Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
File: _z73u2pGuvTbG6633ySkDB1MFU8.mft (raw, json)
Hash identifier: CCAtMUmg3opgfm29PZjk2cOmWUqvNAbGDeUNwrrm5hU=
Subject key identifier: 94:67:F4:1D:A2:FB:F0:94:E0:E9:06:E5:64:E5:99:65:4B:AF:7D:4B
Authority key identifier: FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F
Certificate issuer: /CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
Certificate serial: 01994E1D49C152E09FFA773D4139FE796FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
Manifest number: 0335
Signing time: Mon 15 Sep 2025 16:02:46 +0000
Manifest this update: Mon 15 Sep 2025 16:02:46 +0000
Manifest next update: Tue 16 Sep 2025 16:02:46 +0000
Files and hashes: 1: CyralhGuX94DIISxgcLaFGkuwEE.roa (hash: jbaQiBUIOwYyUUxeUd5k0D2sxSHilcS8Ozj2S6lNjj0=)
2: _z73u2pGuvTbG6633ySkDB1MFU8.crl (hash: ELuK3Tx0xPMt0TFT7cDtTMRSRSBFs4HcG4f+Z2mfo8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 16:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:1d:49:c1:52:e0:9f:fa:77:3d:41:39:fe:79:6f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
Validity
Not Before: Sep 15 16:02:46 2025 GMT
Not After : Sep 16 16:02:46 2025 GMT
Subject: CN=9467f41da2fbf094e0e906e564e599654baf7d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:70:1c:99:83:00:3f:4c:5f:dd:49:58:ab:
96:11:78:52:16:da:6c:bf:c4:ee:18:dc:ce:3c:76:
ee:9a:22:d4:03:d0:da:03:bb:28:ec:1b:31:3b:2d:
e9:6a:4b:0a:fc:22:0d:fc:55:40:84:fb:41:61:47:
2e:5a:b1:06:ca:23:56:6c:c3:90:d3:7c:fc:75:31:
37:c0:e6:79:f1:95:56:74:3d:bf:a4:d0:09:5c:6f:
16:fa:a1:02:b5:b0:87:ac:b4:a0:67:00:8f:df:40:
ad:71:84:2b:2f:09:5a:2e:9a:08:6a:8a:d0:5b:63:
c2:09:33:5c:19:2b:17:e3:c2:b9:10:ed:92:06:03:
d1:69:8a:10:c3:db:b4:82:69:c3:86:76:48:e2:4e:
e0:11:ea:fa:47:b1:8f:26:e8:4b:54:6d:c0:b3:18:
82:76:bb:e1:d7:ce:41:7f:f2:0a:c3:5d:bb:ec:56:
18:af:50:ff:82:ab:ea:01:50:4b:b2:49:d8:10:bd:
28:68:d8:0c:f6:76:23:24:e2:7d:ff:78:80:16:5b:
74:29:43:f9:70:4c:1e:a2:62:dc:ae:ce:24:b1:ba:
24:ce:d2:5e:2b:f2:b0:7e:75:c3:5c:b6:17:14:0d:
d6:96:8e:4a:27:f3:9b:ab:c3:fa:cb:7d:a0:e9:7a:
d0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:67:F4:1D:A2:FB:F0:94:E0:E9:06:E5:64:E5:99:65:4B:AF:7D:4B
X509v3 Authority Key Identifier:
keyid:FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:88:16:06:75:f5:10:5d:5c:ca:c1:26:c3:a8:a0:f8:c4:9c:
67:e1:44:2e:82:a7:db:d1:e4:b9:1e:49:a6:00:b0:9e:69:1c:
ca:1e:fd:28:25:3a:15:97:80:dc:33:66:14:7e:b3:26:1f:0d:
cc:4f:41:f3:5f:7c:82:dd:62:99:c7:3a:44:77:9c:fe:86:ad:
9c:a4:60:7a:8b:93:ba:42:a2:8e:0e:ab:4b:03:a3:5f:93:99:
bb:39:71:fe:5a:18:24:b0:2b:38:8c:2c:bf:c0:59:2f:ac:82:
c1:5b:cb:31:b4:77:2c:17:2f:05:49:ff:fd:78:2d:90:17:7b:
45:9c:61:c2:24:22:76:51:70:b9:56:47:46:1d:05:a8:68:93:
90:ed:92:0a:c4:96:38:d4:4e:2e:1a:bd:1d:a0:c6:0e:12:0a:
1c:01:3f:25:e1:12:bb:04:c0:56:4b:fd:8b:26:92:5b:02:16:
2d:f3:1c:f8:32:34:d3:f2:dc:f5:79:92:45:fa:c2:9c:27:f1:
f9:fd:d6:8a:a0:31:c1:53:71:a9:d9:16:37:11:27:bf:d0:10:
b0:af:f7:0d:52:44:92:5d:8d:e0:88:ff:7f:eb:fe:85:c2:04:
0f:e6:11:ab:67:8e:52:50:26:96:2e:76:0b:9a:27:ed:97:c5:
ce:12:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:19:08 2025 by rpki-client