Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
File: S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json)
Hash identifier: X5RZa0RlSZGQKhhovLEGLvPgD8tptb2WhJ9iwWoDWoo=
Subject key identifier: BC:FB:E0:AF:3A:11:BD:30:12:CE:C4:1A:CF:C3:66:5D:5D:00:D6:C7
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial: 019922559FDB497CC9FD59ACCD42BC8B7CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
Manifest number: 085C
Signing time: Sun 07 Sep 2025 04:01:00 +0000
Manifest this update: Sun 07 Sep 2025 04:01:00 +0000
Manifest next update: Mon 08 Sep 2025 04:01:00 +0000
Files and hashes: 1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: /95AuemT0ty1hWktLC8Fa7nkjoBtFMJBhr1nUYXXCrQ=)
2: takXMVWWq86gQFEdW1EUOBKN5bA.roa (hash: aj1iYELR5J1LrrkI2DJAheQdQ03iRDb31bSm3xq1fzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:9f:db:49:7c:c9:fd:59:ac:cd:42:bc:8b:7c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Validity
Not Before: Sep 7 04:01:00 2025 GMT
Not After : Sep 8 04:01:00 2025 GMT
Subject: CN=bcfbe0af3a11bd3012cec41acfc3665d5d00d6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:de:45:72:b5:b5:af:3c:bf:f1:cd:8d:75:
2c:cb:36:2f:d6:53:6d:28:bb:48:e5:4b:50:c9:74:
1b:27:ae:23:0a:08:38:16:8a:ef:b8:cc:ba:88:17:
75:62:3f:91:1e:94:63:d9:f0:5e:48:55:52:e5:57:
79:83:60:ed:be:70:99:68:d2:60:cb:8b:78:b8:c6:
2c:7f:ad:aa:87:e9:84:ec:c6:9a:10:45:c9:e8:c7:
94:b7:60:9e:50:2f:35:92:2e:91:5e:f8:80:44:19:
5b:3d:a5:f7:36:2f:34:53:f6:a9:a0:eb:f5:e9:91:
49:0a:e2:15:b5:b4:ad:9c:dc:17:8c:e6:f7:28:60:
46:54:fe:48:c2:2c:56:e0:88:ec:91:a3:13:07:7e:
51:3a:77:67:04:72:d2:75:ee:3d:8f:a1:94:21:a9:
b9:e2:47:65:dc:1e:6c:24:4c:1b:8e:61:7c:55:bf:
69:6b:e3:0d:df:d2:26:6c:41:d0:13:03:93:8f:7d:
f9:a7:79:3e:bf:50:23:07:17:eb:0c:a6:e2:9e:f0:
4f:56:d2:e6:63:d6:04:36:18:1e:70:6b:24:6a:2c:
a3:6a:80:d8:fe:fb:3b:c9:0c:e1:c9:d7:c4:dc:c8:
d4:ce:5e:f5:05:12:4b:f6:50:24:10:f4:ee:65:8b:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FB:E0:AF:3A:11:BD:30:12:CE:C4:1A:CF:C3:66:5D:5D:00:D6:C7
X509v3 Authority Key Identifier:
keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:23:a7:b1:f1:29:46:38:b1:f0:10:79:99:ae:c3:9a:9c:45:
b6:05:3c:18:95:ac:fd:52:8b:19:51:78:57:51:01:a1:67:9f:
54:ef:66:7a:60:7b:ff:90:71:fa:b9:2b:49:01:fc:b0:24:32:
3a:d5:ee:c5:a5:3a:6b:9a:20:a6:87:16:18:f7:ac:a1:ca:30:
30:e5:7c:6b:3f:e1:3f:d8:38:05:72:c4:2f:a8:37:0e:f9:96:
fe:0f:c3:43:e0:61:42:d7:a9:65:8a:c2:30:d6:23:bf:9d:34:
71:24:a9:79:16:11:7e:80:e3:ba:99:fc:fc:c2:c1:cc:1c:cd:
c2:f0:c4:f7:9c:63:01:74:24:a7:d9:df:2e:f1:30:72:ca:19:
aa:1f:91:40:42:33:b0:57:cb:93:b3:9a:e8:be:d2:e5:fd:71:
93:b0:29:22:b7:7e:21:3e:aa:22:8f:37:9a:9c:ee:06:a2:f2:
60:33:63:af:c3:34:12:cc:b0:cb:c6:9d:be:13:5f:fb:b8:88:
78:2d:6c:53:c1:c2:c8:ac:99:a7:94:9b:81:6c:46:e0:7a:9a:
db:03:a8:10:68:c3:54:a6:08:c6:a2:65:07:b5:52:d4:2b:8a:
54:b3:8c:90:44:9f:da:d6:a0:36:6d:f6:a7:a5:37:90:66:cb:
5b:ad:ac:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:23 2025 by rpki-client