Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: /FK3BXzcKu9lHGmsV38uv36pI7Z2XQNGxXkkvqggGBs=
Subject key identifier: 20:0E:F0:4F:58:85:BA:BB:98:0A:70:91:C6:AD:7C:BA:8C:BA:85:59
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 01993501ED58BF63BFDCB76BDCBB4292AF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 06DF
Signing time: Wed 10 Sep 2025 19:02:22 +0000
Manifest this update: Wed 10 Sep 2025 19:02:22 +0000
Manifest next update: Thu 11 Sep 2025 19:02:22 +0000
Files and hashes: 1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: S6n5Yg1Ve+cUkPc/RD+vFDZvvqj60HYA1zK83a2Ym6c=)
2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:ed:58:bf:63:bf:dc:b7:6b:dc:bb:42:92:af:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Sep 10 19:02:22 2025 GMT
Not After : Sep 11 19:02:22 2025 GMT
Subject: CN=200ef04f5885babb980a7091c6ad7cba8cba8559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:57:11:e2:1e:c5:97:32:07:ad:ac:86:fa:
25:6c:db:00:74:a0:30:aa:6c:08:73:75:58:44:7b:
5f:d2:ec:3d:4c:cc:01:d4:04:8f:ff:85:ac:ae:6a:
2b:30:de:86:b2:07:f7:ac:dd:81:20:d9:6c:81:a0:
50:9f:4d:76:25:02:fd:ac:6f:de:84:ea:3d:ac:01:
6b:af:cf:78:6a:05:a9:fd:85:c5:0f:a2:12:21:9b:
2f:e5:df:ba:a0:a4:d0:59:c4:c2:4e:36:6c:c7:05:
87:fe:e4:a9:b0:c9:f4:4f:59:d9:44:a0:23:7b:68:
c2:e3:60:6d:75:60:ab:d2:bb:54:04:b9:8a:b7:fe:
7f:62:90:b7:65:c8:41:98:f8:f8:5e:ac:04:26:c5:
4e:0e:45:7e:25:83:1f:cd:f8:a5:36:48:51:93:a7:
c9:16:be:f9:77:99:0a:70:2e:a4:6b:c6:46:31:08:
56:21:96:7b:73:20:a0:7d:25:51:ef:85:bf:cb:92:
a0:1c:bb:62:f0:a3:b8:91:ef:55:7b:65:05:ec:86:
c7:ef:f9:a5:c8:b6:4a:a9:68:90:9f:0c:f1:6d:67:
99:e1:18:b0:b4:d3:67:fc:24:74:d7:d4:3c:31:e0:
6c:16:c8:bb:9b:95:55:92:ee:d8:4f:9f:82:e3:93:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0E:F0:4F:58:85:BA:BB:98:0A:70:91:C6:AD:7C:BA:8C:BA:85:59
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:66:49:57:18:69:35:74:8f:fa:96:78:b3:00:93:0e:6c:8e:
a1:ca:75:fe:97:97:c7:a1:16:e3:de:15:b3:80:c1:e0:98:41:
cd:68:2c:3e:f1:7f:04:31:50:6b:3e:6c:ca:b4:d2:db:96:9c:
a3:b6:73:7f:cd:bd:39:3f:7c:bf:7b:53:1e:a2:17:4e:fc:0f:
2e:f5:86:72:14:01:1b:8b:ee:e0:fd:3f:e8:f1:c8:bd:85:58:
c3:b8:be:2b:b3:1a:04:af:96:89:72:46:25:6d:77:ed:78:49:
3c:28:7b:19:f2:d8:22:e0:73:3d:bd:8e:3e:da:4d:26:4d:be:
64:bb:d8:74:f0:06:98:c1:16:69:0f:57:c4:51:ad:7e:72:e4:
3c:d1:2a:a6:c6:02:95:cb:a7:3f:f2:1e:5b:1d:0c:e6:b1:af:
65:4b:e4:9b:bc:f6:ab:d2:cc:4e:54:62:5b:ba:dd:b3:4d:2e:
9f:9a:f4:15:6e:00:09:07:d7:20:7f:1f:ce:53:07:bd:ea:3b:
82:80:b0:ac:c9:ac:15:41:d8:87:68:ba:d7:7d:b1:cc:1b:df:
4b:c7:3c:f7:82:81:0d:f3:9e:45:cc:20:d6:8d:ca:e7:5a:55:
b6:8d:8f:b8:27:08:4c:18:64:a1:57:d7:e4:8f:bf:e1:cf:b9:
9e:ac:50:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:53:37 2025 by rpki-client