Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: SaBhfXsoreEc0VK1lVoHqUXTse0SA5vDQ5mKw7N1QUw=
Subject key identifier: A6:D5:7D:6F:DD:D5:40:AC:2D:6C:75:2C:38:D3:B5:73:9E:FF:AF:65
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 019936EE70DEF852CFD127EDD04BC7746638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 09BA
Signing time: Thu 11 Sep 2025 04:00:20 +0000
Manifest this update: Thu 11 Sep 2025 04:00:20 +0000
Manifest next update: Fri 12 Sep 2025 04:00:20 +0000
Files and hashes: 1: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: IWR4fz3wKWS4JwirFzGaJ7YbqtcmyjpLDoOvgrymWX0=)
2: sTQX2j9_L-RKxKJ-gpSAUcHW26c.roa (hash: SMZ74eYXgCBYRpcaMVOmXChoRcbWwRauRrg3+g+Vya0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:70:de:f8:52:cf:d1:27:ed:d0:4b:c7:74:66:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Sep 11 04:00:20 2025 GMT
Not After : Sep 12 04:00:20 2025 GMT
Subject: CN=a6d57d6fddd540ac2d6c752c38d3b5739effaf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:bc:5c:3f:ea:cb:bf:b0:4a:30:71:c3:da:
bd:b8:67:d1:c1:34:60:04:40:8d:a1:89:da:5d:93:
f3:d3:91:63:88:f2:1a:49:57:e5:82:06:fb:46:04:
cd:44:80:69:e5:e4:66:ea:ff:b0:41:f5:b1:02:57:
24:2a:25:25:12:7c:5f:b8:a3:57:8a:81:e8:d7:8b:
9f:0d:70:4e:4a:b3:93:ff:2a:5a:fa:b8:b1:2b:fe:
2c:2f:a8:06:02:06:8f:5d:dc:01:80:27:64:9c:6b:
8b:e6:c8:96:7b:19:18:a8:59:01:38:80:64:ee:3a:
6d:69:c8:26:18:7a:fd:f9:e1:f0:d5:c0:71:b5:be:
d6:00:28:58:00:12:84:bb:b7:0d:9d:ea:ae:1f:d4:
7c:3e:50:ce:eb:49:59:7b:a3:c2:10:db:f0:17:7a:
01:17:4f:52:d9:cb:0a:48:3d:d9:cd:bf:33:9f:95:
84:cf:1d:39:8f:6c:7b:4d:25:8b:50:5c:7c:ca:0e:
bb:52:5b:cc:3e:70:70:e6:2a:5c:f9:34:1a:6c:e4:
a3:37:bd:79:65:14:f5:f2:cb:22:d1:28:f0:43:35:
e1:86:3f:6d:b5:be:c6:09:01:62:de:7e:e9:7b:2d:
d4:3d:62:a0:ad:c5:7a:94:f8:d6:38:32:36:7b:8c:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D5:7D:6F:DD:D5:40:AC:2D:6C:75:2C:38:D3:B5:73:9E:FF:AF:65
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6e:1e:49:0f:21:d1:ae:26:06:b8:98:eb:d8:2b:45:e1:95:
1e:0f:7a:32:28:3e:8e:ae:b6:17:79:a4:14:15:bd:e2:40:2d:
1c:21:7d:9f:d1:b4:10:44:b6:eb:79:57:ab:82:16:9c:c6:87:
5e:5c:60:19:84:d0:57:36:c5:28:85:27:c4:c5:3f:7c:5e:1b:
73:51:2c:8d:c0:a4:bf:29:82:ce:72:91:21:94:f8:6b:cf:39:
12:de:32:ff:6c:8d:33:38:56:36:a4:2b:8a:6b:45:c5:a8:48:
a4:e7:0e:97:0c:4c:c2:a0:71:3e:cd:32:48:84:19:5e:a0:df:
db:c0:96:84:35:e3:25:cd:4c:eb:ac:7f:be:2a:6c:c7:b5:8c:
ac:ac:60:1d:af:a4:1a:3e:5f:a4:f5:11:fb:f1:12:05:f9:3f:
f2:14:1a:15:cd:83:2d:2e:9f:d1:1d:4c:28:e6:68:3c:bd:c6:
d9:2c:b3:32:0b:e8:e5:31:8d:33:bd:6e:3f:58:95:bb:dc:60:
f4:0a:46:e9:7e:95:bb:ea:7a:6a:a6:0e:fe:71:ef:db:15:59:
28:b1:f1:22:b7:ab:f4:fa:a3:ec:8e:0f:56:11:ac:1f:5b:15:
25:5e:b3:24:ec:97:a3:a2:d2:ee:07:f1:eb:af:cc:5f:50:02:
10:75:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:53:46 2025 by rpki-client