Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: bMnjjLNPk7AOYgRRg2fb3ZdSAg8nzxAhUgzYTair80o=
Subject key identifier: C1:09:0A:B4:CE:11:B9:40:DB:45:00:63:EB:BD:2C:68:71:D8:5B:F0
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 01992443BF5DF78D2BD37EF3EA17A8E3C48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 12F6
Signing time: Sun 07 Sep 2025 13:00:43 +0000
Manifest this update: Sun 07 Sep 2025 13:00:43 +0000
Manifest next update: Mon 08 Sep 2025 13:00:43 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: 41/sUxTWbWvBUgcJYwlHKHP5c47WNFOE1YxClV+EwVA=)
2: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (hash: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:bf:5d:f7:8d:2b:d3:7e:f3:ea:17:a8:e3:c4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Sep 7 13:00:43 2025 GMT
Not After : Sep 8 13:00:43 2025 GMT
Subject: CN=c1090ab4ce11b940db450063ebbd2c6871d85bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:fb:77:07:48:3f:60:80:5b:f2:00:b8:c7:
fd:b0:0a:55:2f:e0:f3:6d:d4:39:fb:52:e8:de:d0:
59:77:44:13:32:9f:55:ce:ab:41:88:3f:da:08:f3:
89:31:40:0f:81:47:20:a9:99:ac:b9:9e:c0:c1:4d:
a6:3a:88:48:07:b9:cb:18:16:35:38:66:fe:4c:2c:
01:22:29:02:74:9e:b6:99:62:f2:37:4c:14:91:a4:
12:4b:96:b1:03:61:f0:c0:d0:e2:4a:50:96:39:4a:
46:c2:af:d9:1e:3e:c3:b0:df:82:d6:d1:4d:26:6e:
e3:ff:84:a3:36:42:e6:7b:2c:e4:0f:35:29:82:04:
2f:44:fa:a2:9d:aa:de:5b:95:33:75:0c:36:37:b0:
f5:3f:4b:e3:b5:f3:13:62:eb:86:fc:a2:db:33:e2:
57:16:c4:ed:63:a2:c2:6b:67:6b:b9:ab:98:f3:7c:
04:5a:7e:ae:fd:62:e8:3e:94:86:5d:f7:f6:83:50:
0d:3b:b9:9c:30:df:24:f9:7b:fc:58:ae:20:ad:73:
2d:dd:51:6e:dd:f8:3d:76:96:ce:1a:25:1d:c7:6d:
c6:d3:74:33:2f:86:cc:4f:30:a3:9e:0f:de:fd:64:
0d:46:99:ac:d8:9a:44:1c:3d:bb:7c:35:07:b4:0b:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:09:0A:B4:CE:11:B9:40:DB:45:00:63:EB:BD:2C:68:71:D8:5B:F0
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:25:f3:26:ac:08:6d:ca:b3:f5:6e:70:2b:d9:5b:49:e8:12:
1d:4e:06:40:bc:0c:8e:a7:b2:6d:f7:21:3f:8f:00:3a:7a:85:
f2:77:f4:53:18:c9:4d:e3:eb:85:94:a5:90:92:ff:b8:63:ed:
53:1d:4e:70:f6:71:a8:5b:0d:50:fe:2c:74:fb:5a:0a:01:c5:
c8:58:26:1a:bc:92:cd:69:cf:42:50:08:d7:92:63:9a:af:38:
98:03:56:19:81:94:48:c5:84:e9:ca:35:76:2f:f7:d7:24:25:
e2:a6:45:02:26:e1:74:ea:94:0a:9d:e7:da:68:c8:32:9e:03:
95:31:1c:67:13:72:bf:77:d7:98:69:5b:85:fc:38:04:a5:1b:
21:2c:17:0d:cb:b6:7d:4c:05:5c:50:1c:76:23:a2:cc:01:69:
87:4c:80:7e:e5:7e:3b:cc:dc:28:98:35:6b:d7:eb:da:c3:37:
32:18:31:a2:ff:3a:de:d6:02:56:78:71:ef:05:3d:8e:20:55:
3a:01:e9:ca:cb:d4:57:28:d2:d1:fe:6b:d9:fc:a6:c4:dc:87:
9b:c6:06:28:98:72:57:51:a3:31:1e:4e:d0:28:a2:46:db:44:
e9:9f:b5:12:2c:44:6f:e1:df:32:15:a9:bd:0b:8b:1b:db:ff:
09:3b:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:59 2025 by rpki-client