Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
File: f9GKakmRDMMx3JERSuWbcYXV8w0.mft (raw, json)
Hash identifier: w/jFS2mlpAp2KFJJn3PhOPlOX2KVfS5gB0Sv72emj8s=
Subject key identifier: 52:66:01:0F:07:0C:22:90:EC:65:DC:24:81:35:4A:70:9B:81:7E:D9
Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
Certificate issuer: /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Certificate serial: 0199239FFD987EF9632E08541B743E015C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:01:51 +0000
Manifest this update: Sun 07 Sep 2025 10:01:51 +0000
Manifest next update: Mon 08 Sep 2025 10:01:51 +0000
Files and hashes: 1: V0avlIfWr1Ry2dGFNI3vVU-t6qU.roa (hash: 9Z/Tt+Wupiygby78OxWX59dKpP6JLPmGNyGTYRjbjHQ=)
2: f9GKakmRDMMx3JERSuWbcYXV8w0.crl (hash: MZjrBEnrrekvaOxJjSKtuhbFv1eevCp3b3Hmf+Dq5+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:fd:98:7e:f9:63:2e:08:54:1b:74:3e:01:5c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Validity
Not Before: Sep 7 10:01:51 2025 GMT
Not After : Sep 8 10:01:51 2025 GMT
Subject: CN=5266010f070c2290ec65dc2481354a709b817ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:99:72:6a:66:94:f7:5d:eb:3c:e4:18:d7:e0:
cd:5f:6a:51:aa:a4:a9:1d:1a:fe:81:bf:2e:49:08:
de:37:04:ab:e0:c1:a7:c8:e2:31:41:47:06:e5:3e:
27:78:c1:69:88:50:c8:3f:f1:ba:19:63:9a:ec:c3:
c5:9b:80:76:79:d9:dc:f4:34:2a:c0:1e:4e:6b:ba:
ff:20:8f:a6:dd:2b:42:73:ce:7b:a0:59:2c:9d:2d:
3d:3c:a6:a4:d0:59:89:50:2d:d4:6a:1a:c0:15:49:
cd:17:6e:98:6a:92:2f:ae:b7:74:a4:36:c5:b6:9d:
28:dd:54:2a:0b:e2:5f:5c:73:4a:c4:db:19:19:a1:
80:40:fa:0b:f5:3c:61:4e:a3:87:69:12:16:55:1f:
00:f5:11:06:e7:cb:4a:4b:f9:19:b5:d9:33:f7:1f:
a3:a4:86:1d:4e:97:c7:3a:36:12:f4:7d:dd:dc:26:
86:05:bc:bb:bd:0e:af:3c:91:40:47:62:73:81:93:
0a:d1:c5:f7:a0:54:91:1a:b7:6a:09:e1:47:0a:e3:
fa:bf:97:15:e9:98:bf:2d:44:2a:37:00:39:05:6d:
56:6d:62:a6:35:ce:e0:27:fd:dd:0c:1a:3d:c9:6c:
80:1e:fe:3e:39:32:74:db:0b:44:b4:58:45:1c:94:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:66:01:0F:07:0C:22:90:EC:65:DC:24:81:35:4A:70:9B:81:7E:D9
X509v3 Authority Key Identifier:
keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:06:82:62:e7:8c:ff:58:11:c0:a0:a9:f6:4e:51:3a:ac:4a:
fb:32:91:6f:aa:31:cb:04:6a:79:87:fd:53:1e:8b:9c:86:1b:
9e:20:66:4a:00:51:d2:ea:54:14:12:80:07:f5:24:56:ef:df:
57:69:a9:f1:d9:cc:f0:c4:04:ab:ca:60:72:3b:79:e3:88:7c:
13:0a:5d:04:a1:eb:0a:3f:2d:cb:95:0e:64:36:86:8a:45:34:
d0:54:1a:ef:43:48:8c:1c:45:72:a6:59:c8:93:b0:0f:d1:4e:
f3:48:8b:69:d2:54:43:6b:29:0c:96:9a:2e:9c:56:64:11:1f:
e3:e3:58:a5:11:b6:21:fd:28:25:e1:38:4b:59:4d:c5:5a:48:
54:8c:f4:3b:75:e2:f2:1b:18:bb:d4:89:24:63:0b:98:28:23:
a7:69:2c:b2:28:67:d3:c1:2b:00:19:b6:95:0a:68:68:8a:21:
a4:26:fd:15:cc:09:54:64:40:6b:d8:e3:ab:77:9d:45:99:eb:
41:a5:2d:2d:46:9c:05:b8:92:bd:97:01:15:6d:2d:3b:1e:ca:
0a:2e:ba:5b:08:64:8e:c9:fa:12:d0:61:85:89:aa:bd:5c:1f:
93:1c:16:ed:84:00:ec:42:aa:b4:a4:ac:77:1a:98:c2:25:23:
ff:5b:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:56 2025 by rpki-client