Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File: g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier: I9xT5lS/igDNW9QS8PxWfXm/HMczW/Ce3kAbuR7vIak=
Subject key identifier: BF:11:23:53:AB:76:02:6A:EB:8B:08:6A:AA:D0:99:1A:0B:6E:8C:B9
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 0199228CBBA4826E005548D2299A1110769C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number: 0B5E
Signing time: Sun 07 Sep 2025 05:01:12 +0000
Manifest this update: Sun 07 Sep 2025 05:01:12 +0000
Manifest next update: Mon 08 Sep 2025 05:01:12 +0000
Files and hashes: 1: Ep6x42DXRSqizolUteEfvKxUcLA.roa (hash: R7QtcNnXyeV8OJfFTG/3xT0jdYWPM+BRX6IIEmRZyXk=)
2: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: XCdf2GN+dTVDWmnYlLZK2mQKfPX5hx9gd/RZCpiDnxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:bb:a4:82:6e:00:55:48:d2:29:9a:11:10:76:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Sep 7 05:01:12 2025 GMT
Not After : Sep 8 05:01:12 2025 GMT
Subject: CN=bf112353ab76026aeb8b086aaad0991a0b6e8cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:8c:3e:14:59:40:2f:f4:7e:40:16:43:df:
d3:25:94:9e:e1:ae:c6:27:5f:7d:fe:d1:29:58:a5:
25:93:a3:24:1b:88:77:1f:bf:23:9d:53:31:b8:29:
07:42:53:98:d2:74:8f:94:f9:55:b9:0f:40:54:f4:
c4:4f:87:3a:54:4d:04:b1:be:b7:f1:a0:1b:43:11:
33:aa:b9:da:1c:38:85:6b:e6:b1:97:d3:65:bb:dc:
aa:65:5e:b2:77:2e:4f:61:23:3f:f8:e6:09:85:7e:
e9:ce:03:c4:1f:af:f5:21:a5:10:ca:d0:3c:9d:27:
75:80:8d:15:93:64:1e:ef:d0:d3:43:1a:c1:db:e2:
5c:5f:2b:e5:a7:e3:cb:05:8b:3e:c9:fb:3f:66:8d:
10:6d:cb:8d:3f:2b:16:d1:5a:24:59:70:9a:b2:ea:
ed:a6:53:51:35:ed:29:e2:df:10:de:56:01:0a:d1:
c3:16:40:23:6e:3e:9b:8d:72:b8:01:79:bb:1e:1c:
62:e6:71:76:0d:4d:32:fb:87:a4:91:17:77:dd:0d:
8b:4b:1b:b5:d8:a4:6f:05:fe:ce:11:a7:65:60:bd:
c2:77:27:97:93:9d:79:29:e7:fc:97:f7:b0:32:e5:
ed:8a:c8:eb:f8:19:9d:ec:93:83:8f:4a:c3:f5:dd:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:11:23:53:AB:76:02:6A:EB:8B:08:6A:AA:D0:99:1A:0B:6E:8C:B9
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:45:26:87:1b:14:1d:62:ed:fe:df:5f:a5:67:6c:12:e7:9b:
f2:27:0c:d0:21:0a:df:0d:32:86:ca:1e:58:eb:ad:ad:56:9b:
20:a3:fa:cc:06:ad:c2:6f:9c:50:a3:4f:42:f0:9f:38:65:9a:
06:31:a1:b9:1d:86:d5:a3:74:b9:38:a7:22:57:4c:50:44:bd:
5b:f7:2c:fa:41:c3:3e:ca:66:2b:f7:ba:05:c9:e6:84:34:be:
4d:24:5f:4a:41:28:b1:ad:0d:0a:d4:31:66:db:e5:26:e8:25:
a8:ba:ad:dc:72:a4:7b:95:da:fb:6b:0a:eb:77:1c:3e:3f:c8:
aa:5e:60:01:7e:58:43:c9:7a:9b:1a:ba:f3:1e:bf:9d:3d:34:
7f:c1:11:0c:f7:77:b5:6f:18:ab:f6:42:0d:cc:92:d0:79:6e:
1c:a3:d9:71:de:3c:c3:15:11:5a:66:35:f7:c5:df:3e:bf:03:
f0:61:73:a0:01:a3:ad:44:cb:18:71:72:b5:07:72:c8:2b:75:
09:2d:b8:e3:c5:f1:42:7c:ac:0f:53:78:c4:8e:01:8c:b3:c3:
30:dc:3b:17:66:2e:d0:fa:78:df:00:51:a1:0f:65:d0:f5:52:
25:0a:05:fb:47:d6:ef:a7:87:a0:e3:b9:67:81:68:77:02:0b:
ed:3c:80:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:29 2025 by rpki-client