Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
File: g9gpJjs8X2OWgDf56GP9D9AeeGk.mft (raw, json)
Hash identifier: 9xlK204IUdl/E9hCh31c3+hWQgDeeFUw9bORrbYWaKk=
Subject key identifier: BF:A2:7F:8F:C8:33:87:92:67:EB:55:A5:34:1B:4E:62:C0:62:31:25
Authority key identifier: 83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
Certificate issuer: /CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Certificate serial: 0199221E38E5BCA324155D4AA6EBE0CAE7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
Manifest number: 1232
Signing time: Sun 07 Sep 2025 03:00:29 +0000
Manifest this update: Sun 07 Sep 2025 03:00:29 +0000
Manifest next update: Mon 08 Sep 2025 03:00:29 +0000
Files and hashes: 1: KyWdAlshbj0x1AA1uUx-ZQPp9Zk.roa (hash: WDABDJxxu4elmiEAWMv89c2ma+ic8Jsi7E3Q6vmgEYc=)
2: g9gpJjs8X2OWgDf56GP9D9AeeGk.crl (hash: DaVwVUHx1ii/vylBRV7v+Jx0k+IZHDc8sejtJfET5CU=)
3: hkjDx-2GOhGp7IPuQmrLBkkB_0U.roa (hash: 4gfS7chtfvvAEHSEdJQzQiuhcE63Qr3QGw7uAtNLDMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:38:e5:bc:a3:24:15:5d:4a:a6:eb:e0:ca:e7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Validity
Not Before: Sep 7 03:00:29 2025 GMT
Not After : Sep 8 03:00:29 2025 GMT
Subject: CN=bfa27f8fc833879267eb55a5341b4e62c0623125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:4a:5a:59:09:9e:84:15:8b:fb:30:f9:e0:
80:63:8a:21:92:80:0d:bc:2e:43:92:75:ee:42:24:
e7:24:9f:f5:03:19:c0:56:3c:ad:2e:f5:e1:d8:be:
61:74:23:8a:92:8b:49:4f:5f:55:29:ec:02:2d:9e:
14:32:eb:9e:38:4f:15:b5:cd:fd:8b:45:1f:c0:66:
4d:d8:9d:b1:ee:6f:1f:40:35:d6:57:a8:f3:22:95:
52:23:7a:c5:a6:0b:d2:7b:65:31:38:1d:3c:87:d6:
0b:55:5e:e4:8f:7b:c6:73:cb:73:ef:b7:ce:50:99:
a8:7a:21:12:e5:6c:ff:52:fa:7f:db:6d:01:5e:3a:
43:1d:80:f2:5b:87:e6:40:3b:09:26:c4:ae:6f:ca:
32:09:79:fc:0d:44:a2:15:fa:1c:0e:49:f6:ab:81:
ec:80:65:9d:30:03:06:d0:01:cb:e5:1e:23:1f:dc:
1f:48:64:1e:40:03:c4:38:f4:00:25:22:e8:37:e1:
29:78:4a:4f:bd:ae:02:f6:4f:f7:6c:f9:2f:cc:eb:
76:f6:08:5a:40:ae:d2:5b:51:a8:2d:e1:6f:24:f9:
70:6e:17:92:77:98:c6:aa:50:3d:c4:2c:26:2e:d9:
7f:5e:b8:7e:79:fb:14:47:94:ee:0b:23:34:30:6c:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A2:7F:8F:C8:33:87:92:67:EB:55:A5:34:1B:4E:62:C0:62:31:25
X509v3 Authority Key Identifier:
keyid:83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e8:34:1d:9a:50:f2:d7:b2:20:b9:0d:fc:14:03:72:a7:38:
3b:93:9d:1f:d0:d8:5d:a9:e9:08:36:21:89:a7:db:28:35:d2:
a3:4a:06:06:35:95:cb:81:01:3b:73:fa:2c:e9:a3:c0:a8:03:
b2:74:90:56:5e:fa:11:48:ec:f8:2b:f7:4d:3e:eb:51:4a:4b:
07:d6:bc:7d:3b:21:10:a6:92:5e:03:28:bf:b8:73:09:eb:54:
b5:da:b5:b5:80:0d:73:bc:69:a8:06:2b:9a:87:8d:f1:75:df:
4a:7e:c2:36:9f:ea:d9:9c:cc:b1:f2:cf:e1:63:50:2c:86:bc:
cc:4e:40:e9:5f:93:e2:5d:dd:59:3c:9d:0b:7f:5f:dc:57:a5:
d5:ec:1b:da:86:e5:1d:68:dc:6f:95:27:67:f4:d8:da:fc:3f:
cb:d5:a3:b0:1f:eb:fc:33:be:14:9f:13:3b:41:6f:dc:8c:d5:
14:e4:29:84:a7:1a:52:d1:17:f5:c2:e0:07:17:e2:d3:0f:7a:
9a:89:1a:a4:98:e0:93:b2:0b:23:00:48:29:6f:4b:63:f1:a8:
f5:0b:9b:2f:69:57:af:ef:aa:82:ee:15:d0:d6:fe:b8:4b:a0:
1e:7d:5b:b6:33:97:4b:b9:03:44:36:53:c5:ea:8b:53:c7:f7:
ff:78:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:36 2025 by rpki-client