Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
File: 9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json)
Hash identifier: nXdJ2b0aO4cg1juIwYy5yQQMh4fwJhNggI2a82/gZvw=
Subject key identifier: 18:7E:3D:1B:AF:A4:21:0D:53:7C:AB:05:FF:6C:AF:C1:6F:95:2D:39
Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Certificate issuer: /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Certificate serial: 01993725A85C3F7CC0FE0DBBB35DBFA4CE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
Manifest number: 079B
Signing time: Thu 11 Sep 2025 05:00:38 +0000
Manifest this update: Thu 11 Sep 2025 05:00:38 +0000
Manifest next update: Fri 12 Sep 2025 05:00:38 +0000
Files and hashes: 1: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: N/0MHUtuIer16pdB1e7ePpzl8IBbrEuLBwo+2hY68ng=)
2: NNs7_agCq4a5LGK9vlJAbRyPMSw.roa (hash: /RavIGbCYx2zogfJiuXee/WpGjlrh9UdwbzPF7/qVAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:25:a8:5c:3f:7c:c0:fe:0d:bb:b3:5d:bf:a4:ce:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Validity
Not Before: Sep 11 05:00:38 2025 GMT
Not After : Sep 12 05:00:38 2025 GMT
Subject: CN=187e3d1bafa4210d537cab05ff6cafc16f952d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:35:04:91:59:67:bd:bf:0d:64:e0:f2:3d:
82:4b:5c:68:cd:14:da:ee:8f:27:1e:cf:ec:79:de:
e3:c0:5e:61:8a:a2:29:ad:0d:fc:37:71:1b:84:8b:
bd:ea:1b:f3:e7:1a:8b:65:38:a7:37:34:45:ea:be:
b5:df:64:0d:46:50:b8:a3:d9:fd:aa:aa:01:75:c3:
4b:1f:54:65:a2:72:a5:49:b3:31:60:2e:e6:36:4c:
62:37:d4:41:ab:61:68:c4:41:09:08:5c:9e:ee:39:
0c:d7:e4:c9:46:7f:9a:ac:34:54:d3:23:02:64:55:
a9:9b:18:cf:d5:d3:d1:f5:95:2c:9c:52:e3:e5:b7:
ec:56:a2:2d:a7:30:38:de:97:b6:71:82:b3:45:be:
86:5b:7f:fa:bc:74:19:a6:c5:75:ca:fc:20:e1:2c:
3a:4d:f3:0c:ad:a8:9b:e6:38:0b:31:56:32:bf:38:
31:50:a4:af:40:8c:2d:09:0f:0a:54:70:6c:75:28:
15:47:a4:3a:31:0e:b3:b1:54:34:f2:81:c8:9b:e5:
dd:fe:19:63:7e:5f:56:3b:d3:6c:78:51:71:e2:74:
13:a4:06:05:b3:97:ab:27:75:6b:f5:ee:1e:01:c0:
10:ec:4a:f1:00:66:2c:1b:f8:e0:c7:a9:f5:21:25:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7E:3D:1B:AF:A4:21:0D:53:7C:AB:05:FF:6C:AF:C1:6F:95:2D:39
X509v3 Authority Key Identifier:
keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0f:6d:d3:e7:88:d8:5b:89:3f:a5:4d:7f:b8:cb:7a:71:bb:
f1:3f:05:8b:dc:7b:ee:99:26:65:b8:4b:1f:d2:4b:af:92:f4:
c9:7c:26:2e:72:47:cf:64:bf:93:a8:90:6c:f1:6a:73:d3:42:
97:0d:02:f0:30:cd:c6:29:22:b2:b6:ff:b0:3f:96:84:b2:db:
2f:6a:95:84:a8:5a:2e:34:ff:12:2f:6c:39:cf:d2:62:01:69:
23:45:40:b2:46:66:05:f7:ab:e6:c5:3b:f6:9d:25:bb:79:87:
bf:39:93:98:2e:a0:47:77:ae:9a:b9:4c:76:2c:77:a4:8f:b3:
98:5e:4a:5c:96:1b:c4:76:ce:30:98:1c:6b:00:3b:b7:7e:e2:
b0:d3:9f:bf:ff:44:66:9a:63:90:2a:99:f7:3e:19:11:ae:c0:
cd:97:4d:b3:55:b5:93:1f:84:1c:2c:64:ff:33:74:b7:b4:61:
64:da:bd:ed:1c:cd:e6:35:f4:ac:22:cd:67:c0:e8:8d:a5:e1:
00:2f:d2:0b:16:e3:d5:7a:71:23:c7:b7:1c:db:ea:9c:4b:ed:
46:1a:64:fd:a4:eb:76:17:6b:05:d6:e1:71:b4:9f:c2:f8:d5:
9b:c5:67:6f:f8:41:d3:b4:d2:51:47:57:dd:f1:02:b3:c6:a5:
8d:5d:5a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:59:16 2025 by rpki-client