Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
File: 6f383DJhtXr63-1zD7Le2yhkn88.mft (raw, json)
Hash identifier: 3EoH5gnJrrrDEBX5Evvt1T4lcWBIaV9pKXcMxgOXmjY=
Subject key identifier: 97:B5:4C:5B:A1:60:E6:32:09:18:88:37:F4:B1:2C:98:48:F3:75:04
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial: 01992330CF214A9DC5563F6261DA65349C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
Manifest number: 1678
Signing time: Sun 07 Sep 2025 08:00:25 +0000
Manifest this update: Sun 07 Sep 2025 08:00:25 +0000
Manifest next update: Mon 08 Sep 2025 08:00:25 +0000
Files and hashes: 1: 6f383DJhtXr63-1zD7Le2yhkn88.crl (hash: 23BFWxYpBG7Hd4WHBKv3JCoCgoyPlAjo8RpIGevtfTA=)
2: Tci-duFHvWMEGttKQ92T_aViR_A.roa (hash: TNMB/iEiiWHvlZINV0FtcnUi3rWiLmL/5woKI9WyM90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:cf:21:4a:9d:c5:56:3f:62:61:da:65:34:9c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Validity
Not Before: Sep 7 08:00:25 2025 GMT
Not After : Sep 8 08:00:25 2025 GMT
Subject: CN=97b54c5ba160e63209188837f4b12c9848f37504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:a3:90:f5:05:b5:10:87:ee:c2:e8:b8:ba:
7b:73:65:8d:04:29:16:c2:12:15:a6:14:05:19:24:
df:81:69:49:47:de:5a:af:64:d2:52:ae:2b:d9:2b:
ef:e0:1f:73:59:16:e0:6b:37:93:3f:ad:13:72:90:
9e:19:82:02:97:69:a7:f5:e3:a7:ab:fd:d6:48:e9:
42:32:46:8c:27:df:9b:66:aa:61:4b:3c:0e:39:10:
82:1c:88:31:78:c6:eb:4f:0b:03:f1:7a:90:95:49:
09:10:60:2c:15:13:04:6a:7c:c0:c3:17:64:c0:74:
6a:a6:5b:d6:e0:a2:2e:0e:b3:72:53:d8:38:d5:c0:
a1:f3:19:ed:c7:58:26:fd:a5:3a:4f:2d:33:27:22:
8b:2a:b4:2c:e2:54:b0:04:ef:9c:8d:9f:84:63:73:
fe:b5:f9:94:38:8d:17:f0:f3:1d:50:13:24:0a:b5:
94:9d:27:4f:0d:3e:69:25:67:e6:da:39:30:c3:e9:
6e:9b:c1:00:98:34:b5:74:c2:77:2e:8e:cf:eb:32:
fe:43:b5:02:87:9a:43:c8:96:06:bb:a8:ef:b8:34:
8f:37:fb:78:c4:f7:0b:8e:71:6a:49:33:00:4b:3b:
38:3b:4f:e2:7a:42:18:bc:c7:c5:dc:32:78:56:e3:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B5:4C:5B:A1:60:E6:32:09:18:88:37:F4:B1:2C:98:48:F3:75:04
X509v3 Authority Key Identifier:
keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0c:5e:75:3e:54:81:9b:db:be:d8:4c:cf:d8:bd:5a:a8:c4:
c4:91:c1:06:47:6a:bb:5b:56:f3:30:28:74:62:ec:a7:cb:47:
9e:61:cd:0c:31:a9:d6:1d:8c:a9:8e:95:ec:ec:f6:1c:d4:3c:
98:fc:8c:82:de:82:8d:b7:d4:4c:18:ea:3a:1a:57:b0:71:78:
59:2f:a5:9f:7b:9c:17:ec:f0:cc:19:5c:bc:bb:e2:28:c7:82:
40:95:fa:4e:9e:89:06:a1:56:b4:ba:31:7a:36:2a:4a:c1:da:
83:0e:ca:22:56:01:90:b3:0b:3f:39:76:cf:b5:ba:8d:81:ed:
77:17:ab:75:b3:11:8f:55:4e:af:8e:ec:ec:65:0f:66:e9:74:
25:57:58:ef:6f:d2:f7:26:78:c2:3f:a5:9e:70:03:e2:83:92:
00:bf:51:ad:63:7b:6c:98:3d:f0:e0:44:eb:d7:42:00:7e:98:
b7:94:aa:21:42:b2:05:ea:5a:aa:86:1d:7a:ea:c5:14:37:95:
22:d3:16:af:72:4d:f8:e7:5c:1f:ee:c8:e1:90:49:cd:8a:8e:
8c:b2:58:15:51:35:57:4f:ab:2d:a0:83:d3:fb:99:27:4e:4a:
08:d3:28:f7:4b:fb:6e:d7:34:79:39:94:7b:62:7d:de:be:9c:
f6:93:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:22 2025 by rpki-client