Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier: im8B2/GqBIOCnlHZkYGKylSwAbwimZSdFshKAjaquNw=
Subject key identifier: F8:18:13:C4:EA:7D:48:3C:CA:D2:79:86:21:E3:D7:4D:00:2F:D7:86
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 019923D6475FE3AFD581B522E9F19E19816B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 11:01:09 +0000
Manifest this update: Sun 07 Sep 2025 11:01:09 +0000
Manifest next update: Mon 08 Sep 2025 11:01:09 +0000
Files and hashes: 1: d9zp6AZxGUIdUrJzz8idXxXqkvw.roa (hash: FfoXAw9lK5hBRkyqnfyBrRUYHwvSIXzUheL45ZXlndI=)
2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: m6Om3tyKiDMoSGiNjkrh0quUhl9HvsO/BvW+JXIU3oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:47:5f:e3:af:d5:81:b5:22:e9:f1:9e:19:81:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Sep 7 11:01:09 2025 GMT
Not After : Sep 8 11:01:09 2025 GMT
Subject: CN=f81813c4ea7d483ccad2798621e3d74d002fd786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:1b:e6:f3:48:ab:6f:7e:86:4f:f8:7a:a9:
2d:22:a8:2b:ea:fe:9d:ab:5a:8f:4c:fc:81:99:be:
e2:73:09:fd:bf:42:b5:04:c6:23:53:d7:01:05:c0:
06:ea:05:4c:ad:c0:07:70:a6:d0:49:5f:31:6c:dd:
c6:e1:12:79:f5:9d:0e:87:84:6b:b4:11:02:11:fa:
05:7e:aa:da:46:20:b3:c2:94:6e:d7:d4:56:c9:89:
af:6c:ba:35:c1:53:8d:f4:ce:04:23:4f:0b:6b:24:
e2:e5:7d:93:91:72:f5:3a:c5:56:65:8d:04:18:83:
ff:33:1c:ea:4f:bb:e4:43:4a:fa:e0:2b:35:44:66:
2c:ab:56:fe:47:04:b8:83:d4:1f:2d:a5:f3:7b:ce:
27:e9:e5:f9:1b:f9:3c:b5:0a:3d:af:bf:69:71:da:
c9:82:1a:ae:32:5e:e4:ff:73:97:5f:69:5d:30:da:
e1:d0:98:95:2d:57:44:ca:50:2b:8f:bb:d7:3f:6f:
d7:ee:40:62:0d:ff:84:5a:5c:af:6e:b7:87:5b:69:
36:27:48:ab:72:c5:28:32:c7:f0:33:ea:a5:02:28:
1f:8a:04:18:35:f9:44:b5:d1:cb:ef:a3:8f:2e:ba:
0e:8e:4f:f0:ae:f7:05:5e:b9:b1:76:e1:04:7d:22:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:18:13:C4:EA:7D:48:3C:CA:D2:79:86:21:E3:D7:4D:00:2F:D7:86
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:af:9f:3b:39:09:69:a4:48:28:e9:c2:c4:31:0e:49:37:6b:
1b:ee:2a:b6:a6:5a:7e:35:e4:18:0f:f0:2f:ba:9a:0f:d2:74:
67:65:2e:28:36:62:17:11:5b:ee:6b:ff:68:a8:ea:a7:b8:a7:
3c:47:d1:1a:fa:b2:07:65:b2:23:e9:da:bf:c8:23:36:42:91:
9c:dd:26:d3:8a:25:0c:6c:72:78:c1:40:a4:b0:15:20:58:a0:
e7:33:54:f2:b9:4f:25:27:11:c5:2f:c4:82:0d:06:90:7f:53:
9f:d7:2c:9b:ac:3f:38:2e:04:9e:70:94:b5:b3:74:46:cf:d5:
fe:92:4b:8a:75:c1:21:e9:13:2e:9e:56:a6:db:9b:bc:20:15:
eb:98:4e:33:40:45:e5:0d:89:8a:1a:5c:43:82:fc:6d:a3:b1:
8c:98:30:af:0f:c0:4a:77:ca:0a:39:2e:86:65:ac:7b:6c:9f:
2d:fa:23:91:06:b6:f4:1e:75:b0:af:4d:46:4f:3b:ca:aa:9e:
ad:c7:f2:bd:ba:a5:c2:c0:7e:fd:11:52:84:a5:72:68:ab:31:
f2:43:fa:0a:20:46:6d:cf:6a:60:c0:71:41:42:4a:c6:06:81:
87:51:d1:d0:0f:07:dd:77:66:8d:b2:8a:c1:c7:f9:78:c2:7a:
7f:57:33:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:59 2025 by rpki-client