Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: T6GQfSJz+Wdjp5r1uVsecpXs5fSfcto7AcXR/qMq2wY=
Subject key identifier: 95:25:0D:58:E5:EA:72:E5:EB:38:EA:45:F6:4F:D5:22:4D:62:B9:96
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 019921B0E050F588E99E3D77B98F301DB467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 1602
Signing time: Sun 07 Sep 2025 01:01:03 +0000
Manifest this update: Sun 07 Sep 2025 01:01:03 +0000
Manifest next update: Mon 08 Sep 2025 01:01:03 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: e4SwC2c2WzFFuWpJlbBJ5/Aq2gWTwo+S00JfUrNO2rs=)
2: DSwyNAuAz2bJdfrLonxlYBob04I.roa (hash: 3+/CvQ/0iqsF5SqvqkyipksHlcWBh/rqDJFf0zM3tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:e0:50:f5:88:e9:9e:3d:77:b9:8f:30:1d:b4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Sep 7 01:01:03 2025 GMT
Not After : Sep 8 01:01:03 2025 GMT
Subject: CN=95250d58e5ea72e5eb38ea45f64fd5224d62b996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:3e:36:e7:b9:b9:9f:42:5f:42:26:19:2d:
c7:54:a5:1b:4b:e7:4a:9a:54:75:40:61:80:84:a0:
c0:bb:87:49:73:3f:5c:85:05:43:c4:54:0e:bd:05:
db:2c:13:0a:f3:11:a0:5b:b0:ee:f6:3e:b3:de:ef:
0b:6a:7d:70:1a:c7:7f:94:b4:39:3c:08:75:80:df:
e0:62:dd:a0:8f:eb:b0:c8:02:cf:0e:35:22:11:0a:
9d:55:dd:6e:d8:f0:02:be:e4:b3:e1:b9:7e:c9:2f:
15:79:ca:97:d2:00:ca:07:af:79:0c:fd:cc:80:5e:
e4:7c:fd:3b:5f:0b:fa:ed:b6:5e:3e:8a:e5:a6:b4:
b7:d3:3c:e7:a5:20:2e:c0:74:d1:f0:38:ae:eb:ec:
77:ac:c5:c1:8b:8f:a9:4f:07:47:d9:26:63:aa:1c:
33:03:ed:43:a5:08:f3:3a:15:d0:58:f9:d9:ec:b7:
25:5f:c9:b5:a6:b3:f8:8c:6e:96:ac:a8:73:96:65:
74:f7:57:f6:df:07:af:d3:ea:8c:78:33:2e:7f:9a:
af:f5:43:b8:b3:6b:40:46:62:a7:2c:0f:29:8d:78:
de:fd:ea:3e:21:a7:f5:ea:90:fe:45:89:95:64:eb:
fe:1b:a7:1d:79:78:37:c5:d9:61:37:b7:2e:4d:c1:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:25:0D:58:E5:EA:72:E5:EB:38:EA:45:F6:4F:D5:22:4D:62:B9:96
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e0:f9:d2:f4:e2:59:8b:c3:69:e0:1b:cc:0f:ee:ae:bc:c1:
d6:49:ab:9a:73:6f:0d:df:d3:85:c4:12:a2:e3:e5:7f:97:74:
6c:57:7f:f5:7d:a3:1e:37:58:b9:cc:58:f8:6f:97:4c:1c:8e:
78:90:55:dc:2a:04:f2:f6:b1:32:f4:9e:f6:d3:30:bd:13:e8:
6c:9d:5b:8b:5b:d5:a5:3f:80:d3:39:c0:28:1d:3f:78:52:40:
db:78:f5:ff:17:9c:9f:15:dd:f2:38:da:9e:8b:ba:8e:cc:1b:
0b:d9:f4:be:a4:4d:6e:4f:4d:73:04:2b:74:38:b5:23:f7:ba:
eb:85:5f:4c:04:69:d6:6c:5c:2f:59:f5:d4:82:12:62:ff:c9:
2b:85:d1:28:7f:09:44:4d:44:50:c0:2d:49:3a:00:89:ac:49:
9c:8b:9a:7c:2c:ad:3c:4e:ce:ba:5c:b7:de:80:f0:b9:25:ce:
46:53:0f:d3:3c:a5:f1:a2:3f:4d:dd:eb:40:5b:0d:39:ed:e9:
53:28:05:38:55:9b:dd:0c:1e:fa:d1:0a:60:b3:da:bf:8a:c7:
7a:85:68:ef:29:1e:a4:62:e9:02:f3:22:6a:61:92:11:b2:cd:
09:cd:b7:0b:36:1c:b3:37:3a:15:90:33:68:db:4c:a3:15:f0:
25:cd:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:35 2025 by rpki-client