Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json)
Hash identifier: fNtHEe20Dp1C9B5R7iagoIDp1Igsrf85eQGnjt+4MfU=
Subject key identifier: 8A:0D:1A:1B:AE:DB:C9:F9:8B:8B:91:0E:78:50:BF:79:94:15:67:53
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial: 019923A09BB78982DAF76257D78E4F4E70CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 10:02:32 +0000
Manifest this update: Sun 07 Sep 2025 10:02:32 +0000
Manifest next update: Mon 08 Sep 2025 10:02:32 +0000
Files and hashes: 1: d_f-2basXF4ecUjEUuL7_QGvdV8.roa (hash: 3qi4PJf12FWilDaOg+5R4nsdnVGnK/XQkSLQfanFNGo=)
2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: 37HuBEjM9fUVb1l0giTlgdP34/U1srNtFKmKHUdOv3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:9b:b7:89:82:da:f7:62:57:d7:8e:4f:4e:70:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
Validity
Not Before: Sep 7 10:02:32 2025 GMT
Not After : Sep 8 10:02:32 2025 GMT
Subject: CN=8a0d1a1baedbc9f98b8b910e7850bf7994156753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:67:75:3a:1a:6f:76:41:1b:58:ee:fe:31:
12:90:b8:6c:2c:6f:10:95:5c:1c:d9:f1:09:96:0a:
91:1b:82:e4:f6:18:4e:90:d4:bc:74:b5:b7:82:5d:
a1:86:b0:83:74:63:c3:db:3a:b9:0e:3e:d3:95:0e:
3a:97:db:f5:a6:81:23:bb:fc:e1:29:d4:67:8e:fb:
77:2b:15:7e:88:ba:cb:9e:8d:45:68:90:c6:46:1f:
30:cc:4a:0c:be:3b:fe:f2:d9:85:1b:e8:69:c0:c1:
61:48:1a:0a:d1:09:0b:0c:ba:18:28:91:60:0b:fe:
bd:ef:f5:ab:f9:7e:e6:14:ad:c2:90:9d:2e:d1:3a:
7d:f8:c7:61:12:74:20:2e:82:88:de:1c:25:d8:02:
8c:13:79:80:23:9a:1f:fa:e6:ab:76:67:20:09:5f:
80:d6:f8:fb:c0:62:70:73:c4:76:58:6f:7a:a4:8d:
46:90:8d:77:9b:b8:d5:a2:b9:35:0a:41:4b:4a:16:
4f:e3:84:8d:ce:61:79:10:00:6b:f7:0e:69:35:8c:
6e:c9:92:cc:72:33:2f:ca:96:40:58:90:ce:6a:b1:
a4:3d:f4:1d:35:6d:7c:1c:9b:19:0b:46:b1:78:d2:
39:66:4b:84:d0:0c:9b:49:f1:2b:c4:6f:ad:fe:3f:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0D:1A:1B:AE:DB:C9:F9:8B:8B:91:0E:78:50:BF:79:94:15:67:53
X509v3 Authority Key Identifier:
keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f6:d5:2e:86:3c:f4:8f:f8:69:d1:82:84:d5:52:52:cd:cd:
e0:aa:5f:24:ad:86:2e:5f:10:19:2e:03:87:2e:33:10:11:31:
5d:1a:18:a9:65:9d:ac:80:f8:8e:e1:b8:e6:6e:a8:9c:70:b9:
58:77:a5:8f:20:f1:d3:0e:48:a7:db:8f:49:46:53:22:52:bd:
39:60:4b:c9:69:75:ad:56:e4:e3:f8:81:f9:be:80:b6:08:87:
21:77:c9:ee:6a:6f:d4:02:2c:99:47:5d:98:0e:41:5e:a8:cf:
b2:33:1b:42:0f:bf:0f:0a:97:26:2c:0b:20:5b:42:44:8f:85:
ac:f7:88:98:f2:2c:a3:f4:4d:01:18:e4:6d:02:5a:b5:5c:3d:
fd:16:9b:40:6d:eb:bc:39:36:41:ca:9d:74:7d:44:b5:8b:21:
76:b0:8b:75:dd:55:c8:0c:6f:c0:92:d3:53:cc:fc:74:7b:cd:
7a:05:ae:84:69:29:29:f1:df:db:c3:2e:99:54:38:74:24:d4:
81:ee:c3:48:f0:b8:8a:69:a3:61:a2:62:14:0e:fc:13:97:6f:
19:55:3b:96:0f:06:f0:28:28:9f:83:0e:09:fa:f1:04:22:ba:
8d:ae:12:a5:1b:a4:bf:38:e1:5f:5c:08:78:fc:44:7f:d8:73:
e1:e3:eb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:02 2025 by rpki-client