Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json)
Hash identifier: Qsfy5dVMX4zfr4DEYPE7cM67ztrDeiU2Wb3BBQlXPCM=
Subject key identifier: 8D:0C:9A:B2:15:A1:57:20:AF:65:04:A4:30:65:C4:BA:9E:01:AD:F4
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 0199228CEE60ADADE83ADCC002E0D1B44D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
Manifest number: 30
Signing time: Sun 07 Sep 2025 05:01:25 +0000
Manifest this update: Sun 07 Sep 2025 05:01:25 +0000
Manifest next update: Mon 08 Sep 2025 05:01:25 +0000
Files and hashes: 1: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: Fxn5nS5iQajaNO1wqxOwIHZMn25KPfeO8PGYOfQN38M=)
2: JNDj7IkhbQ_3xrbEz4uAXQ1Yv3Q.roa (hash: Wl0WwrfiuzHjyAyUMW+l+iPzUUYZzp7CP7Vher9u5s8=)
3: TDs3SCHkSwxi2Xb9E5-5lxldSWA.roa (hash: UmMaqKmCtjb0oErlYVHbczcMBZ32+2r0z5hmDOfKCCM=)
4: V6wlyE81nOSUZZNevO5fwFq_yuI.roa (hash: BJWgiCN26bDpqIeJaukxrOIxIn7K1eaqwr8a29JJlYg=)
5: kRIa94MWYWrUOVwjc9XA73SAMOA.roa (hash: CLFC01EOAmxOj0g9Emkl9wa15kGO2yyt+4qXoqbGCJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ee:60:ad:ad:e8:3a:dc:c0:02:e0:d1:b4:4d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Sep 7 05:01:25 2025 GMT
Not After : Sep 8 05:01:25 2025 GMT
Subject: CN=8d0c9ab215a15720af6504a43065c4ba9e01adf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:e6:72:f4:93:5d:e9:3d:41:7b:3f:84:c0:
cc:3f:00:43:6d:f3:6a:ba:14:30:29:9e:23:16:9d:
e1:be:3d:ec:3d:06:d8:d3:14:ca:b0:20:0c:53:cb:
7b:6f:4f:84:20:7f:e0:f8:34:e3:a8:05:a8:60:a6:
cc:24:70:91:82:3a:b7:ea:64:7b:93:75:04:7f:db:
6c:1d:75:d8:35:76:64:2c:98:07:b8:6e:6a:e8:36:
dc:88:77:f6:9d:f5:e3:3c:33:c6:d2:23:b1:57:11:
86:4c:0f:71:50:da:2b:eb:29:21:46:a5:67:78:3a:
e4:84:6d:fe:34:08:7d:21:9e:ab:d2:b0:20:f8:07:
88:6d:c7:a8:64:35:97:d2:94:4f:78:23:7d:99:90:
85:0f:07:47:ab:74:50:bd:7e:1c:ce:7c:e1:e1:03:
a8:9d:82:be:aa:8d:7a:05:2f:53:84:a4:54:79:60:
d9:1f:b7:a4:ef:5c:16:ad:85:6c:a9:02:6b:d0:75:
59:97:cf:05:4e:29:d7:9d:1b:93:68:84:50:20:88:
7d:30:a1:79:8f:16:03:a6:cf:c1:d3:b8:7b:2d:76:
34:2d:2b:20:46:8f:01:c6:52:71:27:cd:90:5a:2a:
52:17:52:dc:9f:88:2c:88:ef:8d:07:78:f9:b3:2c:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0C:9A:B2:15:A1:57:20:AF:65:04:A4:30:65:C4:BA:9E:01:AD:F4
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:48:ba:3d:fd:25:e0:32:0a:b2:3b:8a:23:4b:c7:d1:df:6a:
99:c6:63:d3:3f:16:9d:8e:58:d8:0f:7b:3d:f4:64:e1:ac:7e:
d3:dd:12:db:e7:5c:6b:44:09:38:b0:68:80:a6:99:26:71:a3:
e3:06:80:89:9c:ad:b5:93:dc:9c:1a:88:10:32:86:c2:e6:61:
fb:6c:3a:a2:bd:a7:44:f5:14:d2:1d:67:d4:f5:38:af:55:a2:
96:56:e4:f7:3d:8d:e5:b3:c4:ec:a6:8f:7b:75:bd:c2:25:25:
22:af:b5:a4:92:f2:e0:f8:1c:a9:4a:23:14:45:6c:00:85:37:
d6:e0:25:22:58:ba:97:8f:00:01:8d:81:23:aa:d6:9b:3d:cf:
ab:9c:81:f5:a7:b4:b4:b2:90:e5:bd:94:f2:45:af:f1:54:57:
bf:9f:3f:9e:fd:05:d9:49:75:31:1c:b9:76:ae:8a:b2:79:7d:
f0:5f:6c:dd:43:73:92:68:6b:b7:3a:95:c6:83:18:fb:85:c4:
d4:a0:6b:2c:f4:c9:2a:55:5b:12:b1:8b:6f:5c:a5:7f:33:d8:
5b:be:3f:6f:68:09:07:a2:a3:e3:56:5f:68:cf:b4:47:dd:71:
ea:77:f7:a9:85:3b:62:20:0b:a2:8c:d0:bf:4f:9d:ec:f8:c3:
c6:22:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:01 2025 by rpki-client