Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: Qpn61OUVpxOk4VSphYh6JybtuPkZ9FHGbCAVSa3Zujg=
Subject key identifier: B6:1C:31:78:EE:5A:47:DE:29:8B:B7:2E:55:8F:C6:77:A8:68:7A:77
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 019935A56EE7067005BF78700BE9BAE111E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 22:00:58 +0000
Manifest this update: Wed 10 Sep 2025 22:00:58 +0000
Manifest next update: Thu 11 Sep 2025 22:00:58 +0000
Files and hashes: 1: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: V9dpwYyFBQxPWE2qDCIIlmcc11+Rw+HUxAAEbMvGHRQ=)
2: qzdc_fwaLRJwIIHpIg8vA5h4lo0.roa (hash: V/FGmYc5ZjOuTnWlxFYXLE8AFUo6wdD1TCze3ez9KOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:6e:e7:06:70:05:bf:78:70:0b:e9:ba:e1:11:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Sep 10 22:00:58 2025 GMT
Not After : Sep 11 22:00:58 2025 GMT
Subject: CN=b61c3178ee5a47de298bb72e558fc677a8687a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:0e:e6:64:2d:0e:f7:fe:87:01:fd:53:55:
14:8b:22:60:f4:03:19:d8:31:60:ce:3a:c4:24:2a:
00:da:00:78:dc:de:b4:35:f4:5b:2d:76:b4:e0:a0:
e9:4e:af:c1:aa:8a:77:93:74:7c:a5:33:21:b4:0c:
ec:06:24:80:9d:39:58:9f:a4:4e:18:45:b2:75:38:
32:c4:bf:51:a6:07:31:52:98:0a:5a:d7:f4:2c:de:
4a:0b:83:5d:43:24:3a:a4:94:86:e1:31:6b:07:34:
5b:e2:bd:2f:7c:0d:23:ea:2d:cb:56:12:f2:19:2a:
d6:ea:33:16:36:2c:fc:f7:b1:03:31:e2:74:ac:7c:
67:8c:3d:99:90:89:c5:73:42:22:fb:d7:97:39:3f:
58:de:cf:f7:ab:73:ee:27:0a:74:1c:66:bd:2f:b5:
64:2f:a5:21:d8:c4:cf:50:bd:ff:e7:be:97:3f:f7:
3b:61:0a:75:ee:05:8d:e0:d1:dd:8f:38:0f:98:b8:
41:0c:2e:60:fc:09:aa:66:35:c0:e7:89:fc:83:4f:
04:1c:dc:28:02:fd:47:04:ac:df:fb:9e:7c:76:a9:
f5:70:70:e5:55:99:35:bb:e2:42:30:ca:f6:41:4f:
a4:90:3f:b9:58:fb:df:83:10:e4:9f:b4:bf:9c:64:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1C:31:78:EE:5A:47:DE:29:8B:B7:2E:55:8F:C6:77:A8:68:7A:77
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bb:b9:aa:cb:68:f1:78:87:92:bd:67:68:34:98:fa:d9:71:
c2:84:da:1f:62:33:34:91:3d:be:e4:ae:32:69:f7:4c:80:be:
dd:58:74:f7:99:35:1e:0d:ce:f2:29:05:e4:40:62:b6:58:66:
ad:ae:be:5c:31:1a:73:4f:27:00:9d:d2:34:b9:b5:da:b6:57:
b8:0f:19:1d:f3:cb:a0:cc:b1:85:b0:af:a8:19:f2:e0:24:d2:
35:0d:3f:b2:8a:a1:c8:77:a7:dd:c7:67:18:17:9c:8b:b4:47:
e2:48:ac:e2:79:9b:7a:c7:b9:93:c1:a2:18:b9:47:8f:22:7e:
d5:e7:ac:62:75:05:94:03:36:33:a1:20:63:ca:a1:70:54:15:
5c:67:0f:3a:a8:9d:a1:ca:6e:60:fc:55:07:0a:8c:c2:d8:04:
1a:93:b6:29:65:82:3a:e3:70:55:aa:c7:53:22:81:9d:5c:c3:
7f:37:28:48:3b:4f:b7:c1:57:68:8b:7b:f1:29:b9:6e:c0:5d:
a1:da:bb:75:ba:27:10:f5:62:01:c3:5a:0b:7a:17:20:59:dd:
fe:10:b4:33:37:18:ac:d4:10:d4:84:88:4d:55:3c:1b:e0:a4:
0e:4f:85:12:b6:be:25:67:ac:3d:1a:e6:f4:67:d8:6e:b5:3b:
0f:f0:50:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:26:44 2025 by rpki-client