Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File: 9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier: DnMAI+gD1RPsA4qm7mjdAxlnZPGvyJ4urapcQmC9zoE=
Subject key identifier: 2A:10:57:AF:5A:EC:E8:4D:D7:22:32:C3:01:F2:EA:B0:3D:B0:86:A4
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer: /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial: 019922C383864693BB68C151868E2616F06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 06:01:02 +0000
Manifest this update: Sun 07 Sep 2025 06:01:02 +0000
Manifest next update: Mon 08 Sep 2025 06:01:02 +0000
Files and hashes: 1: 88-pt2hIN1dTOb7W_yyIcsyIKos.roa (hash: rXxfNXMHY0jcVNFeL7a/dvDj6ZDtDB0GLjdB35wLnIg=)
2: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: nDfnr0x943reqQrnCZkqRHPDe3LwqfIiwo+HkxDFhIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:83:86:46:93:bb:68:c1:51:86:8e:26:16:f0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Validity
Not Before: Sep 7 06:01:02 2025 GMT
Not After : Sep 8 06:01:02 2025 GMT
Subject: CN=2a1057af5aece84dd72232c301f2eab03db086a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:44:f9:70:2b:ca:03:65:f7:dc:d5:4e:4f:
ba:5e:aa:18:90:cb:bb:cf:6f:af:08:63:fe:01:a3:
6d:96:e0:7d:ed:9d:26:48:3a:1a:2a:ca:64:3f:ab:
10:07:b4:4d:b8:84:14:f9:5b:59:51:8e:05:af:84:
92:98:cd:14:e5:2f:88:69:ce:4d:c3:c9:4f:c5:a8:
f5:48:fb:af:c0:bb:8e:49:9e:c6:2e:50:54:05:0c:
08:cc:b5:23:16:98:7e:94:24:68:2f:41:b2:05:89:
b1:71:48:67:7c:87:d1:96:0d:b4:ed:c5:81:9f:e7:
b9:e5:86:cf:0a:cd:fa:0f:99:57:09:e5:3a:2b:90:
30:0b:f8:71:b5:51:16:de:a5:d0:59:7d:41:d5:88:
b7:49:8e:d3:c0:26:c5:b9:68:4f:f0:1c:8e:07:66:
2a:e4:13:a1:02:67:21:c9:fc:b0:e6:32:3a:0e:72:
5b:09:56:48:d7:b0:73:80:0d:1e:8a:bd:aa:b7:b0:
44:40:d5:f1:14:3e:81:d6:5c:a9:7d:f0:42:ef:8a:
ba:1b:b1:34:bd:3a:03:33:3d:d6:ea:5f:81:bb:9b:
ab:1a:5b:e5:f0:ed:11:e4:82:32:d7:26:f4:f3:22:
0e:2e:91:16:6d:3f:41:36:26:e2:3b:5f:af:f6:af:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:10:57:AF:5A:EC:E8:4D:D7:22:32:C3:01:F2:EA:B0:3D:B0:86:A4
X509v3 Authority Key Identifier:
keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:92:f6:09:66:cb:45:bc:9d:57:a4:48:73:0f:bc:d4:c4:a2:
70:c2:7d:76:9b:ef:f0:49:d7:2e:cf:04:75:8c:60:86:cc:46:
fe:5c:5f:00:cd:73:4a:0d:a6:39:8f:64:e3:4c:a3:b5:89:89:
c1:9b:03:d6:9a:6e:c9:6c:b7:ff:f0:3b:cb:10:56:e4:85:97:
66:79:47:4f:7c:3f:6c:92:ef:c1:55:c3:b8:cb:d0:44:83:1a:
a2:8f:99:c7:9b:78:46:df:5e:2f:7e:47:cb:5b:19:b4:e0:5d:
06:92:47:79:0f:91:88:a3:83:08:d4:7f:43:c4:36:a3:b5:ee:
7d:f2:5d:61:0d:ed:3a:85:de:c3:c7:2c:e0:84:19:31:d8:89:
a0:2c:03:b1:dc:a4:27:c2:2a:c0:20:70:d0:1c:1f:95:dc:9b:
52:dc:a9:63:8e:1b:f6:f3:ce:06:c0:02:2a:e4:1a:e8:78:4e:
81:87:cf:36:a1:70:44:3d:a9:5c:a2:42:d4:31:d6:40:95:9e:
c5:4a:c4:47:bc:1d:89:6c:58:18:05:9a:bf:86:80:65:3a:a0:
99:b8:cf:a3:33:0f:d6:18:fa:a7:bc:d0:b9:27:26:f4:2d:92:
8e:5b:87:ca:e3:74:02:a2:bf:1c:ab:1b:2c:f0:8e:65:bb:75:
33:d3:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:20 2025 by rpki-client