Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier: MJraiuvdBIxZ9anKYE1EGuDTkkOD5j4IxRios0EZu3I=
Subject key identifier: 21:A0:34:99:8A:8D:72:F3:78:F3:53:FA:E5:6A:A2:18:3C:DB:5C:C6
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 0199172D7251958CE60607B16A78DB7AB27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number: 0C16
Signing time: Fri 05 Sep 2025 00:01:18 +0000
Manifest this update: Fri 05 Sep 2025 00:01:18 +0000
Manifest next update: Sat 06 Sep 2025 00:01:18 +0000
Files and hashes: 1: 1-DjrG4WtOf5mfvjc_0ex1qmM7_0.roa (hash: hnXFvQKmTthNRY+MRdmK+ICiF4IvzT+rwNQnD35oyyk=)
2: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: GQ9fwACVolSo5WM0SMSmgGxd097TeDguBi6ZlxWPckw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:72:51:95:8c:e6:06:07:b1:6a:78:db:7a:b2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: Sep 5 00:01:18 2025 GMT
Not After : Sep 6 00:01:18 2025 GMT
Subject: CN=21a034998a8d72f378f353fae56aa2183cdb5cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e8:0a:2d:3d:1a:99:ae:a4:13:34:83:cd:4d:
b5:79:64:ee:f8:1a:54:d3:b1:b7:69:a3:fd:84:77:
5f:d6:93:16:41:de:e8:0c:70:ca:5d:33:ee:43:ed:
3d:18:67:b4:f0:92:40:21:06:70:96:4c:6c:b7:a0:
c0:24:85:bc:b9:df:29:34:64:06:62:f3:28:a8:20:
14:a8:de:82:88:e7:ef:cb:0d:19:c5:74:c6:75:48:
3d:8f:47:96:3a:19:2a:a0:89:9d:9c:25:0e:9d:cb:
dd:90:9e:ab:44:f2:59:7a:bc:7c:bb:2c:c4:52:7a:
3a:4e:b4:9f:1f:f3:fb:22:ae:32:0d:d5:1f:a1:d5:
e1:3a:7f:76:15:94:bd:67:43:d8:d2:84:6d:b5:00:
e3:9c:7d:b6:09:62:45:0a:0b:55:f1:ad:23:a2:57:
4a:72:f9:1a:3a:de:80:67:b8:52:75:2b:f7:fb:f8:
2b:cf:0b:d8:5c:2b:b0:9b:1e:91:c8:b3:7c:5a:30:
40:34:68:76:78:e7:a9:35:00:c8:2a:81:93:47:2e:
8a:f2:e5:45:19:6b:84:b6:38:3a:f5:a7:09:b3:fe:
49:2d:b0:e6:ac:d3:d9:c6:43:57:b8:6a:60:2c:bd:
2c:bb:2e:08:ba:47:0c:3f:e2:0e:5e:4c:15:3d:ce:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A0:34:99:8A:8D:72:F3:78:F3:53:FA:E5:6A:A2:18:3C:DB:5C:C6
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:dc:65:2f:3c:5e:d6:49:0b:a5:f5:f4:60:57:6f:f1:59:15:
6c:79:70:b9:01:9d:7c:13:39:ef:d6:b3:67:db:78:34:58:88:
ae:c3:15:95:aa:8e:37:8d:af:4a:cd:04:e1:87:8b:4e:4b:6f:
c9:65:6f:76:84:bc:3b:bb:95:79:82:fb:99:60:42:28:0e:2c:
f9:ba:69:a1:40:23:c3:82:58:c8:5b:0e:51:98:68:98:c0:17:
ac:20:20:70:b8:cd:7c:d6:1f:df:7a:11:29:42:5d:b6:db:2d:
7c:76:8c:65:5f:97:4f:00:6a:aa:0e:10:c0:77:37:fa:c8:05:
4c:39:c7:e7:36:a7:59:e8:02:93:94:a5:5e:3b:1e:b2:d0:90:
11:61:1f:72:82:57:88:13:c4:58:17:be:7a:35:3d:9d:4e:37:
4e:2d:e5:67:57:b0:60:0d:dd:e3:04:34:c4:31:60:30:3a:04:
c7:19:c9:f4:2f:2e:ef:fd:d5:dd:72:8f:16:72:c2:f6:dc:69:
b5:71:f4:1f:33:74:60:4a:bc:05:b9:25:c3:1a:3d:08:01:83:
aa:b2:0e:3f:07:57:d7:18:8a:5e:b8:b2:00:56:95:ff:cb:ab:
7d:be:6c:45:67:c4:77:1e:1f:93:ee:b6:1d:36:a0:49:9c:cc:
3e:26:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:38 2025 by rpki-client