Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: sKi2Nk0s4DqlEtXDpzO1+ScqnXm+LxaqoEzVUslHF00=
Subject key identifier: 20:33:6D:CE:85:64:C5:B2:69:1C:A6:9B:A5:5C:95:C7:05:93:C6:5F
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 019922C372AECDF2BD7AAA9E6E8E0C70F566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 06:00:58 +0000
Manifest this update: Sun 07 Sep 2025 06:00:58 +0000
Manifest next update: Mon 08 Sep 2025 06:00:58 +0000
Files and hashes: 1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: coREmAXB3PLQat9SIWkjzl2W+NZPRL+Z2CDGfEL/maQ=)
2: LF_3HwZmRrCki2d-FP5TfnY-Yfo.roa (hash: OqUUHUSkyKdGpgaBU1hHW7IYtyTJfajGz9ID3t644ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:72:ae:cd:f2:bd:7a:aa:9e:6e:8e:0c:70:f5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Sep 7 06:00:58 2025 GMT
Not After : Sep 8 06:00:58 2025 GMT
Subject: CN=20336dce8564c5b2691ca69ba55c95c70593c65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:3a:4e:13:41:f6:ed:58:32:c1:03:e1:7c:
91:1c:4c:3c:7c:9f:c8:1b:cc:f1:90:c6:fb:ad:c6:
6a:7f:f2:2b:8b:1b:25:0e:fc:c4:3f:ef:65:68:3b:
0b:3d:d1:35:51:bd:1f:c7:d2:36:6d:d6:98:24:6c:
f7:a0:34:8d:76:89:05:32:8a:38:f7:da:42:30:6e:
c9:ba:44:01:d6:4a:73:c8:fa:6c:b7:d9:54:7f:7a:
a9:70:26:d1:85:2b:4e:c5:0c:01:2f:78:2a:11:24:
c0:27:54:41:78:42:ed:31:80:4d:c4:08:16:eb:e2:
93:d6:7a:58:25:1e:eb:00:5c:43:c3:e8:29:16:a5:
e5:05:76:2d:5e:71:00:65:9a:3c:4a:34:d1:c6:3a:
fc:27:37:fa:08:61:19:5e:2c:ad:ef:c5:51:22:16:
95:04:e7:d9:bc:85:98:51:59:9e:49:44:43:84:bb:
94:ce:15:f9:2e:94:3b:4a:9d:29:36:f1:47:d0:6a:
99:68:47:30:ab:f3:c4:0a:fa:61:24:38:a6:58:54:
69:36:94:8d:91:45:9c:a6:d5:86:78:43:49:65:8d:
3e:ba:7f:5f:ae:c5:ca:2a:7d:51:6e:49:85:bc:f6:
8d:d9:33:11:e4:da:27:30:bb:a7:ab:be:77:00:5d:
66:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:33:6D:CE:85:64:C5:B2:69:1C:A6:9B:A5:5C:95:C7:05:93:C6:5F
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:36:72:b4:0d:45:49:33:b0:b1:4d:f0:f7:3c:6e:08:70:77:
ef:5f:92:63:72:9b:db:8d:b1:ef:23:af:99:7c:a2:16:87:2c:
e4:4a:8a:3d:d4:50:30:93:4d:1f:29:f4:67:c8:b5:82:1f:2e:
10:d4:21:82:c7:b3:9e:09:ab:68:47:39:8f:72:ce:e5:ca:d8:
61:b9:03:7e:84:91:ba:5d:49:cf:3a:04:19:8a:73:60:f8:58:
7a:fd:d1:8d:1f:97:f8:77:31:18:88:fd:44:d8:73:70:fd:5b:
c3:ca:d2:71:3e:f0:11:df:21:90:e3:b5:6f:02:19:d7:02:d3:
a6:14:f9:54:84:b3:e8:37:01:5e:e2:42:75:a1:cd:ca:21:65:
1f:d8:f0:6f:40:a0:59:21:f9:e1:4b:5f:bb:80:d2:1c:1a:43:
88:4f:06:ce:bb:87:92:a3:c5:9f:ac:50:72:fc:b2:b8:d4:e2:
35:ee:15:36:17:7b:b8:b5:af:a0:87:42:91:a2:71:34:d2:70:
ca:e9:e5:4c:d5:29:c3:a3:79:58:a7:9a:97:2b:92:ff:a6:6e:
21:64:5b:3a:d7:91:34:2f:ad:15:5b:67:8d:59:a2:f7:e3:cd:
71:e4:3f:ee:f4:90:f3:fa:a6:91:c6:94:d4:18:3f:f0:2a:a4:
d0:e7:8f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:46 2025 by rpki-client