Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
File: z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json)
Hash identifier: 4XExMbrNQ7X2fiFUav74tGT0YWLqtmBOM7qEdbwlUn0=
Subject key identifier: F9:A0:20:41:A1:CC:51:90:72:37:4A:E7:F0:E0:36:C3:AB:00:A4:89
Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Certificate serial: 0199233136CF0A32B0217DF6E4C07CFC4FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:00:51 +0000
Manifest this update: Sun 07 Sep 2025 08:00:51 +0000
Manifest next update: Mon 08 Sep 2025 08:00:51 +0000
Files and hashes: 1: LzSQuYv1x63WY7QfqJCJtkZHVLg.roa (hash: wpzsWwm4YF25nKdgTs214tQfh9B7Ss09QnFGWVON9kQ=)
2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: pWW/530KbaOvaSxj/HVW4KhqxlZM981cvcli5ORuLi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:36:cf:0a:32:b0:21:7d:f6:e4:c0:7c:fc:4f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Validity
Not Before: Sep 7 08:00:51 2025 GMT
Not After : Sep 8 08:00:51 2025 GMT
Subject: CN=f9a02041a1cc519072374ae7f0e036c3ab00a489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:f0:6f:7b:a3:7c:78:e8:db:90:fc:07:5d:
fe:cc:24:92:6b:d7:e4:1c:76:c0:be:31:2f:de:3a:
55:a3:41:5a:6e:0c:1c:66:81:c2:30:fc:b5:7b:fc:
dd:a7:07:5e:c8:dc:3d:b1:59:fe:c8:db:54:70:9a:
16:3a:38:40:4b:92:9f:67:71:be:71:a8:ec:53:d9:
d6:b0:32:86:d6:3c:a0:f5:6f:1a:56:8b:51:7c:ca:
22:6c:63:08:51:41:3b:72:85:c8:e5:37:76:11:5d:
db:62:49:e6:54:5a:f7:68:e2:41:09:93:74:d7:6c:
70:a2:f8:4d:88:97:e0:2a:91:a1:66:f9:78:21:c5:
45:f8:82:87:37:c3:35:52:90:35:63:ca:c6:78:80:
65:bf:9a:75:ed:00:f0:0c:bd:1a:9e:f2:d1:ae:72:
ac:84:03:0b:4d:f5:be:cb:3d:38:20:ec:33:58:d8:
a1:11:c4:39:73:83:34:12:65:f0:4a:4a:73:3a:1e:
e9:0f:36:a7:7b:a2:48:2d:c1:88:60:eb:10:97:a5:
30:bf:7f:14:72:14:3c:4f:f7:f1:57:a2:ad:ef:59:
e9:fc:43:e2:3f:6c:51:be:04:2c:13:7d:31:6c:f4:
44:04:60:e6:28:7d:54:a4:fc:64:73:42:c0:4d:8a:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A0:20:41:A1:CC:51:90:72:37:4A:E7:F0:E0:36:C3:AB:00:A4:89
X509v3 Authority Key Identifier:
keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6b:37:5f:ba:02:8b:91:e6:e3:bc:a0:b8:f4:ca:2c:d8:da:
24:a0:6c:49:a8:98:bd:ce:37:be:57:f9:61:a3:fe:9f:b7:9f:
82:13:75:58:8d:7d:19:f5:35:91:77:e7:21:c1:d0:51:6b:f7:
9e:61:8b:07:0c:cd:91:09:c2:85:5e:18:2f:b3:8c:56:d9:0b:
9c:09:30:49:e7:49:1f:3a:d1:fe:9a:12:1f:dd:1c:74:04:80:
b7:3f:b6:f3:40:fa:b6:c1:0f:51:72:0c:9b:5c:89:be:67:96:
fe:c5:57:71:61:9a:28:b3:0e:b4:16:d7:05:5e:6d:d7:51:cf:
6e:30:ca:c4:93:99:cb:04:27:6c:b3:18:4e:6e:e6:65:39:ff:
d3:69:e6:cd:4d:52:70:28:4f:40:62:27:4a:1a:93:5d:4b:4d:
7f:f6:23:af:cf:78:77:3f:5a:5a:7e:bf:4d:9c:69:ab:b9:6f:
a6:e6:7d:1c:e4:9b:f7:bf:a4:08:a6:00:6f:d9:fb:22:71:62:
79:8b:19:61:64:b8:66:e9:65:0f:d9:a3:33:6d:ad:b0:74:51:
f4:85:34:6a:98:21:ca:27:69:86:96:91:b8:7c:d5:a0:a0:44:
13:6a:8f:b4:ab:8a:cc:09:e1:ca:4c:2b:69:cc:69:06:50:76:
e2:af:99:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:45 2025 by rpki-client