Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
File: FV9JSb982s8-nUZXsIzYR4DUF0U.mft (raw, json)
Hash identifier: pvriZ2qXHdtX4yUGNs4DX69UsPS/5jSmLPiCIdAlFrw=
Subject key identifier: BF:70:2D:A9:F9:8B:A2:DD:CE:AD:DE:6C:42:2E:71:0F:A9:37:C0:BD
Authority key identifier: 15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
Certificate issuer: /CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Certificate serial: 0199228C66B6B78ECBDEDA264A6CC5078633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
Manifest number: 0BC1
Signing time: Sun 07 Sep 2025 05:00:50 +0000
Manifest this update: Sun 07 Sep 2025 05:00:50 +0000
Manifest next update: Mon 08 Sep 2025 05:00:50 +0000
Files and hashes: 1: FV9JSb982s8-nUZXsIzYR4DUF0U.crl (hash: kyLxzluHTwSlPSbjQW1En6HPziDO2PudyND/Ak5nSqI=)
2: ojHiQO19UWzWeZWUnpfHf7I7cMc.roa (hash: 9VsVu1Joj/Zh9nV4rRjBb7OhHCDd3dk9hkqFPQjM6n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:66:b6:b7:8e:cb:de:da:26:4a:6c:c5:07:86:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Validity
Not Before: Sep 7 05:00:50 2025 GMT
Not After : Sep 8 05:00:50 2025 GMT
Subject: CN=bf702da9f98ba2ddceadde6c422e710fa937c0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fc:60:3a:1a:3c:98:a5:4b:51:64:ed:d2:26:
be:1b:fd:ed:7d:63:6d:96:bd:6e:55:48:8f:57:bf:
18:52:17:31:f4:21:db:29:38:7e:4c:bf:b5:77:76:
d8:2b:f1:73:6d:e4:97:57:be:7d:4e:31:8a:31:ae:
c7:cf:22:7a:34:8d:cc:4e:32:1d:aa:97:3f:bd:44:
63:ae:df:d8:8c:e0:3e:88:97:fe:17:94:44:f5:2c:
c2:be:0c:e4:68:fe:14:98:78:fb:af:a0:81:30:da:
a9:67:6c:a9:1f:ef:18:f9:f4:9e:a5:34:71:ad:01:
a6:b8:1e:f9:53:c9:f6:06:b8:6a:59:3e:39:24:e3:
a0:90:02:07:c1:68:7f:b6:8e:7b:13:cc:18:ae:c8:
b0:79:f3:0e:63:c0:32:64:fb:b3:7a:5e:4f:13:0b:
4d:42:51:68:af:95:db:c8:17:31:63:3b:e7:bf:d8:
c5:89:d1:92:56:63:99:c2:08:cd:78:d7:5a:f0:12:
c0:8a:3a:14:58:fb:9c:02:f8:d1:2f:af:7c:d1:c9:
f1:bb:6a:ad:e9:18:af:6d:51:83:2a:4a:26:b6:ea:
8d:d4:4f:48:8a:00:14:fd:29:5f:30:62:8c:33:36:
9f:98:97:75:cc:8a:81:cf:b9:7c:ba:cf:ef:9a:56:
b0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:70:2D:A9:F9:8B:A2:DD:CE:AD:DE:6C:42:2E:71:0F:A9:37:C0:BD
X509v3 Authority Key Identifier:
keyid:15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:41:57:99:db:ab:58:d5:a2:b5:51:35:24:3a:e0:5e:17:5c:
f3:0c:94:d8:86:83:c7:84:7e:b9:7e:05:16:7e:b9:a1:c0:92:
54:10:12:29:82:89:96:98:4c:ea:d9:3a:bd:37:b7:b4:4e:4d:
07:2c:aa:40:c7:85:d2:c2:25:5d:7e:46:1f:e9:b9:0d:18:83:
1b:a9:05:8c:d7:81:4e:18:6a:ef:18:48:77:dd:bf:ed:56:4c:
4f:d0:0e:93:9e:4c:3d:10:3c:2c:ef:fc:4c:03:a5:f6:43:44:
2d:ae:0e:39:b4:8a:d4:b3:60:30:aa:c9:f8:aa:e0:87:be:28:
b8:cb:00:0b:7f:2d:e1:27:e8:15:96:1c:78:28:6b:d2:8b:e0:
98:5e:64:75:98:ed:88:4a:e5:4c:d8:c3:17:cd:9e:3c:6e:ba:
67:ba:a1:19:62:22:2b:95:53:3e:17:e8:3b:97:9b:70:e7:fe:
17:e8:13:dd:07:12:ce:41:09:4e:54:88:e3:45:cd:4e:51:5e:
24:9d:9f:3f:6e:40:9a:1c:54:be:2c:5a:93:ac:6a:b1:07:86:
6a:7d:5c:2a:a9:56:1e:0c:00:37:50:89:dd:be:fb:b5:7f:c2:
97:81:48:4f:07:b4:2c:cd:50:f6:99:3f:7d:7e:4f:28:84:39:
6f:1a:44:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:35 2025 by rpki-client