Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json)
Hash identifier: CekV+q4fNpwTNgUBAQI7n/+bdxe9WRN8Pip1RJPHMsM=
Subject key identifier: AA:D8:FC:FC:CE:2C:06:DF:D8:2E:13:72:45:B2:2C:3E:11:43:8D:14
Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998
Certificate serial: 0199240CA092680D3413811A7F999C8C1CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
Manifest number: 1326
Signing time: Sun 07 Sep 2025 12:00:31 +0000
Manifest this update: Sun 07 Sep 2025 12:00:31 +0000
Manifest next update: Mon 08 Sep 2025 12:00:31 +0000
Files and hashes: 1: LKbJBE8NWEbtvlmwjvUv8EH6lzg.roa (hash: OvzM1ONuWDYGL3UTKmOuYTSxh3U96Ifed1WChkSuccI=)
2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: nbJQfs2LanEimQTw95ySz/dDBDmMgE1yzZorpazEnoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:a0:92:68:0d:34:13:81:1a:7f:99:9c:8c:1c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998
Validity
Not Before: Sep 7 12:00:31 2025 GMT
Not After : Sep 8 12:00:31 2025 GMT
Subject: CN=aad8fcfcce2c06dfd82e137245b22c3e11438d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:30:9e:ee:f7:9f:db:aa:05:d0:8c:7e:d2:
b7:f2:0a:ee:95:77:ad:47:9a:ec:67:8b:5b:99:48:
66:16:af:8e:74:0d:21:3c:02:4c:23:d4:a6:40:93:
1e:96:92:93:32:46:d1:9c:e6:b7:a7:7c:7a:a7:42:
08:03:7b:d0:e0:e9:a8:85:d7:f9:92:48:b7:32:73:
7e:5a:e0:1e:cd:6f:26:e4:31:cc:59:d6:93:74:81:
f5:67:51:a5:c3:22:ae:de:43:f2:70:9b:bb:4b:c4:
1c:09:dd:7f:5d:86:44:6e:37:d4:cf:d6:f9:dc:96:
9f:9d:0f:49:4b:60:fc:a5:4d:18:21:ca:8b:46:22:
ce:b2:99:8a:c2:0a:34:1a:0e:17:9b:93:eb:14:7c:
d9:a6:12:d7:b4:c7:b9:ab:31:e6:98:b2:ea:36:6f:
d5:4c:91:40:62:d5:1a:56:2e:c8:2f:60:09:ae:ac:
89:a0:87:ea:93:2b:49:95:f5:f0:7d:47:6e:6d:f6:
26:25:f8:19:c4:8d:ea:2a:96:e9:03:c0:23:ce:b0:
25:c2:be:e2:ee:0a:79:15:db:49:0b:73:ec:a8:b4:
ec:80:46:36:42:ee:17:c9:d0:61:b3:5d:24:3b:14:
e4:ba:49:34:10:e3:02:08:3f:88:d5:51:0e:e9:1f:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D8:FC:FC:CE:2C:06:DF:D8:2E:13:72:45:B2:2C:3E:11:43:8D:14
X509v3 Authority Key Identifier:
keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:93:28:9a:ee:36:d5:88:8b:ad:5a:2b:e8:98:54:ea:0c:1b:
a2:22:20:c4:be:64:22:54:9d:3d:ff:5c:e6:12:c6:a0:e2:37:
4e:ef:10:75:6c:0c:1e:73:f1:90:8f:dc:2f:79:05:6e:02:ca:
2b:a7:01:83:31:97:61:f9:ac:5c:f1:6f:e9:b3:c9:00:9b:cd:
f1:93:84:28:04:4a:49:37:fe:2c:92:57:d3:dd:af:05:16:70:
59:ff:38:1d:6a:ee:90:ac:21:c5:59:16:45:52:57:df:fc:fc:
4b:c9:02:0b:68:08:bf:bb:1e:ea:d3:73:57:20:e6:90:4b:5e:
df:e4:1f:d9:92:fd:74:3d:75:f1:9b:51:b9:67:b7:89:cb:38:
7f:8e:52:9c:c2:81:97:f4:3b:f0:91:b9:cb:a8:45:b5:ea:71:
f6:7e:47:fc:08:5a:69:88:a3:63:fc:a4:91:fc:ab:07:50:c5:
ae:57:da:75:15:ad:0e:66:e5:0c:ca:b1:db:88:0d:04:25:ad:
25:0e:ef:ca:1a:b2:0e:06:7e:88:85:99:cb:af:92:63:60:b9:
8b:49:d5:9c:8d:80:1c:6d:6b:f8:3d:fe:a0:4d:49:fc:13:4c:
af:b7:8b:22:b8:6b:09:06:7b:bd:fc:cf:25:9c:ba:41:d8:67:
07:94:13:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:13 2025 by rpki-client