Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: SsEg1PkrJCbiTxdKz464roDt3Y5HE+vnIIh47zJr8bE=
Subject key identifier: 8E:D5:B9:0F:E9:F5:CE:C5:9E:DE:16:3C:63:C0:39:0D:B5:B2:EB:F6
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 019922FA499C17BE8A267FE067F152A8957E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 0A21
Signing time: Sun 07 Sep 2025 07:00:52 +0000
Manifest this update: Sun 07 Sep 2025 07:00:52 +0000
Manifest next update: Mon 08 Sep 2025 07:00:52 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: FW/6ZFkkBrBfcab1OPjAfJ8C845eTunkI9X99/QJm/E=)
2: JFMyA-XTfzJ98LwUaDo6uCal6eE.roa (hash: 53iyOJ7/FikpZ4x6oYvSunvmMxLDuiMuvaZO1jcps9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:49:9c:17:be:8a:26:7f:e0:67:f1:52:a8:95:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Sep 7 07:00:52 2025 GMT
Not After : Sep 8 07:00:52 2025 GMT
Subject: CN=8ed5b90fe9f5cec59ede163c63c0390db5b2ebf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:26:d9:0d:a6:ed:05:02:49:89:74:a6:a5:
48:05:05:2f:07:29:3a:d3:03:6e:94:ae:e8:15:d8:
fe:03:65:01:8b:60:d8:89:dd:32:f8:0f:c7:17:a0:
76:9d:68:08:44:08:16:f0:c9:4c:cd:7d:57:7e:f8:
b2:ae:69:a4:97:57:68:f2:0c:f8:eb:65:58:f5:54:
ef:50:cc:71:06:f8:7c:b7:6b:65:84:5d:7f:98:6b:
2f:83:3a:7c:d3:38:91:5f:24:62:62:61:8c:b4:ea:
93:90:d2:38:f9:3b:ce:40:e2:06:b3:92:22:65:63:
76:fe:87:e3:fe:f9:ba:a1:51:ad:cc:69:99:76:c6:
a1:f9:3f:d3:bb:f4:75:37:2b:b4:ee:3f:fe:30:10:
fe:05:cd:83:34:69:23:72:24:5c:d1:ea:97:80:7e:
0c:8c:e0:60:ad:1f:80:ff:58:8d:e9:a2:87:7c:18:
7b:00:2f:3f:8b:ad:ea:ac:93:c5:4c:c9:b0:f3:ce:
c0:07:07:96:ef:27:e2:60:ee:ff:7e:30:26:32:19:
e0:e7:fa:40:ad:ff:c0:c6:32:c3:ba:d6:75:b5:7e:
4a:da:62:1f:85:13:d7:b1:1e:01:54:ef:92:db:8d:
1f:4d:b2:22:15:79:a3:6b:04:6f:18:b2:13:30:4f:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D5:B9:0F:E9:F5:CE:C5:9E:DE:16:3C:63:C0:39:0D:B5:B2:EB:F6
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ea:11:0d:44:af:2f:d8:04:5c:ee:f4:65:46:e7:1c:2a:bf:
0e:2e:75:75:7b:d9:bf:53:78:d1:9b:c9:d8:b6:35:8a:e7:a7:
ee:0d:ea:74:a5:0b:43:14:c3:3a:da:90:69:0c:5e:99:4a:48:
5c:2c:f6:7b:05:4b:70:20:79:10:dd:cc:8b:03:06:a5:cc:45:
4d:a3:3d:c2:41:c1:dd:da:35:ef:a4:3f:e5:11:58:5e:be:5f:
67:80:1f:10:87:74:15:3f:62:8f:0f:65:7d:e7:f9:21:cf:04:
f7:15:ef:5b:7a:e8:ae:f1:c5:6c:c8:f0:6c:ec:05:db:45:f0:
e8:de:a5:ea:57:6f:ea:9c:da:02:ea:20:c0:89:b8:b6:12:55:
f9:dc:a0:97:6d:6c:5a:1f:c4:07:e8:36:d3:b4:93:8c:19:a5:
9e:a8:7c:75:51:5d:47:af:65:00:f2:11:6a:95:b8:0f:e4:66:
41:6a:8e:f2:a2:f7:1d:44:c6:9d:41:96:98:f5:50:5f:1f:ca:
86:7e:46:d0:04:5d:6c:98:46:c8:1a:c7:e9:a9:dc:84:63:6f:
06:3b:0a:cc:94:a7:c6:c2:a3:68:71:0e:5f:c8:d6:f0:cf:5a:
99:8e:a1:24:ed:82:78:7c:52:a6:87:14:a7:d0:cf:13:10:95:
a0:38:3f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:37 2025 by rpki-client