Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
File: B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json)
Hash identifier: Ro4FaKMN99VxmSZM5mvr1dmDz7h9jcFVf+4V6E+1MFg=
Subject key identifier: 15:7C:BD:ED:68:9D:80:D1:B0:CE:7E:C5:43:CE:8D:7E:82:23:97:B5
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial: 0199307F392F3208E5DDCC18C37572420F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
Manifest number: 09B3
Signing time: Tue 09 Sep 2025 22:01:08 +0000
Manifest this update: Tue 09 Sep 2025 22:01:08 +0000
Manifest next update: Wed 10 Sep 2025 22:01:08 +0000
Files and hashes: 1: 8XyUaz5PxPLue0CrUchlRmHnqJs.roa (hash: KMSpxL6wtJUNFCJFnfAUFjLMRmLQ4Dcv8f1856Q+IkY=)
2: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: kPAECQrYUdjULRBO+BRDJrisjNNGvsJNn2GsUmNE/lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7f:39:2f:32:08:e5:dd:cc:18:c3:75:72:42:0f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Validity
Not Before: Sep 9 22:01:08 2025 GMT
Not After : Sep 10 22:01:08 2025 GMT
Subject: CN=157cbded689d80d1b0ce7ec543ce8d7e822397b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:4a:a9:a5:7b:21:a2:a7:b9:a5:ad:90:f3:
0a:0a:83:d0:e8:9d:e3:bb:ee:d2:b5:43:74:c5:2c:
59:4a:dd:27:9d:4e:2d:63:dd:72:7e:b9:55:9b:af:
d6:d4:4c:f2:1c:e8:48:ad:56:5b:e7:73:49:86:aa:
b5:2a:1e:f8:47:f6:51:6b:cd:f0:e4:a9:d0:d4:39:
b8:7e:36:10:00:98:74:4c:b1:4e:4e:48:5a:0d:49:
f0:3b:d8:d4:61:9e:a2:90:c8:b5:8f:1c:58:28:ce:
39:14:b9:61:a2:58:70:ad:d5:12:9f:d4:3c:11:1c:
47:82:e4:87:49:54:30:0c:f0:91:e7:5e:01:df:ae:
8e:68:ed:f3:f6:dd:0e:67:18:63:74:c6:32:4f:c3:
38:da:ee:e3:67:5d:ad:18:60:aa:eb:bd:e0:d6:52:
dd:a4:ff:cb:81:64:a4:49:ea:ae:41:f6:17:0b:37:
a5:10:55:09:60:7f:59:0d:95:95:55:79:36:b4:43:
a7:21:1a:4a:36:5e:da:98:05:a0:33:66:b7:1a:b1:
0b:52:31:1d:a7:5d:6d:8e:e1:2e:06:12:ed:1b:75:
ff:03:21:07:1a:96:f4:b8:ad:45:61:e2:34:3a:27:
a1:40:a4:cd:ed:b9:f0:04:44:7c:cc:97:49:d7:37:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7C:BD:ED:68:9D:80:D1:B0:CE:7E:C5:43:CE:8D:7E:82:23:97:B5
X509v3 Authority Key Identifier:
keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:07:5c:74:84:81:36:84:8e:09:f3:29:8f:8b:56:d1:e7:38:
ab:02:c1:f2:19:70:f8:d7:76:85:0c:b9:bf:01:7d:64:a2:ca:
0d:86:cb:2a:f1:4b:24:4f:51:12:a5:24:ce:2a:10:71:b3:7c:
79:43:50:b7:43:35:59:4f:1d:9f:49:ac:ba:a0:25:b7:06:e3:
94:18:ed:6c:25:7c:f6:47:3e:ff:30:32:d8:b9:c4:49:69:ed:
74:ff:07:84:ac:13:03:ba:89:a8:a4:21:bd:0e:bc:5a:4b:32:
23:ab:60:4a:3d:d6:d8:0e:00:6e:dd:d9:f0:99:3c:3f:a4:9d:
ee:91:34:f9:a7:8d:4e:95:fc:14:01:07:eb:57:93:85:be:10:
90:3d:57:d6:0b:ab:95:0a:a4:f5:ad:d2:01:bf:41:15:3a:d1:
d5:00:a6:b0:21:f4:a3:b5:f8:41:69:cc:8a:eb:23:28:00:8b:
33:63:8b:bd:a6:18:7b:aa:32:dc:fc:68:c2:3f:f2:c1:5c:e0:
fb:70:09:3a:32:6d:2b:d4:08:3f:fe:94:23:0d:84:2e:13:0e:
d5:06:b5:38:90:18:e3:18:01:13:36:f0:71:24:d8:fd:78:a6:
5e:db:1d:25:a1:b3:d0:fa:23:9a:3c:1d:bf:53:b3:c2:07:e7:
31:be:40:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:38:10 2025 by rpki-client