Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
File: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json)
Hash identifier: 6R/py6nsP9FGvpvB2M1asPC+Lwixntw/5+XyovLbkeM=
Subject key identifier: C2:38:D1:6A:80:A8:49:B0:C1:76:C7:C2:85:F4:62:C3:76:88:11:46
Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Certificate issuer: /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Certificate serial: 0199228CF17B66946921B3CFDBE4595B2855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
Manifest number: 0C
Signing time: Sun 07 Sep 2025 05:01:26 +0000
Manifest this update: Sun 07 Sep 2025 05:01:26 +0000
Manifest next update: Mon 08 Sep 2025 05:01:26 +0000
Files and hashes: 1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: QqVsh2T45lNspxfqNkajc2uBV/3wk9q8cDHhrlT0Ivg=)
2: f1Mto9GzcPc4M2Oix0yJMh6toWA.roa (hash: 84CvNJo6FYo7qJUGi59PScidN7rKl7gKNL3hWWKJ6Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f1:7b:66:94:69:21:b3:cf:db:e4:59:5b:28:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Validity
Not Before: Sep 7 05:01:26 2025 GMT
Not After : Sep 8 05:01:26 2025 GMT
Subject: CN=c238d16a80a849b0c176c7c285f462c376881146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:d0:e9:89:8a:a6:62:94:d0:e0:97:c0:97:
90:07:0c:77:e6:29:0f:13:62:47:44:90:18:d7:50:
d6:9b:9c:57:ce:b7:fb:39:61:68:70:26:b1:ac:15:
83:43:be:45:c3:92:93:e0:da:ed:3f:90:46:11:2f:
3d:d0:c7:d6:74:76:1d:9e:c3:ec:23:d4:dc:cc:d7:
33:51:d2:45:16:88:07:5c:7a:a9:0e:ac:df:7b:f5:
14:88:8c:a3:1e:6c:a2:b7:21:1f:c1:55:28:c6:cd:
a4:ae:66:c6:46:58:25:b3:ca:39:ff:c6:4e:63:f3:
64:95:2d:99:6b:3a:93:8d:1b:95:9d:6a:0b:f7:6b:
59:f8:69:00:93:73:9f:39:64:25:bf:24:c6:71:76:
50:e8:20:29:cb:b5:12:f0:82:48:6d:5b:d3:46:d1:
a9:d2:d8:65:52:31:d9:eb:f7:81:cd:be:d5:29:e7:
0d:1f:92:2f:d7:3c:b9:a6:d1:60:9e:6a:a2:64:25:
65:9e:8a:78:07:e5:02:d6:39:1a:4d:68:16:e9:12:
21:11:21:b8:44:09:f8:fc:64:9b:c7:d4:2f:15:de:
7f:0d:bd:a1:79:ee:97:4b:41:a6:04:69:12:39:4d:
96:f4:bb:18:32:9b:0d:39:c4:7a:24:9c:34:72:af:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:38:D1:6A:80:A8:49:B0:C1:76:C7:C2:85:F4:62:C3:76:88:11:46
X509v3 Authority Key Identifier:
keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0f:7d:ba:65:02:c4:cc:97:1e:92:ec:95:70:58:3a:e6:17:
57:73:27:87:6c:93:bc:67:22:6b:a7:52:27:d8:95:92:6d:eb:
8d:6c:12:5e:8d:bf:12:d2:ac:3e:a6:95:6b:87:ea:53:85:10:
67:d4:4f:55:e4:73:ae:ef:b8:80:9b:38:63:4f:ad:82:fa:e8:
8a:e0:ae:9f:bf:4f:34:16:7f:06:2c:e7:5a:93:80:2b:7a:35:
e4:49:8d:a3:e0:cf:77:89:a4:3c:66:67:40:ad:90:03:16:9d:
73:98:c2:7e:ae:d2:c3:de:2f:40:0d:47:1a:de:40:8c:92:ad:
60:72:84:35:5d:4c:63:e4:e0:59:14:6f:31:76:70:6a:28:c5:
81:85:cc:14:26:39:7a:1e:b3:55:99:27:bb:dd:dd:cf:57:7e:
83:11:06:d3:7e:c8:d5:cf:26:14:a0:7c:87:04:b3:31:89:51:
35:38:af:71:92:1c:94:28:6b:86:b8:5d:ef:87:ac:56:a2:46:
9b:34:b5:ff:fd:f6:e0:4b:ac:5d:1a:a0:fe:ab:99:9b:fe:98:
af:2b:ff:ca:b0:b5:ab:6c:34:38:2f:4b:d6:db:1e:2e:29:8e:
a0:ce:2a:1f:d0:49:cc:12:39:93:35:48:3a:f7:38:ec:3d:92:
dc:96:06:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:55 2025 by rpki-client