Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
File: 9NwmxibFHF3vbyRm849VslApZC8.mft (raw, json)
Hash identifier: mIUgd/OHt0ULMwCZo3IzjbW9hc2+XFMKTW4KnlHzo/I=
Subject key identifier: 70:82:02:74:63:60:D1:D2:12:E3:76:33:FB:01:D4:23:D0:CB:62:88
Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
Certificate issuer: /CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Certificate serial: 019923A08B7ED75D303814620F1230AC79CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
Manifest number: 0EDD
Signing time: Sun 07 Sep 2025 10:02:27 +0000
Manifest this update: Sun 07 Sep 2025 10:02:27 +0000
Manifest next update: Mon 08 Sep 2025 10:02:27 +0000
Files and hashes: 1: 9NwmxibFHF3vbyRm849VslApZC8.crl (hash: yqg74dRA8NkmYzn3nsw6AQxsupvzhSNDzcbGd3WnyPQ=)
2: XI2V1xAOtuCnHnEsCZ4HB4sk5c0.roa (hash: NGuYGkHyS6sZ+OmDpCbd7Xg31/u7/ppig2sfjfcm+Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:8b:7e:d7:5d:30:38:14:62:0f:12:30:ac:79:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Validity
Not Before: Sep 7 10:02:27 2025 GMT
Not After : Sep 8 10:02:27 2025 GMT
Subject: CN=708202746360d1d212e37633fb01d423d0cb6288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:72:16:61:5d:70:1b:3c:34:30:ac:2a:02:
51:82:a1:30:52:e3:56:e2:c4:9f:0c:ee:fa:47:fb:
e1:71:ad:47:19:67:c0:ef:80:da:0a:90:a0:e0:64:
f8:5e:eb:53:34:b7:58:34:aa:ea:a4:d6:a9:b3:36:
b9:ef:7a:66:7f:2c:c9:cf:97:42:e0:2f:9b:db:48:
30:44:a3:d9:be:8b:87:99:39:92:1a:80:69:e1:b8:
94:08:fa:10:1e:2c:2a:4f:d4:37:3f:11:8f:dd:2b:
03:a7:9b:a3:ec:33:9e:f6:0f:45:96:89:cd:41:7d:
1e:15:74:f7:73:7e:66:ea:bc:04:e2:ce:bc:a3:9a:
9c:2d:20:95:c5:45:cb:a2:e0:52:84:04:d2:15:61:
37:a4:73:eb:e6:41:b4:77:df:67:69:e5:24:e7:71:
16:e1:7d:1a:28:21:c2:81:b2:e9:c3:6b:01:8d:8a:
bd:7a:6a:cf:7f:76:c4:95:63:34:09:1d:c9:eb:90:
3c:f5:05:f5:d8:60:a1:bf:31:46:2b:87:7c:90:59:
25:dd:d4:dc:48:cf:6b:fb:68:10:59:c2:d5:78:73:
dd:6f:e5:b7:ca:be:24:c3:83:bb:2f:fd:8a:39:9d:
eb:da:57:9f:ae:fd:73:6b:71:41:f7:06:fa:e6:32:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:82:02:74:63:60:D1:D2:12:E3:76:33:FB:01:D4:23:D0:CB:62:88
X509v3 Authority Key Identifier:
keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:09:4b:da:74:c2:6c:5c:28:36:a9:0b:6a:ef:18:4a:00:ca:
4e:77:57:62:e5:f6:67:0d:d6:ad:85:11:a8:b2:dc:05:99:a5:
90:86:5f:93:6f:2b:5d:6d:58:67:05:6a:b4:ba:69:3a:b2:2d:
65:ca:90:29:5b:c6:bd:42:35:a5:cc:ba:4a:20:ea:89:1d:4a:
6e:a7:ef:97:39:97:2b:47:c0:f1:f1:62:b4:55:d8:b0:a2:4c:
9b:dd:a0:3d:a1:26:a4:2b:be:69:48:d8:db:88:5b:f9:ee:e7:
57:a3:e7:61:32:4f:12:12:f8:0a:21:a4:98:d3:7a:92:6d:9a:
06:b7:97:4b:e8:ab:6b:85:b8:3d:b5:fd:8b:4a:3c:46:f7:7a:
9a:da:75:d5:1f:2e:61:4b:24:db:52:4e:cf:0c:5f:ba:c2:80:
f8:f7:38:22:c2:dd:a9:83:e9:e6:43:ae:65:0c:d2:99:f9:6a:
cb:1b:3a:b8:81:f7:26:26:1f:25:77:d2:4a:4d:e2:06:9f:36:
42:9b:51:75:2e:1a:d0:8a:88:6f:34:66:2a:0e:e7:66:14:1f:
95:52:d7:8b:f7:9c:06:28:85:c8:da:94:8c:0f:cc:bc:8f:05:
b7:4f:fd:61:59:33:9a:92:a5:d2:4b:94:33:97:bc:2b:78:de:
34:87:0a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:12 2025 by rpki-client