Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: kpCjzLb+tEgiKxyL9ugqjLXWvJ9ssobQPYGCiRgayFo=
Subject key identifier: 60:D9:35:1E:ED:14:04:1E:F1:C7:38:2F:A5:A0:5F:38:BE:91:33:5D
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 0199315AF782109E1439ADB1C124970A4C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 0762
Signing time: Wed 10 Sep 2025 02:01:09 +0000
Manifest this update: Wed 10 Sep 2025 02:01:09 +0000
Manifest next update: Thu 11 Sep 2025 02:01:09 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: hxGmUMEhbSrDrPxnndEKhANxafhT+12i4CbZ4YXnOGU=)
2: goyOFyNzCSnjNoSGUslWBJblZKU.roa (hash: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:f7:82:10:9e:14:39:ad:b1:c1:24:97:0a:4c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Sep 10 02:01:09 2025 GMT
Not After : Sep 11 02:01:09 2025 GMT
Subject: CN=60d9351eed14041ef1c7382fa5a05f38be91335d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:83:6f:c7:f4:c7:38:b7:7b:cd:44:3e:9b:
db:77:e5:aa:45:7f:76:55:76:24:07:99:7f:f2:48:
ca:d1:dd:3e:fc:39:51:4c:a0:99:16:f3:48:40:5f:
c9:a0:57:04:38:8b:85:4c:85:ec:37:70:a3:89:34:
5f:07:19:77:b9:56:46:05:62:1b:a8:47:3a:bd:3d:
59:3f:95:a0:43:ac:63:25:40:7d:91:bc:59:b1:55:
52:6b:58:96:42:ba:b3:ef:7b:0d:dc:bf:a2:af:50:
6e:f3:76:dc:87:9b:ff:22:3e:c1:5e:78:41:ee:ed:
ee:ed:13:a8:23:40:c7:b9:b0:a0:96:92:0a:e5:30:
ea:27:53:b1:8d:69:8a:7e:ef:d6:ce:bc:02:8e:f8:
9c:2a:b1:32:a7:d1:68:12:94:ca:4b:c6:49:2e:49:
ca:78:52:30:e2:bb:69:8b:6d:ac:0e:5b:6a:33:af:
e4:3e:9c:45:ab:4a:92:6c:03:3c:e3:75:e5:35:83:
ac:29:bb:d2:4b:9c:05:f4:81:ea:42:38:c9:83:16:
83:85:56:c3:00:fd:7f:0e:99:46:28:0a:78:9c:66:
7c:e0:f9:56:1b:17:65:25:a2:2b:36:ea:97:ef:f6:
cc:10:ea:cd:1e:50:4a:a5:8b:54:8c:09:97:93:72:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D9:35:1E:ED:14:04:1E:F1:C7:38:2F:A5:A0:5F:38:BE:91:33:5D
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:40:30:72:c6:dd:73:84:d7:41:9f:5c:22:34:10:be:81:ee:
3e:dc:7d:17:58:35:4a:59:35:d4:bd:5d:84:19:ac:2f:71:02:
8e:49:9a:32:e8:dc:8f:94:95:1b:1d:b1:74:2f:8b:d3:8f:20:
78:07:f8:f8:46:52:d6:c5:34:4e:66:2a:76:79:b0:d8:c6:43:
42:e5:2c:ca:48:75:c4:4c:bf:80:f1:1b:f5:d5:05:29:10:b6:
ea:01:fc:6b:bd:22:06:5c:05:ed:90:7d:a2:1f:e3:56:e9:27:
0a:c2:1c:d9:2b:e1:20:96:9c:84:c1:dd:fb:e1:30:47:29:0b:
0b:be:5c:98:a2:13:63:57:c9:eb:51:0c:7d:f3:93:de:41:9e:
16:61:7d:c3:36:fb:e0:eb:85:71:af:3c:7c:3e:f0:19:8f:70:
2f:75:3a:f1:75:46:9a:47:05:f8:79:7b:68:79:94:3f:11:40:
90:6f:1d:f6:df:cd:7c:b6:95:92:a4:ec:d8:90:ff:50:48:2e:
b7:b1:a2:ef:71:8d:bd:44:8c:f6:46:e9:54:60:6a:2e:df:5f:
b0:04:52:64:62:4c:7a:31:c5:87:09:2d:03:36:4e:2a:13:c7:
8f:54:07:a1:9e:65:1e:d5:20:7e:67:85:3d:b7:07:f9:15:0b:
29:70:9c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:48:10 2025 by rpki-client