Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
File: sWrUSceuS9Isau5fvcCCMEL_-Pw.mft (raw, json)
Hash identifier: WuYfxA/F9htyTUJ/xKnTagfVS0PNZ8iXSJenP33f9Jg=
Subject key identifier: 24:52:BA:E2:96:C0:BE:BA:CD:D4:E2:36:F7:F6:B8:FA:72:2F:E8:D5
Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
Certificate issuer: /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Certificate serial: 019921B20B7F83A37F564645CBBFD62D2518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
Manifest number: 09F0
Signing time: Sun 07 Sep 2025 01:02:20 +0000
Manifest this update: Sun 07 Sep 2025 01:02:20 +0000
Manifest next update: Mon 08 Sep 2025 01:02:20 +0000
Files and hashes: 1: _KRug4UjC_BJD-8BnustHPPdTrM.roa (hash: 9gRSSq2OhYrBQVFH3hvus35c9k0k20JUe3qcgY8xpt0=)
2: sWrUSceuS9Isau5fvcCCMEL_-Pw.crl (hash: CQ6ZuF1SA4Eb0Q7J7EfLjTcWpaX8+FGqu7UN3i8XDv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:0b:7f:83:a3:7f:56:46:45:cb:bf:d6:2d:25:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Validity
Not Before: Sep 7 01:02:20 2025 GMT
Not After : Sep 8 01:02:20 2025 GMT
Subject: CN=2452bae296c0bebacdd4e236f7f6b8fa722fe8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:e2:4d:67:32:60:37:87:4c:d8:50:7f:71:
ca:7e:1a:23:1d:a6:e9:4a:2f:d9:47:01:d4:db:71:
47:12:b3:f2:7f:2e:b9:cf:57:c6:bb:89:c7:af:b0:
82:b1:ed:fb:81:54:63:40:77:3b:3c:98:e1:43:96:
a2:7e:13:6b:4a:b9:5e:e4:84:53:3a:ce:76:5b:51:
5c:ec:0c:3a:0c:70:40:fd:58:39:9c:ac:04:2e:81:
31:1b:35:7d:7e:58:a4:66:4f:81:9c:f0:6f:6e:f5:
85:42:e6:65:92:41:0a:bc:8b:49:86:c9:30:8a:55:
07:d3:84:c0:81:f5:d2:8c:8d:5f:e8:4f:36:86:76:
5a:0b:25:58:7c:96:b7:69:70:b3:0d:09:88:74:f1:
2a:0a:10:21:3e:96:a4:3c:2f:1c:12:3c:39:74:5e:
5e:6e:19:de:74:1a:97:6b:b7:d6:92:da:0a:16:64:
aa:6b:60:59:b6:cd:84:5a:80:1f:5d:83:2b:ec:a9:
6d:a9:2c:2e:62:bc:ae:d9:86:a6:c0:88:a8:ba:9a:
27:78:95:36:93:7b:c4:65:10:e9:c5:75:a6:35:3f:
30:82:5c:bf:01:46:47:0b:ed:ae:cb:5a:2e:90:01:
7a:6b:c7:21:e9:7e:df:1b:d8:d5:1c:b1:1a:6a:ab:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:52:BA:E2:96:C0:BE:BA:CD:D4:E2:36:F7:F6:B8:FA:72:2F:E8:D5
X509v3 Authority Key Identifier:
keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e3:f6:62:dd:0a:62:29:41:29:56:da:9e:bc:c9:42:7a:f4:
92:8c:32:18:bf:4a:fc:72:21:2f:05:fb:cd:c1:a8:ca:01:89:
90:6a:f4:ca:78:a7:e1:c6:3c:3d:65:1a:23:31:16:71:37:23:
38:93:8d:fe:ed:b5:62:88:b3:91:55:df:00:6a:8c:5d:5a:6e:
6c:d7:0f:98:4a:53:22:6f:c9:e2:15:f7:14:c3:ed:25:06:b5:
ed:8f:89:d9:d7:55:20:5d:83:d3:bd:19:e6:60:ac:05:c0:ba:
bc:82:7c:07:3b:fa:fc:73:5c:3a:52:ca:f3:ca:ee:ac:42:c4:
e0:fe:69:ff:4c:be:72:a2:12:52:ad:32:50:f4:cf:3b:1c:27:
65:cd:fa:37:a8:8f:61:59:d7:56:e2:35:aa:a7:4d:b1:1a:2e:
2e:11:3c:cd:18:52:10:25:68:72:8b:d2:f6:1e:9d:e4:61:20:
f3:8a:80:cf:bc:e9:3e:25:46:29:fe:72:04:6f:71:82:57:18:
45:6d:7b:87:74:ab:b3:8a:8b:0e:b7:b8:f1:6d:a3:3c:da:3e:
f5:0f:82:3b:c8:0b:0c:ea:c8:3b:6e:54:1f:26:0e:2a:63:f8:
b6:75:89:6c:5b:09:74:d1:55:ce:03:49:57:f8:5c:99:90:56:
9e:d3:bb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:03 2025 by rpki-client