Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File: 9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier: l/FL8JDXgVyUxvDGO42+zPbmYozgEqipQ/QyR0jwxgE=
Subject key identifier: 85:99:94:07:2B:20:56:61:FC:58:47:18:03:56:02:90:F7:CD:88:AD
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial: 0199240D0BA1EE9285D79E86C10BC6015762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number: 106C
Signing time: Sun 07 Sep 2025 12:00:58 +0000
Manifest this update: Sun 07 Sep 2025 12:00:58 +0000
Manifest next update: Mon 08 Sep 2025 12:00:58 +0000
Files and hashes: 1: 2Qdf3KbNG5NqoZJX8HW2axOKIks.roa (hash: aZGBYQ1YtddzlVOGQVr+1nQgozPaUhvPhqEz391ISKs=)
2: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: PY93PalJkgTXkuiplzdRAopi6Olpou1+BC1MT10e2wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:0b:a1:ee:92:85:d7:9e:86:c1:0b:c6:01:57:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
Validity
Not Before: Sep 7 12:00:58 2025 GMT
Not After : Sep 8 12:00:58 2025 GMT
Subject: CN=859994072b205661fc58471803560290f7cd88ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:b9:52:dd:6a:e0:d1:7a:f7:3f:c9:fc:9d:
a3:21:12:68:e0:92:1e:23:61:93:40:89:e0:f8:80:
e8:81:a5:ce:d2:f4:e1:20:2d:e6:fe:b4:6b:30:46:
1f:94:13:f4:52:17:43:78:77:98:d9:0c:85:f6:ba:
f8:b6:ae:8e:65:1f:6d:fe:cb:7b:67:f8:a6:96:88:
62:5b:7c:40:42:9a:1b:dc:29:c7:1c:56:28:de:b7:
a1:33:55:03:59:ce:8b:18:e3:0b:81:f3:9e:33:15:
d7:21:04:fd:19:5d:ee:fb:c5:f5:69:d6:d0:a1:1e:
6d:73:6b:3a:cc:c1:83:cf:9d:a0:7a:d0:bd:ce:a3:
bc:8b:e8:f7:ef:8b:d2:cf:7a:7c:8f:14:4e:6e:09:
56:70:b1:8a:dc:d8:98:60:50:94:75:78:94:0f:78:
c1:22:12:c8:2c:30:5d:de:47:10:d3:01:3a:90:7f:
14:b7:6e:d2:91:88:57:94:2e:45:86:19:90:5a:11:
94:4e:d9:5d:c0:ae:d2:7c:56:ac:bf:5f:54:38:b9:
41:5a:ae:b2:9b:e9:78:d4:64:3e:d6:db:eb:32:8b:
db:ba:25:c0:2a:b9:0d:a8:7b:63:f8:4d:69:af:c9:
f5:20:b1:ce:df:6d:a1:41:a0:6e:a9:c0:d1:f8:23:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:99:94:07:2B:20:56:61:FC:58:47:18:03:56:02:90:F7:CD:88:AD
X509v3 Authority Key Identifier:
keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d2:ec:36:de:f4:6a:1a:67:5c:47:e1:bf:3e:75:ed:37:22:
00:e1:87:b8:1d:8b:fd:5f:c9:89:ac:13:92:04:10:ee:30:78:
a4:63:e4:67:e3:4e:aa:9d:8a:69:2a:d1:0c:6b:d7:fc:cc:09:
37:2b:b1:c2:68:0c:c1:c1:11:c6:50:12:00:1f:be:69:ff:3f:
9b:52:41:ea:12:03:ca:3c:c4:20:de:df:c2:c4:08:70:6a:14:
c2:6f:93:30:c0:53:e4:ff:11:7a:69:a8:64:02:7c:1a:82:a4:
88:91:ce:92:6d:72:26:b3:19:b1:ce:a1:34:49:a7:7f:bf:51:
01:1d:98:7b:fe:da:c7:b1:12:29:4a:ff:f0:e8:54:36:8c:1c:
60:99:98:34:ea:05:91:d1:7e:88:96:86:fa:f7:21:2e:af:1a:
32:01:42:2a:1b:30:f8:dd:a9:f8:ac:b4:7c:47:af:8b:81:81:
e7:cd:8d:21:e3:54:34:c9:e4:bf:c4:ab:46:82:cf:59:56:bf:
ab:14:07:0c:7d:79:c1:a8:1a:3e:62:20:1f:6d:11:75:33:d0:
60:5d:9a:73:71:94:75:c1:fa:12:72:f1:ce:8e:54:0f:fe:c9:
02:a7:69:56:6f:ee:6e:74:97:dd:3b:c4:b8:c1:93:a4:26:24:
0f:d7:1b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:28 2025 by rpki-client