Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
File: e9WZftB1wimLRhIl4QYPV3sdfU0.mft (raw, json)
Hash identifier: QlgtcS/11mzx1ItzQoSc29K7Hm8du7vfwNjvnoBvdKQ=
Subject key identifier: DC:81:C5:52:89:E1:B1:CE:F3:E4:CD:3B:38:DC:89:95:18:DA:9B:3D
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Certificate issuer: /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial: 019922FA765BE13A1B474E8804354DE33E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
Manifest number: 0A41
Signing time: Sun 07 Sep 2025 07:01:03 +0000
Manifest this update: Sun 07 Sep 2025 07:01:03 +0000
Manifest next update: Mon 08 Sep 2025 07:01:03 +0000
Files and hashes: 1: GcQb7Wci-pVX30WsNPMX_X8ZJVY.roa (hash: 0NLct9+IWSmNLab833+pcvKvnzISJQn90Hh82nLgM+o=)
2: LMLHHOF93hK4OUpbUUvvwD0c0kY.roa (hash: 02jA2t2eBDun8+LsbWX6msyQRXMN/G2Ajm0JM11hXxw=)
3: e9WZftB1wimLRhIl4QYPV3sdfU0.crl (hash: PGvtWmD8CTQczZ+XSItyTI/UK0s4T/XL5SuTtu0QmMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:76:5b:e1:3a:1b:47:4e:88:04:35:4d:e3:3e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Validity
Not Before: Sep 7 07:01:03 2025 GMT
Not After : Sep 8 07:01:03 2025 GMT
Subject: CN=dc81c55289e1b1cef3e4cd3b38dc899518da9b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:5e:9f:8e:11:06:b6:63:fa:31:f7:e3:15:
0d:71:85:52:fd:c2:48:ce:96:6e:15:6a:f7:35:7e:
ee:7f:c0:10:4e:25:74:52:ee:9f:3b:b3:4d:0e:1d:
1c:da:50:73:b9:9f:39:bb:0c:47:5f:e1:32:6e:1e:
2c:7f:7a:cc:e6:d1:e9:a1:93:da:92:a3:a1:00:15:
19:1a:9c:2e:3e:be:4a:44:12:7c:09:d5:10:37:f1:
e9:d4:14:a9:d2:1f:52:81:8e:ed:76:cf:b4:0d:60:
73:4f:d2:63:cc:80:55:13:b1:3b:ca:a6:71:0d:80:
dc:df:a8:ee:49:70:b6:16:d4:51:2d:0e:09:8f:b6:
cc:1d:b5:cc:c8:9a:b8:40:59:85:4d:a4:23:39:a6:
ac:e4:84:6a:2b:c5:85:d6:3d:ba:95:ff:7e:2e:30:
71:46:5c:05:ba:71:5a:34:31:cc:5e:de:9d:cd:51:
35:e3:bd:96:52:13:61:a9:57:dc:c4:af:91:ef:74:
ae:16:43:c0:46:31:53:ff:f7:f5:60:13:a8:c3:d9:
3d:c8:c9:15:58:37:ff:a4:8b:6f:c1:52:57:b1:d5:
c5:16:92:9d:e6:df:7a:f2:0a:93:8a:21:f7:f6:16:
78:ae:98:2b:1b:4a:76:b0:62:e7:ee:e6:89:96:a4:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:81:C5:52:89:E1:B1:CE:F3:E4:CD:3B:38:DC:89:95:18:DA:9B:3D
X509v3 Authority Key Identifier:
keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:32:2e:b1:77:39:a4:ca:9c:b2:6b:d9:40:7f:4c:70:69:ea:
ba:fc:d7:21:4a:21:3c:39:1f:f3:46:b3:78:9b:3f:bb:b0:8c:
6f:6b:51:f3:2d:13:01:86:df:6a:24:42:f6:49:82:b8:1e:be:
e8:08:d3:ad:47:fc:77:71:56:5c:bb:b5:4c:c7:7c:4f:9d:3e:
d0:d9:18:ca:1d:ce:60:2d:72:a8:54:cf:e6:93:60:9f:61:4c:
47:4b:86:8b:5c:f4:ee:a0:c1:19:2f:fb:fd:79:b3:c4:6a:f7:
89:5b:87:e8:04:9c:33:4d:d6:69:b1:ca:ca:9e:b7:b8:15:02:
c3:70:88:67:03:89:f1:79:c8:8c:7b:1d:9a:a6:db:a1:45:d2:
80:00:cb:40:f3:2c:c0:c7:a3:0b:0c:f4:98:63:af:e2:00:e9:
e5:6e:1c:ac:3e:13:31:6a:fa:32:9a:3a:6b:68:dc:b1:b9:11:
ba:f4:11:58:c7:e4:59:36:8c:88:eb:dd:75:f5:7c:84:a8:61:
50:ab:7d:10:9f:82:48:6c:76:61:57:6d:15:3e:48:00:87:9e:
5e:b9:52:ab:88:ac:88:a6:0d:9c:f6:e3:14:c3:e6:ea:90:86:
11:91:08:2e:88:ce:bf:56:89:be:fc:e8:71:a1:c5:a6:6c:fa:
1a:9b:7c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:32 2025 by rpki-client