Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
File: i1FfuzGzDKItL5R8UZrEcfArtgU.mft (raw, json)
Hash identifier: oGJj/rQRgCbsIau6iAQrAcmvHS9ztUloHJBxgq/AB8Y=
Subject key identifier: 39:C7:FA:A1:C5:61:88:06:65:C9:E0:1B:D2:84:3C:CB:D5:9A:CE:0C
Authority key identifier: 8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
Certificate issuer: /CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Certificate serial: 0199228C6B1A99EA575430CE46C800C227CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
Manifest number: 09A4
Signing time: Sun 07 Sep 2025 05:00:51 +0000
Manifest this update: Sun 07 Sep 2025 05:00:51 +0000
Manifest next update: Mon 08 Sep 2025 05:00:51 +0000
Files and hashes: 1: LeW5uHFX08XYp2mSoayTb96W_kw.roa (hash: 5xyylml8MKoU2vq0LLHOuDrXUYO5MXsP8k0pX9CFEqk=)
2: i1FfuzGzDKItL5R8UZrEcfArtgU.crl (hash: VP9RHXZbPKL1NeTNmXQGsIAeJevcnnB1YPhx1mceBCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:6b:1a:99:ea:57:54:30:ce:46:c8:00:c2:27:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Validity
Not Before: Sep 7 05:00:51 2025 GMT
Not After : Sep 8 05:00:51 2025 GMT
Subject: CN=39c7faa1c561880665c9e01bd2843ccbd59ace0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:8a:50:1c:94:7a:f5:92:2e:3d:bb:9a:96:
3a:46:22:a9:83:f9:e2:a0:86:cb:18:84:b9:6c:4b:
cd:7e:f0:bb:1a:c0:ed:2a:e5:c4:c7:84:1e:2d:c6:
3c:05:d0:a2:52:67:f6:ef:8b:46:ff:b5:30:14:1f:
f0:a0:ec:91:71:58:9e:56:5b:b7:40:83:44:b6:74:
f9:b2:4c:f0:55:eb:fe:2c:c3:c1:61:58:87:33:e7:
13:d9:9c:2f:8c:f5:d9:69:d8:df:40:61:2a:21:52:
36:03:dd:2c:9a:56:8b:68:29:c3:38:50:c4:d5:5f:
59:88:bb:61:5b:80:ec:f4:46:c3:b0:c7:35:84:d7:
a2:33:ab:85:b8:a4:7c:e1:9c:31:6f:05:69:0e:00:
04:c8:68:96:13:37:9d:2a:1f:cd:77:aa:cd:c9:cd:
db:b5:4d:66:1a:6b:c1:b1:be:d0:20:97:e3:22:fa:
61:22:b0:d5:67:f3:46:a5:5b:0b:80:29:e5:1f:96:
c9:38:11:d0:71:f8:9a:21:a6:09:3e:c8:33:1d:bc:
63:7c:a6:17:bf:4a:30:4c:a3:a5:af:44:bf:fa:8c:
a4:51:4a:fa:e5:72:42:58:18:db:c1:aa:e5:b6:c4:
5d:f4:23:e0:46:22:c4:ab:be:3a:7b:70:96:23:89:
76:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C7:FA:A1:C5:61:88:06:65:C9:E0:1B:D2:84:3C:CB:D5:9A:CE:0C
X509v3 Authority Key Identifier:
keyid:8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a5:9c:66:4b:7b:58:b8:20:a6:b7:bf:0e:0e:4e:5b:89:04:
af:cd:ff:57:23:2a:22:38:bc:67:f1:98:3e:e0:d6:76:07:4b:
5a:b6:f3:ea:09:fe:66:d2:84:80:c9:33:d3:49:56:6b:1f:d4:
a0:30:42:01:32:35:b9:1f:75:68:83:25:03:5a:fd:0b:23:8c:
4f:53:27:0d:d6:d5:92:20:5d:6f:21:50:46:f2:0a:28:b3:c3:
fa:12:76:17:eb:f4:91:11:35:9c:06:34:33:28:39:09:e1:e1:
44:d5:32:8a:5e:79:02:7e:dc:6c:af:a1:d5:51:46:b6:1d:b5:
6a:83:50:45:d3:73:b2:26:0c:23:86:b6:70:9c:f8:31:b9:88:
5a:75:10:87:29:43:fa:65:cc:b2:50:be:7c:c1:f1:a6:2f:a7:
59:f3:b6:eb:93:e2:5a:8d:af:49:ea:c3:0a:6e:9a:d5:a1:35:
7a:67:74:50:5a:24:40:e5:c1:a0:3d:68:ef:04:09:d4:3f:41:
3e:7a:56:39:79:50:cf:70:98:34:de:e3:6e:88:61:27:6e:55:
7a:37:f0:c8:14:e9:ea:37:be:59:cd:92:db:01:44:e2:22:ce:
50:20:f7:66:db:ec:05:3f:c3:15:c1:77:86:da:32:4e:00:5e:
f0:5f:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:27 2025 by rpki-client