Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: tqRGjIzZtIoxPkgMF+WdgxIdwy9H78xae2daf+N5fFI=
Subject key identifier: 5A:04:10:8F:E4:66:64:08:EC:D3:05:9F:D4:7C:40:7C:B1:16:2A:20
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 01991D2F32DA482408E2C80670B764013DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 0A39
Signing time: Sat 06 Sep 2025 04:00:56 +0000
Manifest this update: Sat 06 Sep 2025 04:00:56 +0000
Manifest next update: Sun 07 Sep 2025 04:00:56 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: p1Wymo4jbLG9SufQ8leUck+l0uI8tdEoWFwk3Cpipxc=)
2: VwdOphY_UgRaqYf3Kg3b6kzwRf0.roa (hash: RncMvUV6R6LkD/qjU1iWGPE4PHApbhUX2ZP/1640Hn8=)
3: banoJlZWTM-p2IkdyiT6CAesZKU.roa (hash: KNVUyvxmPDx/fjWQORLa0UvJJdQn2KuVCngeDpOcDM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:2f:32:da:48:24:08:e2:c8:06:70:b7:64:01:3d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: Sep 6 04:00:56 2025 GMT
Not After : Sep 7 04:00:56 2025 GMT
Subject: CN=5a04108fe4666408ecd3059fd47c407cb1162a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:15:49:35:95:56:7e:0b:0c:a9:4b:7a:7e:
24:40:6d:cf:b0:aa:dc:9e:04:d3:bc:d0:35:9e:61:
fb:a8:7d:35:ee:6b:c0:d0:13:ea:75:44:a3:f0:15:
97:21:9c:ba:b4:b8:1e:ea:3c:06:0e:69:b1:7c:97:
8b:d2:e9:67:a4:2f:02:29:6f:81:a1:43:41:e4:eb:
06:95:80:33:ee:24:6c:4a:f6:79:b8:45:b0:cb:cd:
e2:26:23:3f:d0:f6:6a:77:45:3f:2d:4f:9b:50:e8:
6e:2e:4b:22:40:b8:90:4c:eb:2b:57:c2:53:0c:85:
b8:48:bf:41:1e:d5:b8:21:f4:7c:00:dd:38:e5:30:
4d:82:ee:16:e4:4e:e3:0e:45:8b:08:0d:a6:c3:5f:
f0:04:38:1d:e5:f0:06:97:6f:0b:e2:00:f2:f6:36:
c2:83:2a:c6:95:dd:17:b9:df:c0:6e:ba:59:bc:60:
04:ce:a9:dd:fa:ab:cf:24:2c:97:4f:57:27:85:c8:
5f:e6:64:e1:97:68:d2:0c:63:f1:0c:a7:ae:1e:c0:
ff:10:f0:43:92:31:66:14:7c:bd:6f:72:94:f9:13:
3e:af:52:ef:1e:77:f4:64:7e:c1:b2:7f:d8:33:8a:
00:52:6b:ac:82:c9:18:f6:73:6f:d6:10:32:b7:03:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:04:10:8F:E4:66:64:08:EC:D3:05:9F:D4:7C:40:7C:B1:16:2A:20
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e3:c2:c6:f2:b6:e6:a2:ec:51:d5:49:9e:27:46:3e:61:9a:
8f:03:5b:6b:20:f8:e1:bf:5e:3c:02:76:b1:49:06:98:28:aa:
e4:c0:b7:08:be:7a:29:2e:0a:54:a9:44:18:0f:18:27:af:df:
1e:aa:61:2f:9a:8b:f1:d8:c3:8c:f2:f1:39:1b:11:27:a7:b3:
f7:a3:bf:0d:ca:29:ab:68:89:2e:f1:6f:e2:48:f4:d2:95:55:
e5:83:9c:69:e9:29:ea:7c:a3:e3:7b:05:cd:33:ea:a2:6e:bd:
31:bc:30:5a:bc:6c:58:f0:34:a7:10:93:50:ab:2c:1d:70:c1:
5d:76:23:da:11:e6:91:a3:92:18:c6:77:3b:75:1b:0d:d7:4a:
c8:2e:91:1f:6a:4d:50:da:38:01:9b:6f:fa:e4:64:5c:36:93:
ee:18:0a:01:01:8b:59:71:f5:ff:97:c2:32:c8:76:98:b7:21:
a9:0f:1e:16:b2:ed:88:31:bd:2e:c3:58:0d:03:9e:eb:f2:90:
36:90:ce:40:ba:8f:96:24:88:c1:77:c4:d2:5f:a5:b4:f5:ff:
89:ca:a2:4b:46:b3:21:fa:b3:d0:3d:85:17:68:32:df:e1:d2:
36:82:6a:d3:90:3d:d5:d6:6d:ab:b1:51:4d:3d:62:ec:30:3a:
e6:cb:43:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:23:45 2025 by rpki-client