Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
File: 9rLInTH2F1Fqhgp4IrumgkinaaA.mft (raw, json)
Hash identifier: XVl1h1sh/WKVIFpdAWAiO/4voA4NurloV/G6nucmMXg=
Subject key identifier: 84:F3:58:0A:E0:28:F4:06:2D:A4:FD:F5:14:B3:67:A2:18:3E:BB:B3
Authority key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
Certificate issuer: /CN=f6b2c89d31f617516a860a7822bba68248a769a0
Certificate serial: 019923A0D8086D63683DFDA9ECE6A2215050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
Manifest number: 0860
Signing time: Sun 07 Sep 2025 10:02:47 +0000
Manifest this update: Sun 07 Sep 2025 10:02:47 +0000
Manifest next update: Mon 08 Sep 2025 10:02:47 +0000
Files and hashes: 1: 0iYjHA4kyW6qTATWGW_TDJUOsEk.roa (hash: EaJ38giyluinl93rwFdYFKbOjiJmuj1tUHU09V9bmYM=)
2: 9rLInTH2F1Fqhgp4IrumgkinaaA.crl (hash: 5tkViHW1Xt6hjB35G3rIE9l/rC4suFx0Hh11qKMsCqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:d8:08:6d:63:68:3d:fd:a9:ec:e6:a2:21:50:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b2c89d31f617516a860a7822bba68248a769a0
Validity
Not Before: Sep 7 10:02:47 2025 GMT
Not After : Sep 8 10:02:47 2025 GMT
Subject: CN=84f3580ae028f4062da4fdf514b367a2183ebbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:41:52:db:7f:57:86:23:10:e4:f9:4d:e8:52:
46:3e:f7:c1:82:b4:3f:64:1b:ca:42:29:07:a3:9e:
23:5c:b9:85:d1:d0:63:af:ca:cb:b0:23:52:81:a0:
da:68:43:30:23:8d:62:78:0c:6b:03:e4:39:54:47:
ff:59:ef:75:8c:2b:ec:14:38:5e:d3:11:a5:8c:e7:
58:4e:7a:08:5c:93:4e:11:2c:0b:a2:89:1e:f7:86:
d1:ab:5a:59:16:9f:e1:ac:e1:95:31:e7:ce:cc:dd:
11:f6:f7:60:8f:9d:20:4e:f8:ba:50:8e:9d:26:af:
22:1b:63:ce:36:c2:ea:44:dd:e3:2d:05:91:69:82:
74:ea:1f:81:b7:40:6d:ed:ca:a6:dc:ed:2d:5a:28:
da:2d:62:4c:c4:1f:0f:8c:19:79:b5:05:3e:20:ff:
7d:ed:bb:ae:1f:31:dd:89:35:06:80:4a:c8:d3:14:
c8:11:aa:ee:5c:c3:f5:e6:f9:a6:7a:10:f4:77:32:
b5:df:f3:57:e7:86:59:13:ac:e8:ad:89:2c:3a:6f:
45:3f:0d:89:27:2f:f3:3a:3b:07:7c:bb:51:cd:a1:
d2:70:e3:7a:91:25:8d:ec:f8:52:60:b7:7b:eb:39:
f7:d4:84:61:1a:d6:88:50:57:41:d7:d3:62:e5:a8:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F3:58:0A:E0:28:F4:06:2D:A4:FD:F5:14:B3:67:A2:18:3E:BB:B3
X509v3 Authority Key Identifier:
keyid:F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:78:1a:62:65:81:1b:35:52:c2:52:b4:fe:73:d7:0b:33:1f:
e4:44:bb:25:62:77:ea:89:07:4d:7f:de:56:4b:b0:97:f3:ea:
da:7e:34:6d:41:bd:0e:74:7c:ee:f3:ee:4a:1b:fe:70:9b:a2:
3d:f8:db:96:68:8d:5a:41:47:9f:22:43:cc:f7:ef:77:0a:3e:
19:00:4c:2d:b8:77:55:19:ef:f3:06:14:ae:d6:c2:f4:f4:29:
66:1b:4f:84:55:fa:7b:ab:79:f1:67:3d:61:86:02:28:f3:46:
af:64:4d:4f:a7:2a:68:46:0c:99:08:ba:a1:57:12:65:9d:00:
5f:ac:af:30:47:3f:b5:9d:21:91:75:1d:97:bc:8f:f6:7b:7f:
63:ae:37:69:b1:5b:7c:83:81:1e:f7:d6:a0:f9:62:a8:e5:6e:
c1:b2:67:98:2e:61:7a:c3:84:6a:01:1a:1a:b4:f9:35:1d:1a:
b5:ba:2f:4f:d4:36:e2:0c:9e:72:3c:07:dd:fb:a4:b0:b6:72:
ba:a8:25:85:52:4f:1d:8c:da:f2:ea:cd:32:58:ef:92:83:16:
78:12:99:42:cf:8f:89:92:aa:d1:f2:d2:ff:39:d6:e8:03:2d:
20:3f:0c:5c:1c:91:78:d0:c0:df:7f:cd:bd:a1:73:d7:c5:9c:
bd:e5:73:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:29 2025 by rpki-client