Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File: ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier: geUIzcrPHz3HwFdpQ5ma4YWslJh4FN0gwfTBL3nDMOE=
Subject key identifier: 27:79:23:F3:9B:26:8A:D5:72:86:2E:FE:E4:65:FC:E8:9C:03:21:6F
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer: /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial: 019935373CE3C5EB29A1B09F9FAE4E5B609C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number: 0ED3
Signing time: Wed 10 Sep 2025 20:00:36 +0000
Manifest this update: Wed 10 Sep 2025 20:00:36 +0000
Manifest next update: Thu 11 Sep 2025 20:00:36 +0000
Files and hashes: 1: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: Z6AmNmMJyIkhc/xmMg4egzpZhPUCaCxGbsqERAv2dbQ=)
2: uweYkDCu-qqfi3ug1YgUgTCGT6M.roa (hash: /KpNT+Dkmz13bWhCJTvJ8D+AbxL/YrXSoux1HxprkcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:3c:e3:c5:eb:29:a1:b0:9f:9f:ae:4e:5b:60:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Validity
Not Before: Sep 10 20:00:36 2025 GMT
Not After : Sep 11 20:00:36 2025 GMT
Subject: CN=277923f39b268ad572862efee465fce89c03216f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:ba:97:a0:c1:df:f6:a4:9a:b7:4d:db:f6:
9f:96:c4:ed:2e:19:50:1b:f6:37:aa:0c:97:ee:6c:
d8:b5:60:3b:43:67:9a:f2:4e:31:9c:b0:37:98:bc:
c0:d3:93:ca:bc:54:0b:8a:0d:85:05:aa:4e:74:e6:
8c:24:94:b1:eb:af:49:88:ee:32:d4:b5:88:e8:5d:
97:bb:cb:3c:ab:d6:9e:f8:3f:a8:f0:b9:ee:ac:13:
7d:df:65:34:84:b4:f9:60:bb:8e:47:cc:b5:c6:19:
eb:47:c0:71:68:55:65:f8:e0:03:32:2a:5e:cd:dc:
82:ce:b6:16:0c:a0:ec:01:31:de:08:90:b8:83:b7:
b6:16:92:4a:39:9e:b0:2b:1b:83:ed:c7:01:0b:87:
15:96:3b:68:79:fc:9a:68:7d:93:b1:8f:71:e8:a5:
95:1d:7f:c3:26:0b:42:d0:c8:3a:01:da:9e:24:f9:
87:eb:1d:65:be:8d:eb:8f:d9:95:16:3c:78:ae:a4:
fe:58:4f:62:4c:b2:98:85:31:69:49:8a:a0:f9:c9:
4f:95:52:d4:3d:9a:6f:13:5d:7f:b0:e4:e9:13:0e:
21:4c:24:95:52:20:d7:61:88:28:f3:67:73:04:ae:
ff:00:ae:60:f9:23:20:cd:62:80:a2:75:4a:94:da:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:79:23:F3:9B:26:8A:D5:72:86:2E:FE:E4:65:FC:E8:9C:03:21:6F
X509v3 Authority Key Identifier:
keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fe:c0:b5:57:84:fe:d1:1f:55:4e:cd:f4:e5:c6:05:ba:cd:
1b:0f:ce:4f:08:77:55:05:35:ea:75:fa:c3:e9:b7:ad:44:db:
70:9b:d9:b4:8b:6d:88:f9:98:3a:24:8e:2d:7e:8d:0b:94:20:
30:dc:cc:c1:fb:2e:ad:a4:dd:4c:a5:45:ba:80:8d:d8:a3:44:
83:f8:da:69:5e:37:8c:ed:14:c0:da:88:65:45:5c:5c:93:4e:
49:19:ce:bd:35:2a:c9:c8:f3:84:23:73:45:91:84:6e:8c:2b:
d3:25:22:54:b0:fa:64:7d:c5:57:a1:b6:90:83:dd:27:63:35:
ce:d1:2e:b7:58:60:9e:3d:1a:53:db:c1:42:8e:7e:e4:d3:92:
ae:8e:51:42:ad:27:9c:ae:33:72:f2:2e:c5:dc:29:8b:ee:ba:
90:f5:b7:bb:c1:ce:ac:66:2e:e7:8b:95:9e:54:05:ce:f4:0e:
91:b1:82:bf:d7:db:fa:c7:db:c2:dd:64:31:92:ff:c7:bd:72:
4d:74:17:6d:ba:8e:c5:34:3b:70:ad:e7:f3:57:d1:70:e8:cc:
32:55:2e:16:ad:6a:07:28:cd:b6:ba:e9:a5:24:b9:06:df:13:
13:06:49:f4:92:7a:a4:c4:e8:1e:b5:4f:00:b0:7c:1a:f5:72:
5a:11:fa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:57:48 2025 by rpki-client