Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File: S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier: +14nA/Gpx16F3rxVpD71LiinR0615Ztah7CeO8bblqo=
Subject key identifier: 7D:7B:F8:3F:A7:DE:3C:8D:3B:AC:4D:58:BC:2B:C9:9E:33:67:EB:F3
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer: /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial: 0199239F570F251CE1EE20C18F44F57A627F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number: 0C1F
Signing time: Sun 07 Sep 2025 10:01:08 +0000
Manifest this update: Sun 07 Sep 2025 10:01:08 +0000
Manifest next update: Mon 08 Sep 2025 10:01:08 +0000
Files and hashes: 1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: Cb76MCiHh+2BNF89fpchal5xUyq/ZpUVweTxItt9jgg=)
2: oa49XCli4BnhzjMFZt__xzBFHcY.roa (hash: tJwIQtT+Kk475hshkks2qpfV9lu0TNlB3mE3lLaKnow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:57:0f:25:1c:e1:ee:20:c1:8f:44:f5:7a:62:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Validity
Not Before: Sep 7 10:01:08 2025 GMT
Not After : Sep 8 10:01:08 2025 GMT
Subject: CN=7d7bf83fa7de3c8d3bac4d58bc2bc99e3367ebf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:93:79:56:a5:d0:3c:99:b4:37:74:b8:ce:db:
6e:c9:03:8b:10:ed:f6:a3:45:52:02:cc:e6:8b:e0:
3e:b1:02:2a:08:f9:74:76:20:94:f9:53:ac:af:e2:
75:34:e2:52:8f:83:62:01:ac:f9:77:6d:11:76:69:
c4:54:66:ec:cf:bf:46:1b:ca:ed:ea:00:1b:f4:41:
6e:40:6b:df:58:43:39:7b:d2:a9:6a:80:a1:34:aa:
fa:0c:13:aa:11:4a:53:cc:b6:88:a7:ab:eb:87:38:
e8:50:37:68:4b:f0:37:31:ad:12:1e:c5:1b:31:8f:
f1:14:5e:f0:10:08:80:00:62:0d:9b:37:c3:9f:61:
92:43:bd:a9:2d:85:2b:f1:b2:f9:86:6e:b4:da:69:
f9:5a:74:25:0d:d9:3f:8d:b5:92:60:e8:b5:dc:25:
00:66:0c:c6:72:4f:10:46:85:a8:14:b9:9d:9b:b3:
a6:d4:a7:50:51:52:ef:4e:b9:45:f1:c9:e3:6d:aa:
b8:94:68:1d:3e:a2:04:b5:71:0a:77:1a:0a:75:47:
56:a4:fa:6b:aa:aa:55:72:69:04:17:a4:3c:aa:4d:
a4:7c:e5:04:ea:2a:76:75:3e:ea:c6:b7:19:9a:52:
8a:3b:c4:38:0c:25:fc:bb:80:e2:dd:62:e4:b2:3d:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7B:F8:3F:A7:DE:3C:8D:3B:AC:4D:58:BC:2B:C9:9E:33:67:EB:F3
X509v3 Authority Key Identifier:
keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b3:cc:7c:c4:2a:c0:e8:69:0b:ec:6e:ea:3c:b9:2b:00:eb:
52:dc:43:52:fe:22:c4:6e:0b:42:ab:2f:fe:05:9d:96:f5:66:
22:ea:84:b5:ca:49:01:5e:5e:29:a2:08:75:34:64:34:1a:b7:
de:7d:52:76:e7:bc:f6:f2:89:c4:6e:88:bc:d7:76:11:9f:43:
6e:67:78:8d:e3:0e:c5:e5:87:81:ae:b5:1d:80:8c:46:07:20:
87:60:3d:99:8f:3d:2b:e2:32:8d:5f:14:16:e3:f8:3d:5c:02:
2a:25:1a:7e:ef:d2:98:71:7f:81:85:55:d2:0e:0d:73:21:44:
f1:56:b8:b9:d4:f3:3f:fc:13:ad:4b:b9:39:04:99:68:4e:0d:
49:e0:49:3a:8e:20:fc:ec:e5:a9:ab:1c:d1:b6:d2:56:e4:a8:
b1:7d:70:05:73:8b:b5:84:28:5e:e7:8c:6b:86:7e:21:e5:b2:
bb:b1:7b:56:fe:47:e4:27:fb:ef:6b:36:2d:4b:e6:c8:c5:17:
fc:44:fa:42:13:64:c3:da:b0:ec:c9:3f:9c:25:91:fb:29:b6:
ef:db:12:fa:2d:dd:c0:ce:6c:b1:d1:68:8b:24:a2:1f:97:90:
fe:5b:99:5e:a1:52:0b:4c:4d:6e:e4:f3:9b:f9:a0:7e:48:b1:
16:9f:43:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:21:21 2025 by rpki-client