Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File: INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier: ugoCGWAF9e5bNC4EocUCMWa2AC4VyRwR+o7/Y+X7cYs=
Subject key identifier: A6:E2:8B:06:B3:B7:12:DD:BD:82:12:BC:68:61:5C:16:6C:56:F1:6E
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer: /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial: 01992255AED1EFA67465723BA79F06DFD519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number: 0AE9
Signing time: Sun 07 Sep 2025 04:01:04 +0000
Manifest this update: Sun 07 Sep 2025 04:01:04 +0000
Manifest next update: Mon 08 Sep 2025 04:01:04 +0000
Files and hashes: 1: 5OMr3xKs8jvtoFSwFc24Cwr8qm0.roa (hash: yTyBz+xUzE60EnbY56LmeruhsoeDG36ww4aSRH8th0I=)
2: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: YWwy/CCFcVq9023r5dyzbP1aMnvm5eW6O6nIDQ8AJSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:ae:d1:ef:a6:74:65:72:3b:a7:9f:06:df:d5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Validity
Not Before: Sep 7 04:01:04 2025 GMT
Not After : Sep 8 04:01:04 2025 GMT
Subject: CN=a6e28b06b3b712ddbd8212bc68615c166c56f16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:4d:de:5e:eb:c6:66:2e:bf:97:c8:8e:eb:
15:4d:5f:74:c1:19:9e:b5:c3:1a:95:aa:48:6c:35:
a6:9e:ac:b2:05:93:f6:10:36:fe:58:bd:57:83:1f:
70:e1:30:8b:c8:c3:bb:e8:63:65:fc:c4:81:d8:41:
f5:9e:08:84:12:2e:e5:8e:71:c3:2b:36:f1:1e:72:
0d:43:e4:cf:8b:1e:ed:e2:6d:87:6a:72:37:60:31:
df:e0:f2:6b:e9:1f:dc:77:9b:05:55:4d:51:01:fa:
b5:da:f8:d0:f3:83:d7:1f:29:4e:a8:73:c6:88:ae:
f9:09:eb:1b:ac:bf:85:6a:5f:de:6c:1d:b5:db:a4:
6f:07:28:c7:04:55:d9:ff:13:03:aa:04:c4:c5:bc:
aa:55:a0:b3:0f:2f:1d:73:fa:e8:08:32:06:41:ee:
47:2f:17:3c:b8:9d:e4:be:f9:f2:92:0d:fb:2d:b9:
99:c7:e6:8e:ce:4b:ea:da:48:a5:7f:9b:b4:ec:7d:
ea:e6:e0:24:c3:10:9b:03:d0:fc:0a:33:71:9a:46:
0a:47:27:4a:a6:b6:ef:35:85:6d:49:66:11:bf:9b:
b6:c8:24:07:fd:27:29:ca:58:5d:b9:5e:50:b0:5c:
c5:7f:64:bc:0e:a1:8c:d7:f4:a3:a3:c0:11:a7:16:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E2:8B:06:B3:B7:12:DD:BD:82:12:BC:68:61:5C:16:6C:56:F1:6E
X509v3 Authority Key Identifier:
keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f2:5c:8a:d3:81:d7:aa:4c:2e:4e:e0:64:17:b4:33:4e:09:
f7:e7:79:7c:39:88:19:c9:af:9c:89:c3:20:30:ed:e3:1a:ac:
38:93:bf:52:1c:82:b9:a4:13:31:7f:bd:0b:c2:28:74:af:cb:
62:d0:d8:f3:ad:3d:cf:50:29:a9:e2:af:44:d2:31:6f:9f:78:
91:cb:b3:2d:2c:8d:09:80:22:9a:26:aa:a2:6d:02:94:e3:f9:
a3:38:6e:92:e0:e0:27:ca:ce:39:a9:39:4e:10:26:50:72:18:
24:c8:7e:fc:e9:1b:d3:d6:d5:62:e0:ba:81:1f:26:d9:6d:f8:
d8:fd:30:1d:b5:12:ec:d2:c0:a2:ee:07:8d:53:ab:b2:5d:32:
fe:3b:8a:b4:8e:3c:71:3d:4e:1d:db:4b:26:c1:18:cf:af:5d:
a3:8e:e1:c9:43:55:b5:70:e6:95:5a:be:8e:36:4c:ec:74:e6:
59:c7:e7:3d:26:12:0c:c9:71:8f:3a:12:58:c8:b1:48:4d:55:
c1:f5:29:be:d0:7d:a6:ec:ee:f8:b5:8e:f8:3a:c2:47:4b:7f:
33:d3:3e:ff:8e:e9:5a:0c:a9:3c:86:37:52:b0:6a:4f:84:0f:
a1:29:84:60:08:1e:fb:c6:c9:e5:f1:49:ab:02:14:17:96:90:
8e:07:48:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:55 2025 by rpki-client