Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
File: PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json)
Hash identifier: KZNwC8Rl2a3PPui6WS/PaGX1LspzbyZoAZ5jokVBp4U=
Subject key identifier: F7:F6:F3:B7:B7:D6:8B:45:3B:C3:80:DD:00:56:57:57:A5:FC:A6:A6
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial: 019923A02F2FC0E3430F05C6F88B7C47EAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
Manifest number: 1399
Signing time: Sun 07 Sep 2025 10:02:04 +0000
Manifest this update: Sun 07 Sep 2025 10:02:04 +0000
Manifest next update: Mon 08 Sep 2025 10:02:04 +0000
Files and hashes: 1: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: exiYehYUa5CcL0dQ5QYrALgbrZsbCheo10+QjE/b1/c=)
2: UMngkvwaRjIoN5eBBlFi84sCo3g.roa (hash: a8obNUaAoXy5QpQYwb8sCwj2NbkRTv7ZWZ/OkpJ4CGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:2f:2f:c0:e3:43:0f:05:c6:f8:8b:7c:47:ea:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
Validity
Not Before: Sep 7 10:02:04 2025 GMT
Not After : Sep 8 10:02:04 2025 GMT
Subject: CN=f7f6f3b7b7d68b453bc380dd00565757a5fca6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:59:14:b4:be:9e:2c:f7:98:28:e5:5c:20:2e:
26:cd:ec:b5:32:12:44:63:68:58:aa:60:7a:1f:00:
57:5f:90:0a:94:0e:2e:2e:a8:ba:cf:6d:58:ed:15:
c8:7a:2a:0e:73:fb:cf:76:5d:8a:80:d1:a9:61:e4:
bd:0e:fa:af:a2:9a:4e:c5:64:3b:0d:b5:5d:6b:14:
e6:a4:5a:6f:e1:3e:ec:de:0d:49:28:1e:92:b5:dd:
31:fd:e9:22:dc:a0:5f:0a:b1:59:ae:4f:c7:fc:cd:
2b:11:cf:f0:1a:d7:20:99:21:cf:01:19:f6:d0:19:
1b:f8:3e:c6:a1:26:5e:13:4a:69:46:46:61:8d:d5:
d8:02:37:8c:b0:21:fe:05:dc:2b:60:21:de:95:15:
a8:b5:53:72:40:ef:62:01:1a:3f:f2:d3:44:42:58:
91:d5:70:87:b9:fb:54:14:57:73:d3:e5:1b:36:fa:
20:54:79:a4:57:9f:27:13:38:d1:56:af:92:08:a7:
2d:82:1b:c0:63:e0:12:29:9c:e4:34:c0:fa:7f:66:
2f:1e:23:bb:82:4d:cb:ad:be:f2:2c:e0:46:90:bd:
6a:29:06:ba:2f:15:3b:f8:a3:24:ae:c5:44:33:72:
53:5b:9c:c8:33:77:bb:3e:fc:61:49:9a:48:c0:4b:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F6:F3:B7:B7:D6:8B:45:3B:C3:80:DD:00:56:57:57:A5:FC:A6:A6
X509v3 Authority Key Identifier:
keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7d:16:bf:6b:19:cf:cb:f6:3d:ff:7d:1e:7e:c0:12:91:4e:
92:d4:1f:5b:28:fb:ad:76:bb:6c:d0:5e:9f:7c:a5:85:fb:ff:
3a:65:a6:8a:4e:24:f6:bb:9f:2f:7d:fc:22:2d:d7:77:14:75:
43:91:ef:9e:6d:13:35:0d:92:58:1e:7e:bb:22:fd:38:ef:80:
1c:fb:6f:6e:ea:dc:66:ff:93:4a:a1:eb:4f:5b:96:65:c1:23:
df:cc:86:96:b3:65:bc:35:79:b1:cc:9c:51:6d:9f:88:46:41:
92:8f:95:75:f5:96:2c:d2:ed:b6:57:cc:5c:40:7e:c3:9c:fc:
a8:78:2a:c9:57:8c:6d:15:11:07:ff:86:d0:56:88:03:bd:1b:
aa:b6:47:ba:f9:3c:aa:60:51:da:52:27:38:65:b5:42:c8:45:
b0:dd:c2:d5:98:49:59:2d:c5:86:9c:e9:d7:7d:72:c3:bf:14:
27:e5:dc:33:b8:7e:02:73:53:9d:b4:fb:c2:7c:66:bb:e4:18:
d5:db:3b:98:35:67:f2:6e:c4:e3:47:41:0b:3f:c1:2c:45:36:
a6:c8:f1:8a:bd:8b:04:82:16:3f:9d:a7:b4:ee:d3:e3:d7:a3:
88:df:6f:0a:a0:ee:bf:bf:be:72:44:e7:d4:b2:de:2a:01:e9:
79:c1:b3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:57 2025 by rpki-client