Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
File: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json)
Hash identifier: aiw0ZeE1JXyJdn3U2oHKIEJIqlxCpKHT6yUbFQDd5DA=
Subject key identifier: 3A:DD:9B:7A:48:25:A6:87:C0:62:A5:31:F2:94:A6:4B:37:4B:3E:5D
Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
Certificate issuer: /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Certificate serial: 01992C6B4F844DD5FF3BA3F0CD71CF3C407C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
Manifest number: 0299
Signing time: Tue 09 Sep 2025 03:00:54 +0000
Manifest this update: Tue 09 Sep 2025 03:00:54 +0000
Manifest next update: Wed 10 Sep 2025 03:00:54 +0000
Files and hashes: 1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: wLs/wXb2YgsVLMWiFGzSWorSbLBsD54rcxDNUdUXH1s=)
2: wD9ir4CCy4E7zOefD7Z-y5RvpRY.roa (hash: 7sn9k3wlZ/27RuueZ6o2qKtcwJI5H5fdnvFFf1ud6xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:4f:84:4d:d5:ff:3b:a3:f0:cd:71:cf:3c:40:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Validity
Not Before: Sep 9 03:00:54 2025 GMT
Not After : Sep 10 03:00:54 2025 GMT
Subject: CN=3add9b7a4825a687c062a531f294a64b374b3e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:4f:07:63:94:b0:de:01:bd:b3:ca:29:e0:
64:18:52:ca:23:2e:c1:38:a5:5c:bc:df:4a:a6:de:
9d:c3:f6:ae:d4:9e:72:56:67:31:6b:f2:1e:38:a0:
0a:13:ba:57:31:09:a0:a0:7c:33:cb:2d:08:31:1f:
8e:00:df:3a:5f:b8:c6:8e:d2:08:30:a6:95:8e:f1:
9f:30:ed:71:ac:00:fc:b3:8a:39:43:7d:0b:04:81:
16:7e:68:f7:04:db:98:70:96:70:bc:02:2a:c1:07:
d2:81:2a:34:c4:ac:fd:07:26:f0:33:02:de:36:a7:
3f:0e:b1:b5:a7:f5:82:bc:37:37:5f:af:6d:60:73:
ff:fe:24:00:df:10:75:38:57:41:7c:78:42:c3:d5:
06:d6:e6:b9:7f:09:84:db:6e:90:46:11:d9:85:0f:
d5:73:67:67:45:57:1b:c5:5f:e5:f8:17:58:24:3b:
9e:aa:83:d4:33:5a:d5:1f:9e:00:e8:ad:f0:3a:aa:
de:11:bb:6a:dc:d5:1c:f0:e1:70:ae:d6:04:0c:8e:
5f:44:f1:cf:dc:bc:c7:6a:59:4e:60:d3:46:d9:af:
24:9d:7e:fa:a4:f8:91:ef:3e:f0:80:fd:1a:70:7e:
16:1f:95:5d:55:23:ad:98:05:46:db:63:63:cf:eb:
70:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DD:9B:7A:48:25:A6:87:C0:62:A5:31:F2:94:A6:4B:37:4B:3E:5D
X509v3 Authority Key Identifier:
keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:25:70:b6:4f:69:7a:6e:2b:d0:3e:2b:66:9a:e4:74:2b:bb:
d3:64:45:b5:ae:06:69:53:1f:30:5e:3a:d3:7b:35:65:d7:bd:
b6:8b:52:ba:a2:ee:82:14:c3:d6:7e:5d:75:46:e4:eb:2f:22:
bd:30:ec:b0:d0:b2:86:8e:4b:b8:9c:93:08:f7:5f:8e:15:65:
9f:8b:fc:fe:8a:de:4f:92:10:bb:8b:1a:6a:c8:12:de:65:f8:
ca:37:ad:96:ba:67:4a:38:c3:c3:b9:87:28:95:d3:eb:fc:70:
14:7a:1e:06:7c:4e:9f:c5:f2:01:bc:88:3d:65:93:67:0c:53:
e7:f1:fa:b4:72:47:92:f6:f1:de:3e:16:ec:28:9b:49:6a:da:
21:e5:f8:fc:04:0e:78:93:0e:4a:ed:f0:3b:fa:0c:ee:67:a6:
ae:b6:d4:25:12:8d:0f:cb:c3:a1:73:a2:39:57:34:23:88:d9:
8c:63:4e:c8:f6:e3:d8:e0:a6:28:1a:df:4c:3c:87:3b:d6:39:
70:d8:ae:66:f1:d6:13:d6:1d:73:c4:e6:a4:7a:18:68:91:c7:
06:1a:e7:32:1b:00:ed:e7:4a:8a:88:01:6a:fc:4f:48:e4:48:
20:2e:84:49:70:52:2d:50:6c:1c:18:14:f7:22:88:27:3f:77:
fb:c5:1f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:57:22 2025 by rpki-client