Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
File: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json)
Hash identifier: qD0JdDunUbL7svVIEOQmDzyn8mKAY5H6QnyeWtlL/vs=
Subject key identifier: 74:C5:AA:E7:89:19:0B:81:18:DE:56:E9:35:D8:6D:12:8C:E4:2C:8C
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial: 01994C64EDCBF86FBD96B3AC925C27F09D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
Manifest number: 0D18
Signing time: Mon 15 Sep 2025 08:01:46 +0000
Manifest this update: Mon 15 Sep 2025 08:01:46 +0000
Manifest next update: Tue 16 Sep 2025 08:01:46 +0000
Files and hashes: 1: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: pIXoDUilhxLCeFJkR63qlMRDTaKknVACw5dxmk9lpSI=)
2: g4B1jDEDEnpyKjOUdwNXtiRBKVo.roa (hash: 7UWQudX+rqrs+vIGMtBiZa4lyOkbMuzxNBR2/83QsfI=)
3: mFCab-YMnaPwjq0SGjjSKVSwCvs.roa (hash: NwTUf2FCA+SWI7PlbFVRLa9grCf7O5GxOtog8KpH75E=)
4: v7xbsCROsO2MbuE9UwU0B__Qrug.roa (hash: jCAaO9QdtJabTsyOLEVBcqZmMxtQhkEo4Y5qTf+e+S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4c:64:ed:cb:f8:6f:bd:96:b3:ac:92:5c:27:f0:9d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Validity
Not Before: Sep 15 08:01:46 2025 GMT
Not After : Sep 16 08:01:46 2025 GMT
Subject: CN=74c5aae789190b8118de56e935d86d128ce42c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:19:fa:22:1d:38:48:e0:24:75:04:1c:96:
aa:b6:5b:28:73:7d:56:99:f1:e4:04:6f:42:a2:c5:
81:a3:25:9e:3b:2a:47:25:0f:b9:18:7f:1f:09:ec:
6d:67:81:3e:73:24:fd:ef:4a:04:02:a1:0e:bc:2b:
4e:43:71:c5:9a:92:42:6e:91:f1:83:d2:73:55:07:
39:06:45:00:33:67:eb:a6:d5:74:99:88:0c:fc:33:
a8:b2:fd:b2:77:89:c5:72:c9:04:d8:94:4f:e0:18:
79:85:ab:a1:e2:93:a5:2b:15:ea:6b:a9:fd:3b:7a:
b4:5b:1a:92:94:06:c4:55:eb:3e:f7:f4:c9:ee:6e:
5c:ce:fd:48:14:b3:cb:38:15:6a:62:97:d3:a3:13:
f8:4c:d3:da:a3:68:50:de:8f:73:a7:15:24:89:76:
71:ec:97:e2:c2:1d:d6:4f:dc:3e:f2:23:94:04:8d:
a3:be:62:35:13:8e:54:59:8a:04:65:9a:72:14:5b:
03:6a:47:7a:cb:25:3a:b9:3f:3a:60:52:36:4f:26:
9a:05:70:f9:2b:f4:dd:f5:96:dd:83:fe:21:39:35:
c9:cb:56:db:fa:19:dd:de:29:e0:a4:4b:04:d3:d2:
2b:ff:f9:47:6c:5c:ba:14:b8:e2:08:1a:38:a6:f5:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C5:AA:E7:89:19:0B:81:18:DE:56:E9:35:D8:6D:12:8C:E4:2C:8C
X509v3 Authority Key Identifier:
keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3f:3f:14:87:dc:fd:9e:3b:d6:48:60:13:38:0b:63:97:70:
d3:90:58:85:27:cf:b9:e5:5b:ad:31:e8:7a:26:76:c9:f1:86:
b7:4d:25:cb:35:ef:5e:af:55:bc:cd:b3:07:f0:07:b7:00:31:
6b:f3:09:e2:3c:b8:94:f1:e0:7d:fa:24:ed:5a:e9:50:8c:20:
16:20:d4:91:08:12:2e:bc:7f:d6:10:1d:11:78:04:8d:8d:39:
71:3a:9f:b1:7d:1a:d8:8f:04:7e:21:5e:52:96:7d:88:fe:d2:
2d:93:e4:fc:d9:de:c9:48:94:b8:be:06:18:80:f4:5b:00:f5:
d9:ca:e2:09:4a:9e:66:da:bb:aa:07:b2:be:20:e9:0e:a3:e8:
a5:c0:3b:c9:d0:15:8b:56:3c:a8:e6:bd:a0:7b:c3:f5:45:d8:
d0:5f:92:d2:26:3c:34:bc:0b:c4:c3:8f:86:13:2f:85:3f:5c:
fe:e8:05:cb:25:54:bf:95:fc:e2:49:65:2d:ae:17:38:72:81:
d8:fb:23:db:2c:1d:61:a1:9e:5f:c5:e5:95:54:87:98:6d:98:
9b:8c:ad:fd:64:4b:66:09:ed:11:35:e0:1f:92:da:88:5a:96:
8a:85:41:36:a5:97:b2:4e:67:20:4d:bb:2b:71:f3:cf:41:b6:
c6:50:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 12:08:33 2025 by rpki-client