Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier: HybVmnNwSpG8xazM+JvTXujIL7EoSYGuYNfJUUh1uHI=
Subject key identifier: 9C:B8:7E:31:A0:61:E7:E7:61:E9:DB:FD:FA:B1:01:1F:22:15:5B:A8
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 0199228C7CD0894D9A82878E1E73C351C9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number: 06E4
Signing time: Sun 07 Sep 2025 05:00:56 +0000
Manifest this update: Sun 07 Sep 2025 05:00:56 +0000
Manifest next update: Mon 08 Sep 2025 05:00:56 +0000
Files and hashes: 1: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: jP+12w4tVVF33sq2FeuuE/Svk7xpmuKQ3O3u9CymPjE=)
2: jDb6CVt7LMESu9TedWHpv82vXzQ.roa (hash: zvLg2bIhHSdnpMeV4b2spjUGOYu0nN5hkdLuTlMfXXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:7c:d0:89:4d:9a:82:87:8e:1e:73:c3:51:c9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: Sep 7 05:00:56 2025 GMT
Not After : Sep 8 05:00:56 2025 GMT
Subject: CN=9cb87e31a061e7e761e9dbfdfab1011f22155ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:fa:ee:a8:c6:68:82:58:95:82:c6:91:fe:
b5:93:dc:6a:25:78:05:24:ec:e3:d6:bc:e8:f9:70:
13:0c:f3:55:67:d3:e1:08:4d:c5:72:b7:ca:7a:2d:
b2:9f:ed:4e:7d:57:59:f3:c3:84:e4:ca:bc:f7:a2:
63:de:a0:d0:3b:18:f0:f9:83:5e:fe:da:ab:06:73:
fd:7b:41:48:ce:b4:4e:c3:43:e4:94:76:84:a4:e6:
a7:6c:c6:f7:80:76:9f:86:bd:96:4e:4f:7e:b8:92:
67:9b:cd:48:f2:f3:7f:1c:20:1d:76:1e:b2:75:50:
5f:a9:3c:d5:0a:65:73:ff:53:54:b2:ed:9c:d2:0d:
22:51:1a:07:ae:fd:a5:bd:26:86:4e:7a:f1:3c:04:
15:b3:78:93:fa:66:10:89:02:b0:e8:43:ba:97:86:
13:bc:f8:d5:b3:75:82:f2:16:04:78:51:19:c0:14:
9c:dc:03:01:12:21:95:2b:c8:6e:32:17:02:bf:f5:
2a:52:26:e9:13:03:4e:d1:0a:09:8e:5b:5b:cc:ef:
34:51:f2:cd:7d:bf:12:08:32:f4:a5:ca:33:94:7a:
b6:27:a1:58:41:2e:de:db:16:5f:e7:25:60:b4:3c:
a1:43:e3:56:36:a2:7f:90:03:1e:d4:27:80:2b:fd:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B8:7E:31:A0:61:E7:E7:61:E9:DB:FD:FA:B1:01:1F:22:15:5B:A8
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1c:37:41:cd:e5:90:75:02:a5:9d:d2:50:fb:0c:40:e3:af:
ac:cf:2c:59:b4:6b:28:19:10:28:ad:c3:fe:24:3b:5b:f2:28:
da:1b:db:7d:90:0e:64:09:73:66:25:20:f6:a7:db:52:44:5a:
84:fd:71:13:fd:1e:4c:21:e5:f6:d6:d5:bd:0f:7d:48:35:fa:
a0:ff:f9:f9:25:e0:33:28:18:51:53:2b:30:72:99:13:c2:83:
90:8e:bb:a3:77:c6:09:b8:06:f6:d3:ad:9f:fc:c5:e5:32:09:
63:71:7f:d4:1f:97:5a:98:5f:41:75:fd:b6:75:9f:3c:8f:81:
51:d1:42:84:20:a1:9e:7f:9b:be:33:81:cc:54:35:c3:ec:8a:
39:7f:7f:3e:a7:b3:c4:bb:c1:05:52:0e:aa:38:2e:85:23:33:
b9:15:b7:a3:8a:1a:0d:17:26:ca:03:12:1d:5f:38:50:8c:ab:
62:9c:34:c4:29:fc:d5:80:87:2d:ea:5e:62:c6:33:8b:41:2e:
b2:bc:73:da:b9:9c:91:5c:eb:40:82:ee:8b:c4:51:f9:32:86:
be:39:1d:da:e7:3d:a9:b2:e5:50:d3:fe:f3:75:ad:29:be:f4:
5a:14:09:5a:63:8a:73:7a:0b:63:7c:ad:06:13:ea:83:6e:01:
5d:28:53:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:58 2025 by rpki-client