
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
File: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json)
Hash identifier: F0Fnb5ECDW/yEhN3XWvpaFGecDIsUAaa6fErvLC8v34=
Subject key identifier: 2D:7A:19:2E:C7:F7:67:E1:13:6C:72:58:4C:49:56:7A:7C:05:8C:F3
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial: 0199183F799ACAF037C77BFA2100AF1DB2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
Manifest number: 1113
Signing time: Fri 05 Sep 2025 05:00:36 +0000
Manifest this update: Fri 05 Sep 2025 05:00:36 +0000
Manifest next update: Sat 06 Sep 2025 05:00:36 +0000
Files and hashes: 1: 8IrRnzXhLEtJOzQ76JyjoEUrlXo.roa (hash: twXscxBiA6A/cPdgQ7hNA9EiiSEcOyWKVNdA2W42KG4=)
2: LsBMcdJw5xS8I63MgOSx7GP6YGo.roa (hash: eclfzXKV6RSN6OrnDOnk9OvTtMq4JN86esMRl2QpoQY=)
3: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: DL5cSvLb+J2uEVMW4nuGlp0dxxPDr0bo4j9h9iYBELs=)
4: RP5jpn-uKD4VZqtBiaKoc8atoPw.roa (hash: QDcnUril7uwVWWdbILh+cVbAEXM+2Qt6gMgTdP6yAQo=)
5: UEQBycXO84xxZEefVNxr90yQeH0.roa (hash: TEj6JdNtANQj346QJ0SBfIpcEXL1H4ox6W/yWcLs2Y0=)
6: ufd9I1sTMu_-cmgS_4wyO_C2LOU.roa (hash: t8YD8zi5UguFlovOm8R2XRjIBtMUKaWMQ8CNRGn6mYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:79:9a:ca:f0:37:c7:7b:fa:21:00:af:1d:b2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Validity
Not Before: Sep 5 05:00:36 2025 GMT
Not After : Sep 6 05:00:36 2025 GMT
Subject: CN=2d7a192ec7f767e1136c72584c49567a7c058cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:f5:c9:c5:3b:b9:0d:a5:8a:fe:52:2c:8d:
38:f8:9a:92:84:ac:26:3e:8a:f6:b4:3c:9d:4a:9d:
70:e7:ab:65:6b:8b:f5:0f:12:ac:a5:50:76:c5:1d:
01:3f:27:f7:ce:1c:1a:2e:d8:62:51:1f:e9:3b:e1:
84:f9:cb:8b:ae:97:3f:7e:75:fd:36:5f:56:ee:29:
89:5f:b2:74:0a:2f:fb:aa:20:85:f6:d4:82:ef:3b:
56:35:63:5a:40:87:11:87:31:29:ac:0e:ed:a2:e1:
f1:b1:a8:a7:d9:3e:92:b5:91:08:43:06:eb:fd:0f:
29:e4:1c:e2:84:9d:be:08:51:19:32:4a:6b:07:bc:
22:76:fb:44:19:ac:8d:90:4e:b0:42:ed:d6:52:ad:
54:a1:40:90:5a:2b:0a:52:72:7a:00:8f:15:6a:cd:
0f:10:2f:25:c4:49:e7:34:b0:0c:b1:72:f3:51:29:
2b:57:ba:42:2c:c5:15:e9:11:b9:d5:59:89:3d:b4:
df:36:8f:b5:23:ae:e2:77:f7:71:1e:17:a0:cc:6e:
6d:75:c8:68:11:ae:c3:7e:84:c4:bb:c8:3c:b2:24:
2f:93:c3:6e:14:c5:c8:07:c7:1e:a4:94:ed:72:ef:
3f:50:20:0e:5c:68:bb:4a:f8:df:00:66:0d:1f:f8:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7A:19:2E:C7:F7:67:E1:13:6C:72:58:4C:49:56:7A:7C:05:8C:F3
X509v3 Authority Key Identifier:
keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d7:18:1e:55:5f:ab:eb:7b:4b:16:8c:9d:ba:0f:c3:d2:d9:
f9:e8:39:2b:f9:98:05:f4:b0:f5:62:88:4f:29:2b:98:8e:3b:
6a:ee:8b:b3:bf:fd:44:4d:06:c2:f5:c1:44:9d:da:e2:8d:71:
ea:7b:c4:10:8b:a7:15:9b:e1:c8:44:b8:79:53:cb:19:ff:3d:
a4:c2:38:14:59:91:7e:d2:6e:8f:8d:76:b2:1b:c6:2a:59:d8:
ec:7d:fb:9d:15:e0:ee:b4:95:e7:54:8b:f2:fd:af:e5:90:eb:
1a:61:a6:14:db:1a:66:87:37:65:c0:74:3a:40:4d:45:e2:31:
6a:00:b5:48:ce:04:4f:65:98:0b:97:d0:56:6a:66:bb:f4:f1:
22:05:d6:e8:1c:36:f9:dd:58:53:be:a4:91:b9:57:43:bb:c8:
40:6a:3d:74:4f:c8:ef:25:34:ec:a1:56:79:69:19:b5:b6:b7:
7f:f6:b9:45:f5:e7:3d:0d:6b:9b:6d:4e:95:e8:07:8e:93:8b:
d5:4a:61:72:03:59:4f:20:de:92:76:97:f4:fa:69:4b:19:99:
4c:49:20:a5:ff:05:ba:90:bb:94:5f:d9:01:05:41:cd:d9:28:
68:78:e2:58:aa:87:c8:17:4b:64:c4:92:43:5f:9b:23:38:a9:
79:26:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:30:22 2025 by rpki-client