Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
File: l9nve9MDJN7fcLrOS72ldgwyaxo.mft (raw, json)
Hash identifier: QpOPLK+duCe2K2aO34IbVitqQKZZtEysRxKcRWTk/j8=
Subject key identifier: E7:A5:E0:78:EA:BA:C8:DF:AC:0A:F2:22:3F:6F:8F:47:AB:78:6C:81
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial: 019923313050C9DC613C397B43AF54554C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
Manifest number: 0F39
Signing time: Sun 07 Sep 2025 08:00:49 +0000
Manifest this update: Sun 07 Sep 2025 08:00:49 +0000
Manifest next update: Mon 08 Sep 2025 08:00:49 +0000
Files and hashes: 1: N0s8xKfa_bF09tlRJvpRIiwnl5w.roa (hash: 90x2GkpRoKN6DUPIyJuUzKhNvSMsOvRGP9u2xtqB9lE=)
2: l9nve9MDJN7fcLrOS72ldgwyaxo.crl (hash: Ap3hKIBwhKRMlmknLFE1stv+KO6bviwr1xVZV0/jcP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:30:50:c9:dc:61:3c:39:7b:43:af:54:55:4c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Validity
Not Before: Sep 7 08:00:49 2025 GMT
Not After : Sep 8 08:00:49 2025 GMT
Subject: CN=e7a5e078eabac8dfac0af2223f6f8f47ab786c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:36:0b:d7:cd:65:9d:4e:08:31:73:37:66:
92:5f:29:85:90:5c:3e:6a:84:f1:74:6d:19:6a:10:
67:87:d2:3f:2a:05:3a:3f:75:77:43:f1:21:6a:cd:
76:9f:76:ae:8a:74:58:79:6f:be:78:f8:56:8d:57:
86:8b:50:05:ce:f1:69:03:7d:d9:3c:a0:cd:f0:e2:
bd:2a:7b:fe:c8:06:b2:6e:bc:cd:1a:26:91:c0:48:
7e:9a:a5:59:18:5c:7d:d7:0c:7d:7a:65:8d:92:9b:
13:c4:d6:58:7c:99:0c:38:de:7b:1a:69:10:2e:c2:
74:0a:d2:46:40:db:2e:ef:30:bd:c7:8e:c4:f3:f3:
6f:8c:88:43:0e:f7:d4:c1:db:3c:52:a3:71:8a:f5:
67:02:6d:13:08:03:d3:50:db:67:d4:3a:4d:ed:cb:
59:bf:79:d7:04:b7:0a:77:db:fb:fd:3e:49:db:79:
3d:89:19:94:23:be:48:ad:c3:e6:3b:e8:06:1d:f9:
3d:64:b2:ce:ff:50:ef:fa:da:0a:3d:d7:fc:f0:8e:
6b:62:84:c1:bf:1f:79:03:72:35:07:7d:4f:2a:9d:
8d:a6:74:b9:1c:44:7f:67:d2:82:e7:9b:f1:98:e8:
75:7b:57:01:4d:54:e6:8a:cd:57:18:73:d1:e8:b0:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A5:E0:78:EA:BA:C8:DF:AC:0A:F2:22:3F:6F:8F:47:AB:78:6C:81
X509v3 Authority Key Identifier:
keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2e:c7:e2:c0:b5:3c:73:8f:8d:c8:cf:71:0a:83:63:60:2a:
88:b3:c5:27:38:68:b2:c1:2b:45:21:5e:1e:bc:75:35:3a:3b:
a7:37:46:ae:8e:78:24:86:9c:09:fe:a5:bd:42:b2:c1:48:56:
a9:1e:78:03:13:5a:b5:09:2f:0a:56:8a:28:4c:02:ec:e2:cf:
a7:3e:63:09:1c:02:23:59:08:0f:f9:3c:9b:85:e9:a6:49:9d:
41:86:92:89:79:6f:32:a3:49:4c:26:ac:d2:80:9e:d0:45:ea:
da:6e:00:04:07:02:74:82:cc:ab:23:d2:0d:e7:07:b7:f6:01:
53:2a:b3:f1:32:0a:54:67:82:4f:fa:ae:0a:2e:92:c1:b5:20:
6e:93:f9:03:ee:12:92:f0:2f:ea:ff:e9:50:69:6b:c6:66:b9:
f2:f4:dc:b7:eb:8b:25:bc:60:69:97:fd:40:67:a0:fc:10:05:
dd:72:68:bd:96:52:50:fb:df:11:44:6e:ff:c5:87:8d:d8:6d:
1f:4b:28:1c:23:60:7f:eb:2e:83:16:d3:52:6c:33:10:96:c2:
e4:eb:e0:c0:5b:04:d1:0b:45:7a:21:fa:ba:21:78:d2:ff:80:
16:37:43:60:30:67:47:55:1b:9f:5a:f3:53:e3:f2:ea:b8:81:
21:9e:84:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:04 2025 by rpki-client