e:b5:2d:a8:f4:14:7a:4f:79:93:17:96:cd:
fc:29:e4:6a:22:e3:86:4f:26:4c:b9:21:39:51:b4:45:99:27:
bc:37:91:09:75:ad:8d:58:1e:83:f3:ec:38:6b:de:a1:8d:4a:
ce:9a:e0:b3:a3:18:9e:d3:d6:59:1b:ad:dd:f1:2b:56:a1:4c:
75:c8:69:a9:82:56:7b:45:a4:cd:a9:55:12:ac:2b:c0:7c:5e:
98:9e:72:ba:f5:7a:a4:47:28:57:86:5a:a2:34:46:87:2a:b0:
ee:de:0b:80:55:41:a1:22:cb:cc:8f:c3:4b:89:aa:0b:00:b3:
8c:0c:68:c8:89:32:61:65:ed:93:98:61:09:e7:5b:ea:fb:59:
d7:84:29:5c:4d:ba:0c:de:df:50:0d:b8:dc:a6:37:fb:05:c2:
3a:aa:b1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:36:52 2025 by rpki-client