Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
File: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft (raw, json)
Hash identifier: ldBBjAAqW73D1cQL1bmy+l6a7vm7E+EI3hjrklMwctw=
Subject key identifier: 97:D3:8D:37:42:B4:9F:26:0F:52:E7:E3:B5:1B:24:A1:C0:1D:19:37
Authority key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
Certificate issuer: /CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Certificate serial: 0199228C2F664D136E5ED68EBF24973E3582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
Manifest number: 64
Signing time: Sun 07 Sep 2025 05:00:36 +0000
Manifest this update: Sun 07 Sep 2025 05:00:36 +0000
Manifest next update: Mon 08 Sep 2025 05:00:36 +0000
Files and hashes: 1: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl (hash: cxnHcQ0sIkZ+zzSeYQBzhBtVpxDjrMFaU8c1s60lH0Y=)
2: mNqIiIsivK3RH9-qHlJI1-YYSi8.roa (hash: H9Eh88q+8mpDx8ZuUb0d9LRmXaGpIblFFe9crHh272Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:2f:66:4d:13:6e:5e:d6:8e:bf:24:97:3e:35:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Validity
Not Before: Sep 7 05:00:36 2025 GMT
Not After : Sep 8 05:00:36 2025 GMT
Subject: CN=97d38d3742b49f260f52e7e3b51b24a1c01d1937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:56:1d:3e:a3:de:44:f4:5e:d5:57:19:c2:
6d:ac:31:00:73:d2:e4:73:2a:9f:db:58:af:d0:13:
92:77:a6:79:00:3d:f9:eb:e6:c9:50:5c:3b:85:fe:
00:7e:26:e1:5d:9c:31:e1:a5:f3:71:16:fc:6b:6d:
01:98:4c:42:b9:00:df:fb:02:fd:15:3f:6f:34:bb:
ba:94:f2:69:55:56:4c:87:0e:92:1e:23:84:f2:d8:
92:03:f2:76:e1:1a:cb:21:41:bd:0a:25:1c:f9:c3:
43:15:36:5b:2a:a9:52:5a:4f:7c:5d:c0:b7:82:df:
94:5c:54:c5:be:28:b5:38:17:20:3c:46:2f:12:1d:
85:e6:77:53:67:80:2a:0c:ed:0a:01:88:c6:4e:e4:
81:d1:f7:f1:e3:ec:b3:3f:50:e7:0c:a7:17:20:22:
b7:4c:bf:66:3a:40:11:97:57:6e:5d:f4:c9:a2:06:
58:3b:ae:a5:22:1d:ee:90:98:62:a0:db:48:5e:28:
30:dc:7d:30:a0:3e:6a:ee:37:5c:25:c1:5e:b7:5e:
09:70:04:d3:b9:51:5d:6f:e2:20:b6:4b:41:78:10:
51:fe:93:95:06:75:86:c4:54:d2:14:62:73:f1:ed:
73:da:5e:54:b0:63:72:07:56:d9:d7:45:95:ed:1c:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D3:8D:37:42:B4:9F:26:0F:52:E7:E3:B5:1B:24:A1:C0:1D:19:37
X509v3 Authority Key Identifier:
keyid:F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b5:eb:1e:97:1e:46:83:a1:0a:d2:fa:48:cb:5a:a7:ec:e6:
fc:14:d3:09:49:3e:ed:36:25:23:e7:49:56:2c:76:ec:04:56:
06:81:f8:74:2b:52:da:1e:04:26:b1:d4:e7:05:87:09:a2:ee:
cf:dd:bb:ed:15:e8:0c:2d:69:e2:df:9d:80:a4:de:2c:68:ee:
01:44:91:41:62:ab:1f:f9:dc:ee:dc:56:d9:c7:15:be:15:72:
64:40:01:b3:d7:ee:2e:c3:43:1d:b8:47:0a:32:48:8e:d6:1e:
36:40:76:2d:a4:5a:ad:b3:79:82:00:5a:f9:17:ea:36:0d:17:
95:53:70:19:7c:09:e9:6d:2a:70:0f:2c:b8:24:ec:69:c1:35:
02:88:82:74:83:3c:ad:78:cf:8f:b6:5f:73:75:6d:4f:ca:6c:
5b:33:7d:cf:09:72:ce:6f:6e:9a:15:e6:1d:0c:60:54:e0:96:
92:8f:89:50:ef:14:9d:c8:56:eb:25:c4:39:db:a4:85:ca:34:
f1:23:ee:46:82:d7:0a:c2:89:8a:a5:da:9c:b4:ad:39:fe:c0:
53:7c:25:50:fd:35:6c:03:ba:eb:93:0f:bd:c6:5c:1e:82:ab:
b5:fe:2e:65:c0:1e:29:6e:f5:f3:fc:8e:2b:15:e5:25:5e:ae:
60:77:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:18 2025 by rpki-client