Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
File: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json)
Hash identifier: k7Kdtrdw9k5L/5iR29nxH8ckkIeov7k3cDdNcUlaGaE=
Subject key identifier: FA:97:0B:B8:DB:28:E3:6E:08:EE:0F:74:BB:B0:3D:2F:A0:D0:ED:9E
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Certificate issuer: /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial: 019922C3953ABD8D169013B5A91A9EB74B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
Manifest number: 135F
Signing time: Sun 07 Sep 2025 06:01:07 +0000
Manifest this update: Sun 07 Sep 2025 06:01:07 +0000
Manifest next update: Mon 08 Sep 2025 06:01:07 +0000
Files and hashes: 1: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: l3BCMYAM/fpTL1oE196jyjxiI3BP/y/ZaOP389thQYI=)
2: FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa (hash: ld2MBpkdINa/HpitEI9hE8KrLNtvxY4fg+rJ1pVUK1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:95:3a:bd:8d:16:90:13:b5:a9:1a:9e:b7:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Validity
Not Before: Sep 7 06:01:07 2025 GMT
Not After : Sep 8 06:01:07 2025 GMT
Subject: CN=fa970bb8db28e36e08ee0f74bbb03d2fa0d0ed9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:d4:78:1b:95:5a:33:dc:79:6b:9f:35:0d:
b1:00:86:77:3d:dd:a0:3f:b3:6d:8b:43:f4:fe:ee:
4c:d9:bc:60:c7:53:40:28:ba:14:b3:fd:61:a2:51:
d9:7f:11:ad:56:28:7f:43:ef:fc:75:2e:26:df:36:
f1:18:5b:f9:1d:22:ce:50:ec:36:f2:4a:47:e5:bf:
8c:50:25:ea:09:b8:3b:f7:a7:b5:31:db:ec:6d:b2:
6e:38:8b:4c:3a:b6:df:fc:9a:c6:31:38:e3:53:95:
18:87:c3:10:b7:ff:6a:69:4e:c1:51:2f:ab:60:5b:
83:d3:23:35:09:f1:85:42:f7:7a:f6:9c:af:30:78:
d0:2b:4a:d9:a4:c8:2a:e7:c2:55:51:41:6a:af:61:
62:db:0f:aa:ec:fa:b9:ba:08:29:a2:5f:31:1c:3a:
1a:a0:42:d0:89:a9:f4:f5:74:24:34:b6:fa:e3:2d:
3d:d4:03:01:55:22:c1:60:a3:3c:b4:e3:cc:18:2f:
d6:d6:9e:f1:2d:60:37:10:3a:2e:2a:96:ad:37:bf:
84:c0:c2:20:f0:3b:93:67:8a:cd:0b:fb:f0:ff:72:
82:fb:5c:59:3d:1f:9b:14:7d:23:ed:23:c1:81:94:
17:58:c1:a7:e8:ae:86:14:ef:55:e5:b9:51:24:c4:
40:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:97:0B:B8:DB:28:E3:6E:08:EE:0F:74:BB:B0:3D:2F:A0:D0:ED:9E
X509v3 Authority Key Identifier:
keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:53:36:06:d7:c6:f4:2f:7d:b1:1e:9c:04:6c:6d:a5:ae:35:
92:41:c7:6e:52:06:f9:20:4d:61:8a:fc:1d:28:d3:02:4d:57:
2a:a2:b7:19:61:b6:18:c6:b1:18:4e:c1:1c:1e:f9:46:d5:bd:
5c:fc:ac:1a:31:9a:9e:09:74:bc:26:9c:d1:25:86:d3:39:e8:
69:f5:fa:d2:08:df:02:e4:1e:92:f4:05:b2:be:3b:58:5a:97:
88:57:fb:b4:51:10:1a:d5:dc:31:5d:c6:1a:ab:4c:92:69:43:
df:bd:17:b0:12:2e:64:ad:ee:e4:a9:80:60:20:87:0f:c7:d1:
1e:b2:7a:c8:5c:f0:bb:26:43:54:11:bd:46:4a:04:a6:cd:d8:
c6:c9:49:9a:04:02:1f:5f:c1:e0:59:9c:e9:80:bc:1a:65:98:
b5:1d:9c:bb:fd:4f:19:3c:56:2d:92:40:19:bd:d5:ec:b7:46:
ec:72:60:77:22:a0:42:fe:83:38:32:86:30:b6:8b:38:b7:6b:
a9:9d:96:a5:1c:95:f3:ae:66:a3:6a:f3:c4:85:22:13:6c:db:
8d:0c:ad:75:f2:eb:6f:bd:fa:05:76:3d:54:7f:e5:7d:f1:6d:
93:c5:c2:ce:3b:bf:3d:36:2a:a1:b4:ff:f0:c8:e9:4c:60:b7:
ab:0f:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:38 2025 by rpki-client