Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
File: 9SMu6AX3jlku_yzKYVORCeWjRn0.mft (raw, json)
Hash identifier: iHZBTkNW9ug0kQLmGqkwAl4GMIW3fjLmY7vAGVR1SV8=
Subject key identifier: 1A:72:C3:6B:98:35:44:9D:0B:AB:BF:B0:03:18:63:CA:12:06:3A:AC
Authority key identifier: F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
Certificate issuer: /CN=f5232ee805f78e592eff2cca61539109e5a3467d
Certificate serial: 019922555F68F3B7C7CF2731597EB541022D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
Manifest number: 049F
Signing time: Sun 07 Sep 2025 04:00:44 +0000
Manifest this update: Sun 07 Sep 2025 04:00:44 +0000
Manifest next update: Mon 08 Sep 2025 04:00:44 +0000
Files and hashes: 1: 9SMu6AX3jlku_yzKYVORCeWjRn0.crl (hash: WzD7RNY9yJXgN6U6xh/zOUtq/Ol4LcCBNGmi+2B/hH8=)
2: mUlVQVQA_6DZI0Ul4lrD7MOPmCA.roa (hash: KLYv7255AIBTzhsrUwU5ETXppAJnyWMdZ4HLY5/fahk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:5f:68:f3:b7:c7:cf:27:31:59:7e:b5:41:02:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5232ee805f78e592eff2cca61539109e5a3467d
Validity
Not Before: Sep 7 04:00:44 2025 GMT
Not After : Sep 8 04:00:44 2025 GMT
Subject: CN=1a72c36b9835449d0babbfb0031863ca12063aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2e:1a:aa:9c:6a:6d:13:c5:ea:1d:34:09:97:
14:af:f9:3a:e1:5a:cd:ea:78:46:6e:b3:d8:c6:51:
99:fb:86:a2:2c:62:ec:44:8a:27:e9:af:30:47:a5:
d8:c6:11:7b:85:bd:ac:77:f5:e3:82:89:26:a9:fb:
01:6c:d2:38:37:0f:39:e7:2f:b3:de:5e:ed:68:07:
14:ba:17:65:1c:61:c0:f7:0b:c1:f6:24:96:00:7a:
75:a1:a4:8b:c5:eb:23:12:8c:a2:15:b1:a8:16:b5:
8c:46:a4:7f:30:df:f2:4e:6b:e4:42:41:b7:09:be:
35:3f:87:44:f1:6a:91:1e:8d:b9:a7:87:6e:56:6f:
c9:c5:45:05:b4:b2:6f:ec:ac:ab:45:bc:33:76:b2:
17:05:a1:ac:1f:9e:86:e0:e3:ce:75:33:40:90:10:
a6:41:f7:d0:72:f5:e6:2f:ae:af:5b:28:49:e9:dd:
18:62:4e:79:50:fa:20:63:fc:fc:28:26:86:ae:81:
e6:09:e6:31:f6:eb:9c:c0:d8:ab:73:87:b1:56:42:
fa:d7:68:0c:5f:e5:6b:9a:ee:75:5a:76:61:d5:5e:
f7:51:42:c2:71:42:1a:e3:ee:b5:52:9a:19:d5:80:
4c:a6:7a:70:75:34:29:c9:ea:cc:44:a8:81:4d:86:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:72:C3:6B:98:35:44:9D:0B:AB:BF:B0:03:18:63:CA:12:06:3A:AC
X509v3 Authority Key Identifier:
keyid:F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4c:0c:75:a9:9d:03:2f:24:dc:ea:ef:56:f1:be:ef:f1:4d:
a6:1a:6c:e6:96:3d:70:18:36:89:71:d7:cf:ce:5b:37:67:fb:
e1:8a:cc:1d:6f:2e:76:d8:8d:3d:ea:34:58:40:b9:4a:9c:1c:
39:a5:b1:cf:9c:1e:7d:d2:15:ed:fd:0c:0c:7f:22:dd:19:dd:
0e:d8:7d:2e:b9:f0:3c:e4:c8:ff:7a:e5:4e:7b:85:44:b1:51:
c7:4f:98:58:53:35:8b:e2:98:9f:f4:0e:e8:14:36:0f:d5:11:
df:4d:13:78:95:ae:c5:31:34:af:0e:4b:09:d1:d4:c1:e5:7d:
9d:e6:b2:57:19:ce:0b:4d:22:b2:85:53:fb:2a:8a:35:7d:d8:
eb:16:18:6c:10:7b:bb:2e:30:58:cc:79:f8:37:bc:6f:5e:bd:
89:4f:cf:e6:93:53:de:0a:74:72:ec:b1:d7:fd:eb:24:06:b3:
80:c9:f1:f6:be:15:2b:dc:9c:d5:65:46:01:25:99:5b:82:ac:
bc:76:00:e3:75:ae:57:6a:f5:a3:11:8d:d4:39:2c:66:72:d2:
c4:50:77:21:8d:28:bf:71:35:13:e5:94:19:d2:14:4d:96:1f:
86:e7:77:63:91:6b:33:3f:e4:fa:40:35:0b:47:c8:53:dc:b9:
a4:1b:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:30 2025 by rpki-client