Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier: fQtKNCj+XiVySuVeJ2Y2zeQ6alx8rO8MEe2aSeDK2kc=
Subject key identifier: CB:3E:DA:AB:5F:36:61:F1:CD:3D:D0:0D:38:1E:5C:2E:2D:1E:A6:EC
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 019936F01D311A86815622D083D4185BCAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number: 074C
Signing time: Thu 11 Sep 2025 04:02:09 +0000
Manifest this update: Thu 11 Sep 2025 04:02:09 +0000
Manifest next update: Fri 12 Sep 2025 04:02:09 +0000
Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: h6inROKE8zi9QO3aTu6nWF+rfakHZuk2/+1H7YAbU98=)
2: Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa (hash: 3AsnPktXMzidA1tsY7S+Rc/2XsSBvEXEVlda+G5oNPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:f0:1d:31:1a:86:81:56:22:d0:83:d4:18:5b:ca:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: Sep 11 04:02:09 2025 GMT
Not After : Sep 12 04:02:09 2025 GMT
Subject: CN=cb3edaab5f3661f1cd3dd00d381e5c2e2d1ea6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:d5:d0:71:b9:6f:9e:38:e5:be:8f:97:6d:
cd:57:da:0d:ba:c5:55:46:7a:40:8e:fe:ec:fe:6d:
1e:e5:7f:31:1b:a9:f4:64:89:05:c2:2a:21:04:e2:
cc:bf:1e:1e:7a:5e:60:42:1e:ee:5f:37:ac:3a:d5:
8f:17:e7:09:17:df:76:36:9c:6e:a0:e5:d0:56:6b:
80:94:bd:10:5d:63:10:c7:23:61:4c:b7:ae:13:03:
1c:22:90:84:4e:92:e4:40:54:ea:6e:9e:8e:b9:52:
e1:31:11:b3:1e:e8:0e:ae:97:a7:c2:32:b9:8f:ec:
f0:b6:19:b7:0e:33:49:da:89:aa:a5:fa:13:4a:4b:
0d:bd:bb:18:a2:3a:28:0a:06:0c:6c:ed:5a:81:5f:
e9:35:b9:d1:76:19:3e:63:e4:a9:e1:3a:69:98:de:
19:98:e7:af:42:91:04:95:26:1b:be:d0:05:e9:15:
e3:dc:26:3b:3a:04:31:58:0b:4e:32:87:b2:97:6b:
c7:b6:13:6a:f5:aa:76:20:ec:10:c0:e2:e3:54:d6:
50:c3:f5:ad:90:49:74:04:06:84:fe:8f:07:28:60:
12:0c:c4:6d:35:85:6c:2d:1d:d5:30:b5:9c:e4:30:
6c:4d:08:2e:3a:80:15:42:d4:dc:1b:ad:d4:f0:c2:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3E:DA:AB:5F:36:61:F1:CD:3D:D0:0D:38:1E:5C:2E:2D:1E:A6:EC
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c5:34:35:38:7e:5b:32:d3:76:f0:3e:59:43:57:b9:dc:35:
0a:af:e1:61:8f:7c:a6:e4:ca:57:da:4f:4f:58:bc:14:7d:c8:
28:d6:a4:47:50:4e:f5:2b:f2:0b:0e:9e:f2:04:34:ad:f0:12:
12:1c:bc:4d:5f:de:a0:9b:4b:81:06:a0:a0:82:90:fa:25:af:
90:85:21:b6:6e:fa:88:06:9a:07:c1:ce:5c:82:7a:2d:25:c7:
65:f1:25:e5:48:e3:6e:06:dd:10:61:e8:f8:12:c3:85:43:69:
0c:d2:f2:b7:80:70:15:5a:5b:6f:b7:7d:69:a6:79:db:08:05:
c5:aa:7d:57:4e:23:b5:dd:89:58:70:76:bc:79:83:a1:1c:c7:
81:2e:18:5b:9e:a9:e1:8b:29:0d:a1:7d:5a:d0:8c:3e:75:15:
08:05:57:64:39:0f:02:cb:13:b8:2b:2e:1b:24:25:3e:28:e1:
95:f3:cf:3a:0f:b7:37:e8:13:bc:e8:22:22:64:2e:da:0e:38:
25:88:5b:4d:74:8a:c5:d8:9c:69:12:38:05:3a:93:5a:4f:c0:
81:e2:18:90:97:fa:2a:76:c6:46:8d:c5:02:9d:3f:a2:2f:31:
d3:1d:99:fa:94:cd:0c:f7:5e:e6:33:a1:b7:55:60:61:30:fc:
51:ab:2e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:24:05 2025 by rpki-client