Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
File: rxfMznTBr7qDt7qF2XcSsrzEpeg.mft (raw, json)
Hash identifier: Ah/7NEOMFJCoNvL6wscb31SxUDcpzb7ldIKq60EJfoQ=
Subject key identifier: 80:DB:B5:AF:05:18:B1:9C:46:80:B1:89:6F:47:90:FD:75:CA:D1:22
Authority key identifier: AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
Certificate issuer: /CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Certificate serial: 019922C3A4832FFFE2646BBFF97AC757EC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
Manifest number: 9F
Signing time: Sun 07 Sep 2025 06:01:10 +0000
Manifest this update: Sun 07 Sep 2025 06:01:10 +0000
Manifest next update: Mon 08 Sep 2025 06:01:10 +0000
Files and hashes: 1: HRoRP4XhhYpU785BEKhZ1q4e20g.roa (hash: G6jwo30XwlnomMCEKD4f2VAkjCPOzmiVIHus+OyycRI=)
2: rxfMznTBr7qDt7qF2XcSsrzEpeg.crl (hash: OizzkL8f051uNRENM7hYILvfRQervqeD6R05FVBuQsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a4:83:2f:ff:e2:64:6b:bf:f9:7a:c7:57:ec:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af17ccce74c1afba83b7ba85d97712b2bcc4a5e8
Validity
Not Before: Sep 7 06:01:10 2025 GMT
Not After : Sep 8 06:01:10 2025 GMT
Subject: CN=80dbb5af0518b19c4680b1896f4790fd75cad122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:1b:18:aa:20:f5:99:f6:b0:1c:bd:ce:42:
a1:9d:0e:4f:cb:90:c0:dd:3b:e2:0b:c8:a4:b4:d8:
b5:9f:db:86:07:1b:1f:6c:fd:ce:e6:a0:1e:41:ff:
96:73:bf:a9:90:ce:3b:e4:00:db:e7:01:55:56:a2:
f3:9c:73:07:33:52:cb:c1:0a:b7:90:c5:73:28:16:
f0:a8:23:7b:b6:9b:3b:3e:6f:70:3e:fc:10:a6:07:
57:24:f0:b3:8e:d5:fa:26:09:e8:5e:5d:9c:f7:c3:
01:0d:5a:a2:54:04:80:e0:04:fe:d9:9f:43:0a:c6:
46:b3:ae:63:73:2f:1d:0f:84:6a:b1:f1:32:70:18:
be:ed:f8:7d:1e:0d:e2:45:d3:2f:55:e2:6c:16:fe:
89:2f:33:02:db:95:e6:dc:07:01:c8:d3:53:88:f6:
2a:96:6e:ff:90:bb:a6:8a:f8:43:6d:26:b2:0c:83:
56:f0:97:0e:43:ee:55:2b:20:60:5e:9c:ab:df:1f:
3a:33:40:6a:40:3e:51:b8:99:4b:a5:e9:c0:a6:6c:
04:a3:0d:4a:ad:0b:78:9b:48:75:8d:0b:31:10:03:
d2:df:fa:31:7e:69:b7:8d:5b:e4:6e:4c:bc:ff:8f:
3d:0f:c6:31:a1:6c:20:5f:28:97:bf:2f:54:6d:a9:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DB:B5:AF:05:18:B1:9C:46:80:B1:89:6F:47:90:FD:75:CA:D1:22
X509v3 Authority Key Identifier:
keyid:AF:17:CC:CE:74:C1:AF:BA:83:B7:BA:85:D9:77:12:B2:BC:C4:A5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxfMznTBr7qDt7qF2XcSsrzEpeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b73cac-3610-4224-bdba-a5757aaafffa/1/rxfMznTBr7qDt7qF2XcSsrzEpeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:69:46:96:1b:90:41:eb:b5:4c:b5:44:02:aa:0b:c6:2e:a0:
46:a2:52:45:65:fb:11:c1:cc:4d:f7:cf:47:25:65:aa:5b:4d:
76:18:d6:a7:c3:4f:96:22:00:fc:2c:22:d3:42:93:3c:d7:a7:
27:14:b9:ef:08:73:2d:a0:e2:a4:d6:9d:b4:06:7d:40:11:65:
ea:fb:02:64:73:4d:54:7f:3a:ef:56:ff:1b:0c:5a:a7:ad:6a:
f2:a6:cf:2b:7b:42:fa:10:79:cb:08:98:cc:38:4e:64:e2:c6:
a8:1c:5f:75:8f:7d:d9:7b:02:44:2f:24:1d:d5:f9:0d:7f:06:
a9:3a:33:a9:3c:b4:d2:e1:b3:ce:0b:6b:07:1c:a6:da:1e:bb:
3a:c8:ed:87:38:23:ad:78:06:0d:de:5d:9a:5c:f6:3e:60:1d:
43:cb:af:c3:c6:d5:49:b6:12:83:bb:6b:41:bc:39:a7:ab:85:
80:0f:d4:5b:33:0e:ee:a7:cd:92:a7:0d:1c:62:6c:b0:ba:6b:
dc:61:38:22:a0:2e:44:32:3c:9d:c1:84:d5:ff:fc:ea:9c:0c:
69:b7:49:57:eb:85:fb:94:f4:f1:57:ed:92:04:df:7a:f3:31:
aa:ec:16:26:81:71:9b:4b:0c:9e:3c:ea:f8:8b:ca:dc:c0:87:
1d:3c:bc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:25 2025 by rpki-client