Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: kGwLzU9+nCERys7gKHJ+zAUHicWybDhHrBr+owK/6KU=
Subject key identifier: CA:DA:AD:96:8F:DD:72:4B:BE:2F:CD:C3:8A:02:C0:E6:F5:B5:FB:FF
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 0199296A426A60979D1CA53E7675F528D94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 1675
Signing time: Mon 08 Sep 2025 13:00:53 +0000
Manifest this update: Mon 08 Sep 2025 13:00:53 +0000
Manifest next update: Tue 09 Sep 2025 13:00:53 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: Fu4LSeljtQYUqyymZqBqWlvTLj6E1NZSj+F80NZCT00=)
2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:6a:42:6a:60:97:9d:1c:a5:3e:76:75:f5:28:d9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Sep 8 13:00:53 2025 GMT
Not After : Sep 9 13:00:53 2025 GMT
Subject: CN=cadaad968fdd724bbe2fcdc38a02c0e6f5b5fbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:4c:ed:62:84:f8:74:55:a0:e0:8d:dd:32:
af:9e:a4:31:04:7c:41:bb:b3:fb:72:b0:7a:a5:22:
4d:67:eb:3c:e3:10:c7:7e:f7:f1:46:14:e5:71:5f:
ac:2b:8a:a7:08:c3:0c:87:14:10:79:45:44:df:b8:
d4:97:f5:d6:64:5a:92:b0:82:33:f8:3e:b4:4a:49:
06:12:26:35:12:ef:7b:a7:19:4b:36:b8:96:2b:07:
a7:a3:f4:6f:c1:9d:da:b1:a6:b4:26:75:06:41:53:
c7:36:6d:7c:d9:2c:df:ee:56:a1:e9:66:11:e7:1b:
33:ba:a3:8d:14:0f:22:97:be:ad:3f:0f:09:4c:9d:
cf:21:01:22:18:2d:6e:50:f2:98:5d:97:7b:d3:bc:
09:34:16:23:2f:61:c4:9e:ed:4b:93:22:a5:64:1e:
fd:3a:7d:ab:7b:d9:0d:e1:1d:9e:f3:d9:b6:8d:e0:
48:f6:1a:50:63:d8:a9:8c:3a:41:f1:50:4d:c0:be:
92:fc:b0:b7:e0:53:25:5e:93:ce:b0:42:f8:68:f6:
db:51:b2:77:9e:5a:4f:29:79:79:2a:d7:a8:6c:66:
32:97:6e:1f:77:34:9e:ce:e5:e3:67:b1:82:1e:97:
2b:23:04:5a:88:bb:b6:f6:9b:79:84:19:ed:a9:a8:
93:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:AD:96:8F:DD:72:4B:BE:2F:CD:C3:8A:02:C0:E6:F5:B5:FB:FF
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:15:e8:5b:c2:f1:ce:5d:d4:1d:06:aa:67:95:70:94:75:91:
00:2d:e1:39:69:39:35:08:9c:2e:11:b1:be:ec:79:92:d6:b1:
45:84:59:6b:62:60:0e:38:de:49:76:0d:00:17:39:51:98:b1:
54:e6:78:f6:d4:08:8c:91:f7:2a:b4:d2:b6:d6:ad:21:1d:76:
2b:97:a7:8b:e1:1b:c3:65:e3:cb:cd:5c:c4:09:26:0e:8d:7c:
25:c6:8e:9d:be:a4:61:4b:0d:60:20:ef:c4:d2:92:ec:8d:48:
6c:46:21:53:59:97:c2:41:d5:a1:b3:61:b7:7f:84:08:4a:3a:
71:19:2a:f1:67:c0:13:28:ea:74:07:d6:b0:d0:88:4d:e1:8e:
26:07:dc:9f:12:a4:ab:f2:25:b7:93:bc:0b:45:eb:73:e4:c9:
a4:d0:e7:c0:03:d9:b4:98:1f:14:61:f9:f6:8b:e5:db:61:37:
13:7d:85:e8:5a:ba:d2:e4:8e:11:d3:8c:85:3a:e1:ca:6f:92:
b1:0d:4e:f0:ad:a8:34:a4:94:a3:c0:22:f2:4f:37:66:74:07:
65:0c:9a:f3:42:41:fc:77:32:42:09:52:6c:46:28:75:7c:2b:
68:31:51:7d:e4:4d:14:cc:87:c9:b7:64:ff:cd:da:fd:95:77:
69:13:5c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 15:42:58 2025 by rpki-client