Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: DSGLKrDdDA+VyQMpNndmrFYTlCa71TEnQW5QoK8mDjc=
Subject key identifier: CD:6D:42:6A:37:45:40:61:47:3B:C9:5D:9D:1F:2D:DD:0E:F9:C9:DD
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 019921B110C7BFB24C1E906E71DBBE504263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 0D8C
Signing time: Sun 07 Sep 2025 01:01:16 +0000
Manifest this update: Sun 07 Sep 2025 01:01:16 +0000
Manifest next update: Mon 08 Sep 2025 01:01:16 +0000
Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: oLYWojg9srN4MRz1jJd4Qu8kGNJz/YUghpuWPpEbfaQ=)
2: khAk69GaviX3ISVPskdgmXYxHg0.roa (hash: iZg+JNU8yAUj+GbVfYYrGDVbFREqgvj716gjoOSNlMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:10:c7:bf:b2:4c:1e:90:6e:71:db:be:50:42:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Sep 7 01:01:16 2025 GMT
Not After : Sep 8 01:01:16 2025 GMT
Subject: CN=cd6d426a37454061473bc95d9d1f2ddd0ef9c9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:76:a9:82:a9:f4:a8:44:ca:c2:72:d4:c3:
e0:b1:d7:31:50:6b:95:d8:77:f9:03:7b:a2:84:1c:
66:f3:72:6e:9e:e8:64:ba:d5:45:78:f1:70:71:ec:
87:4d:cb:8c:8b:21:88:e9:a1:bc:dd:1a:d3:46:68:
43:37:fd:4a:b9:45:cd:f4:88:69:b9:cc:f0:0e:6f:
3d:38:9f:fd:38:b4:73:7a:58:41:f5:f4:bc:40:45:
5c:1b:f4:da:02:4c:03:92:81:f4:56:e8:e3:93:a3:
15:1a:85:5f:2a:c5:f1:8e:00:a5:44:ad:2d:55:ba:
4b:24:13:96:63:5b:7e:df:98:9f:1d:7c:3b:df:b6:
84:c5:aa:68:f2:ba:1d:8b:b2:af:07:d2:4e:20:f1:
8b:d8:5a:97:d7:ee:e8:bb:fa:cf:30:4b:85:96:c7:
60:a1:b7:12:62:97:71:e8:e2:64:36:d0:4b:d5:65:
e7:8c:60:79:3a:be:a4:be:52:b0:a5:23:75:14:d1:
c6:a3:50:4c:ec:5a:c1:d0:eb:47:5f:14:f3:04:aa:
7d:d2:6a:2c:d3:a4:2b:69:14:eb:5b:c7:f9:70:ef:
92:cc:2c:0e:d8:3a:6f:1d:e7:74:c9:14:2d:31:33:
22:76:7f:60:a9:6e:07:c7:c2:be:cf:fc:0f:e2:16:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6D:42:6A:37:45:40:61:47:3B:C9:5D:9D:1F:2D:DD:0E:F9:C9:DD
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f0:a2:13:7b:c4:da:82:44:32:f5:45:fb:46:87:09:29:36:
d6:9b:6a:1c:b7:cf:b2:c0:f0:db:45:d4:26:2d:34:1b:89:61:
43:5c:8b:53:61:21:33:0c:1f:af:2d:b9:ec:21:7c:25:52:da:
95:62:f7:84:57:e4:80:34:55:a5:aa:51:a0:ef:a7:5d:c0:3d:
1f:e6:fc:14:ed:e9:33:b8:2c:50:25:8f:80:65:7e:70:fd:20:
9d:10:c3:08:6a:16:12:6a:23:d0:8a:75:e8:e7:b7:f8:7c:06:
de:e8:5e:4b:76:e8:98:af:c4:a4:df:f6:c4:b3:da:46:46:f9:
e4:51:d0:cf:9f:3b:40:8c:59:98:9e:1c:a3:99:25:f3:7a:1e:
33:a2:dd:bb:db:5c:60:cb:2a:f0:25:20:c9:40:4a:90:e8:80:
6d:74:e9:dd:fd:f5:91:4d:81:cd:7d:4b:c7:2e:54:21:2d:ac:
f8:6a:a9:51:d1:5e:ab:52:fb:41:34:fa:fd:39:f5:9d:c5:f5:
f8:45:9d:00:dd:6b:f4:e4:36:4c:0c:90:52:c5:09:56:8e:b1:
ee:ad:5b:3d:b3:f1:d2:c3:95:21:06:a4:9b:74:fc:51:92:da:
87:a3:e5:10:e1:6b:02:37:68:be:1f:2f:b5:74:93:f5:7b:b0:
a6:46:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:29 2025 by rpki-client