Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
File: I9hEjFy5A5jkwoXOycD0dmrJMd8.mft (raw, json)
Hash identifier: PGit2v/yKr7LSykdt3eWcBBLtOCJHCB1PEww5ztGe78=
Subject key identifier: 56:04:A6:81:5A:94:7B:20:FA:8B:44:FB:88:76:60:7A:DE:7F:63:3D
Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
Certificate issuer: /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Certificate serial: 019963FE9E949EC385353BAB47B0CFE2853B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
Manifest number: 1694
Signing time: Fri 19 Sep 2025 22:00:54 +0000
Manifest this update: Fri 19 Sep 2025 22:00:54 +0000
Manifest next update: Sat 20 Sep 2025 22:00:54 +0000
Files and hashes: 1: 0R9hBHck9goXLckWs83vfzxcFiw.roa (hash: obv3yvxGMmGg4JBfXp95o/8uj2ocziHcF4Wd0qYKBC0=)
2: 2ZLinOVEwJGKFicgX--T-MLOzJk.roa (hash: c5tPFVJAjAdrD/biJVfWeRiWObKwMs1MmzB2QE9giIE=)
3: 9unXgezNMxzwNg4bzifOYAuCs0o.roa (hash: g4XwuMrRwxeGeiZBFLLb9s8Q1VZBOHGp5ebHoGbs+mc=)
4: I9hEjFy5A5jkwoXOycD0dmrJMd8.crl (hash: QYNQ9b4qi3A8dWtM4wc2n1orKj2R+CvhGYda95OYI8Q=)
5: dK0aI2R_s129Y-75FIrpBYL1yE8.roa (hash: R66OS8lUtMZTTbo9eo/xMi56yXXva1T37X0KuifJS+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:fe:9e:94:9e:c3:85:35:3b:ab:47:b0:cf:e2:85:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Validity
Not Before: Sep 19 22:00:54 2025 GMT
Not After : Sep 20 22:00:54 2025 GMT
Subject: CN=5604a6815a947b20fa8b44fb8876607ade7f633d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:6d:6d:46:15:01:8a:2f:7f:94:f6:ac:41:
42:4c:03:7a:de:8e:0d:90:bf:fc:68:32:8a:82:b7:
6c:62:03:59:ae:6e:76:f7:85:ac:c4:f0:a5:fd:92:
18:42:ca:49:71:b7:47:cb:c0:84:e8:84:58:49:da:
90:21:44:7a:64:18:30:6c:0e:a3:ec:b1:b9:2f:07:
c3:e1:17:14:7f:8c:e6:8d:bc:53:50:4b:fc:d6:e9:
64:62:ae:c4:04:1d:d0:07:75:dd:46:59:13:c5:94:
43:b1:be:42:d0:7c:c4:e2:32:0e:cd:ef:59:8e:27:
b7:6e:a4:2c:5e:c2:d2:d8:39:83:56:07:38:9e:29:
b4:10:91:d0:68:54:f0:b3:ab:a1:74:61:28:fa:20:
d3:37:18:da:ce:be:20:6b:e6:81:cf:4b:16:fd:0b:
03:aa:35:06:ad:92:3f:4a:65:8c:1d:a4:02:b7:ef:
15:55:46:8c:75:c7:07:e2:67:8e:15:27:c2:72:c9:
86:ae:32:33:c0:f7:d0:10:41:e8:d7:cc:dc:b3:6a:
8a:2a:98:d9:89:cc:44:7c:96:fa:17:14:5c:b4:fe:
82:b7:32:4e:f7:0a:d7:b7:87:24:00:15:e8:23:4c:
b4:32:36:bb:ce:ce:7a:1e:74:81:5c:75:a8:c3:93:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:04:A6:81:5A:94:7B:20:FA:8B:44:FB:88:76:60:7A:DE:7F:63:3D
X509v3 Authority Key Identifier:
keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:af:9b:47:aa:43:0d:0e:26:2c:c7:c7:3e:33:cd:d3:11:d2:
46:98:56:e7:e1:1a:a7:a8:09:48:32:12:4c:d5:71:89:2e:d5:
79:b6:f8:da:bd:0a:c3:af:a0:f3:7d:86:f9:22:fd:5a:79:09:
5a:ff:a4:f2:54:e6:5c:1b:06:19:c1:e4:f8:01:a7:e3:71:94:
12:2c:e7:07:17:bb:1b:67:53:ae:12:75:12:b5:cf:53:cd:51:
ab:45:43:8b:c3:36:73:ae:8a:6b:ff:a2:58:d4:b1:ea:9c:f0:
08:f8:2a:a0:3d:5e:90:dd:9b:c3:66:1b:d1:b1:39:e8:c5:66:
e4:34:2a:c5:14:67:85:d0:8e:68:2f:d3:f5:6b:40:05:8b:f4:
ff:65:70:c5:7b:38:28:be:a2:25:bd:64:8b:82:c0:bb:93:a8:
37:82:7b:8e:f6:b1:52:85:0d:00:33:49:f5:56:a6:95:c3:4d:
d7:2c:44:9a:5c:88:b8:d5:e7:23:11:0e:81:a3:22:1e:8a:bd:
71:13:92:c1:7b:3f:c8:bc:a3:c5:b4:2c:df:3f:49:90:a8:52:
c7:36:c2:f4:4b:86:fb:de:e4:5e:4c:c4:9d:27:93:86:b0:2b:
50:f2:cc:fa:6e:5c:71:30:27:37:2e:a7:9c:3e:9a:71:42:06:
5a:3b:07:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:41:11 2025 by rpki-client