Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: ekyG7yig39m+ZVqR11X7pdvg1uKZbfkWVpqCo4K80BM=
Subject key identifier: 04:9C:42:70:5B:93:20:82:F6:08:74:41:38:44:08:34:DA:B8:3F:FE
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 0199221EA22C4682051AEE03B1E360FCE9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 03:00:56 +0000
Manifest this update: Sun 07 Sep 2025 03:00:56 +0000
Manifest next update: Mon 08 Sep 2025 03:00:56 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: O4rr2Obll1G2HPGqPMJE2qKzCNDaChDwbuHC0PfB0oY=)
2: FNrF4gJ9GeSqn1QNR00c9Q4ygYg.roa (hash: 2ncm1gP0ao8l2RvVLkDskRllvyDwCE2AZXVvFGp+UKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:a2:2c:46:82:05:1a:ee:03:b1:e3:60:fc:e9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Sep 7 03:00:56 2025 GMT
Not After : Sep 8 03:00:56 2025 GMT
Subject: CN=049c42705b932082f608744138440834dab83ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:93:9c:f9:35:8f:28:25:4c:e9:26:a4:00:
2e:cf:15:62:7f:f5:85:d9:39:c4:69:a9:df:18:99:
25:76:52:96:84:e6:d7:fe:d6:16:2e:de:45:a1:07:
35:0a:69:2c:9e:a3:91:5d:70:ea:e3:21:05:21:69:
8a:7d:14:29:0c:d7:8e:4f:43:b1:f7:c9:4c:83:dc:
8e:ca:6d:98:a6:70:98:ae:1a:df:ec:b9:09:3a:62:
1b:c4:bb:46:71:55:4f:ff:01:38:e9:f2:a8:68:d4:
4c:ad:e6:90:0f:c5:29:6c:d5:bc:bc:59:81:5b:23:
b3:a6:32:d2:12:e2:41:66:7b:66:31:75:fc:91:a7:
7f:1f:97:4d:3a:11:5f:7e:0d:2d:9b:b9:fe:82:d1:
e1:a8:9c:23:0e:cf:5a:b7:e3:9c:59:d6:e2:8e:e7:
d2:9f:05:7c:65:60:40:fc:27:f0:ac:84:8e:b9:6e:
d5:21:1f:85:59:5b:fe:00:c3:e6:2c:b9:71:f6:8a:
27:2e:25:a7:9e:35:c9:1a:94:dc:d9:af:43:47:01:
23:58:1f:2a:d9:20:f6:93:d3:b5:bf:9a:ff:51:56:
72:55:01:c3:8a:fc:f6:eb:b4:9d:af:16:16:1b:1f:
4e:0e:9c:ee:7d:6f:68:10:11:24:ea:6c:89:b3:1a:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9C:42:70:5B:93:20:82:F6:08:74:41:38:44:08:34:DA:B8:3F:FE
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:99:87:07:74:b6:c3:5b:16:ec:f3:b1:73:ac:b3:ee:48:e9:
81:e8:cc:8b:8e:0f:39:80:2f:06:fe:5f:18:b3:e6:95:a8:9f:
10:16:03:9f:10:24:21:6a:77:9b:7a:ec:07:8e:76:20:38:9d:
4f:3a:50:db:4b:cc:f3:38:ff:34:5b:58:22:32:b7:d8:09:06:
bf:1a:50:3f:f2:95:50:a6:6b:a0:4c:a2:26:ee:4c:78:b1:09:
f5:ba:44:a8:c0:72:45:b3:b1:de:56:c5:df:aa:0c:c4:58:3a:
57:f4:bb:f3:80:74:41:d9:ac:50:27:77:96:48:c4:43:16:b1:
c3:dc:1b:53:46:a3:66:96:1e:04:74:db:54:a6:fb:e6:d2:14:
2e:35:0d:b2:02:a7:ca:b5:b3:78:3c:5b:c3:33:e0:f2:74:de:
82:ee:89:70:a5:4b:07:c7:e6:51:92:bc:a5:4b:d1:eb:a1:35:
97:58:85:a7:fc:f9:3c:90:cd:af:47:71:40:96:c9:e3:12:c6:
f4:50:eb:ff:8f:e4:36:70:ff:be:37:46:54:f6:7f:46:6a:e5:
3c:ac:ce:3e:b3:74:f5:92:06:f8:b3:bd:19:ed:e2:db:39:60:
bf:03:52:be:ea:65:90:ea:0c:f0:84:9b:60:07:13:20:55:76:
9f:6b:a0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:01 2025 by rpki-client