Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: qpBwThEFfs6kuuPKdkQd5f9mh4KIwUdMMOS9q4lATa8=
Subject key identifier: 93:2F:F0:3A:FB:45:96:A8:37:8D:A6:CE:8F:11:C1:D3:B6:83:44:50
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 01992330D2E4224D9B89619E2C5215B39D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0611
Signing time: Sun 07 Sep 2025 08:00:25 +0000
Manifest this update: Sun 07 Sep 2025 08:00:25 +0000
Manifest next update: Mon 08 Sep 2025 08:00:25 +0000
Files and hashes: 1: 91Ml2kQH8w2tLiMLT6Fbcu6KSJM.roa (hash: EmTDmBXIKNOaEr2bWKxBRH3EXyiQ1ZJtO/knk/QxnbE=)
2: OI1uK9LvyBYMrxZk6Wtsms4rrxQ.roa (hash: r4xm6yQr/cgOXWzX1uA52pwqnclq3721sVsfso5FXPI=)
3: RuN1CEEKgWM9o41cCPWtfZFuKKk.roa (hash: KY9kNkQ0Sz03RyPbQ91gb1ujhJwFYP1J5IWur4t9itw=)
4: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=)
5: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: UJvm1Q2CV6Ur4kQ/3Rwn1/eFEwPis5qugNTgeSs9/80=)
6: iw9kNkv-dkyYtEoLjtCHmwGGJs0.roa (hash: WAVrCgR0Lig7wZih5a6i+wCsRj3CJZHI3ntVJTN6GcM=)
7: jEuhOWOO-QlWKQlP_vQxpSPLQb4.roa (hash: T76BJeDOcF7APO1x6/gqGhi/5iskR6Zu3KBZKjePpuU=)
8: m07e6_Z6kS56JVFoiRbJDvuGsTk.roa (hash: VoYIwiaKUUQlxS0/2rdwETdn1uq8+mUfKc36O3nLq/M=)
9: w065yF2KMBb9aVnQ4BfNT-qmTRU.roa (hash: jJgjEmmyXXQf+/0rV+v9URt/GJe8fT1hRfQv43u3dw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:d2:e4:22:4d:9b:89:61:9e:2c:52:15:b3:9d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Sep 7 08:00:25 2025 GMT
Not After : Sep 8 08:00:25 2025 GMT
Subject: CN=932ff03afb4596a8378da6ce8f11c1d3b6834450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:9c:71:5b:95:15:e1:ec:a6:e7:e2:ab:4a:
39:17:4a:03:1f:d6:65:8d:3b:c7:4b:2b:77:7d:66:
da:b7:24:29:ea:c3:b1:d9:31:56:a7:67:19:b6:cf:
50:05:bc:aa:18:b3:30:9d:02:aa:22:92:a3:85:79:
76:7a:7b:66:fe:a8:16:55:41:35:ab:00:a5:72:ab:
59:93:01:be:26:3b:4f:ab:cd:2f:91:7c:f0:32:7f:
40:b9:df:f5:7f:39:f4:42:67:5a:6b:44:ef:ee:48:
07:ed:da:b1:4e:73:f9:87:e7:6a:05:67:df:59:d6:
25:bf:c4:89:e0:56:d8:4a:41:5c:87:92:aa:38:7e:
93:11:39:f6:46:77:2d:a7:f8:c0:c2:44:b9:7b:f4:
e3:00:5d:2d:38:d5:64:cb:39:3f:27:ef:3d:5d:d6:
a5:85:c7:c5:4b:29:d5:ea:6d:84:7e:e7:39:be:d1:
ec:38:b9:f3:cc:4f:06:d0:8f:8c:51:f2:3c:c0:ec:
ab:67:bb:97:e0:9f:55:35:9f:3e:56:16:2c:f2:90:
46:87:b1:94:05:6a:9f:05:10:ef:59:bb:8c:77:02:
73:e2:2c:96:17:56:66:55:3a:5e:2d:04:9b:9d:93:
3f:ba:b5:a3:de:37:3f:da:ff:14:05:a1:64:af:47:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2F:F0:3A:FB:45:96:A8:37:8D:A6:CE:8F:11:C1:D3:B6:83:44:50
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f3:72:48:de:12:15:16:46:1d:47:e3:4b:86:9d:93:63:de:
6b:df:b5:af:ef:e0:e1:6e:e9:64:28:bb:a9:7d:55:b1:93:31:
c5:04:24:cb:b5:27:79:e3:bf:88:ea:8d:60:77:23:bd:1c:50:
af:79:75:3d:df:e7:db:bc:8d:43:90:bb:c6:36:84:c9:fb:da:
4c:fe:18:4c:fb:87:eb:e7:61:a5:3a:e1:fd:4b:45:d3:85:2e:
fe:3a:27:18:ac:89:c2:82:70:c0:97:89:9a:8d:b1:ef:c6:88:
66:bd:b2:fe:4b:5d:3e:d5:aa:24:8d:3e:ff:cb:ff:39:fa:23:
41:7a:59:6f:48:37:e0:f1:0b:44:ea:e8:5b:3f:10:fc:a2:f8:
a6:21:3e:93:4d:eb:84:5b:e3:d4:26:53:e7:a1:ff:7d:b4:1b:
58:77:69:d9:82:5f:4a:bd:f0:16:1e:76:11:f6:08:06:38:05:
7e:e4:4c:c8:e5:03:7c:89:1b:71:e2:f5:10:e1:48:3f:2c:54:
c5:4d:c8:ec:b5:d9:12:6b:4e:5f:e1:31:47:48:24:ab:f6:c7:
a5:fd:be:7a:86:4d:3e:df:0a:5d:ef:ab:de:c5:ac:78:9d:37:
96:52:36:9d:78:9c:f2:fb:d9:7e:8c:a0:0b:a4:85:0f:eb:9d:
ae:ee:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:51 2025 by rpki-client