Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: y/uLBk3j3XqgK+kFR+3Q7VB5coKneFSGUmgBoU4jfxE=
Subject key identifier: E7:B7:CA:EF:5F:98:DA:C9:47:67:C9:2A:95:10:CC:90:F4:0C:DF:33
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 0199301128DA892B6FED4D42B5F193E28193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0D86
Signing time: Tue 09 Sep 2025 20:00:54 +0000
Manifest this update: Tue 09 Sep 2025 20:00:54 +0000
Manifest next update: Wed 10 Sep 2025 20:00:54 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: GMDxcG4B7rc0/aFHVRybiGOD23y68jPu0jwgYvVBSXw=)
2: B8bTTGpK1L-pMyO-WGFk_7H-LC8.roa (hash: r0JNxuBgg4on067YK5COQPlyCkk+tp458uDvr2IE4z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:11:28:da:89:2b:6f:ed:4d:42:b5:f1:93:e2:81:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Sep 9 20:00:54 2025 GMT
Not After : Sep 10 20:00:54 2025 GMT
Subject: CN=e7b7caef5f98dac94767c92a9510cc90f40cdf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6f:95:4b:94:68:99:28:5e:d0:dd:98:0d:96:
76:e5:1c:79:24:eb:45:a9:ad:cd:ea:8a:6e:50:c2:
e6:4b:59:11:14:2e:5e:d0:96:36:2e:b4:09:52:ba:
73:81:f4:a1:fe:75:11:81:e5:a2:04:4b:5f:e8:c9:
f9:5f:ea:76:39:e4:1e:78:81:53:f2:04:3c:33:47:
53:4b:3c:7c:4d:ec:f4:dd:57:57:cf:35:d9:ba:fe:
27:ad:96:f9:8d:99:e6:64:d5:bf:e4:8d:07:ed:d4:
fe:32:f1:3d:07:50:1c:ce:56:5d:f9:18:7f:9d:32:
5d:de:6d:c3:d2:e5:6d:d4:3f:21:13:53:e7:18:af:
2c:ff:d3:6c:55:a4:2d:a7:f5:e8:56:79:a3:c4:48:
f4:bd:c9:c1:93:60:80:44:ad:aa:02:c8:5d:b0:3e:
1b:af:7f:2a:d8:8c:29:28:f2:81:95:c8:6c:d9:ea:
ab:79:1b:6c:f3:17:7d:3e:4b:b8:c8:ca:99:80:72:
db:fc:67:05:33:f9:72:5a:72:60:8a:78:37:3a:54:
3a:c6:08:24:60:ae:39:07:08:b2:22:46:d4:ff:05:
a0:f7:e6:b0:09:18:f7:4b:e6:42:cb:f0:f8:2f:e1:
08:be:69:48:f3:cb:e4:4f:f4:1e:c8:fc:5c:45:ce:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B7:CA:EF:5F:98:DA:C9:47:67:C9:2A:95:10:CC:90:F4:0C:DF:33
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:24:29:a6:41:1a:e1:0e:f8:f9:f2:fd:1f:e9:35:4c:20:f1:
80:0f:9b:20:70:47:6d:92:86:27:e7:18:4e:55:0a:18:ce:ab:
55:16:68:1b:c2:b9:c8:3d:f0:a3:7d:8b:79:9a:06:3e:75:88:
b1:4e:df:65:65:34:37:04:2c:45:93:bf:ce:c6:6c:1f:06:36:
a3:d0:86:3a:65:ea:fa:e6:bf:88:21:92:ea:21:43:5f:b3:c3:
d6:bb:80:67:0c:c5:57:c1:22:0f:e3:d5:5f:89:88:b8:b4:6c:
e5:e1:3a:11:d8:94:eb:ce:38:5d:dd:c5:2c:86:7e:d2:63:cd:
e6:6c:a9:ad:0e:32:95:01:2f:d2:d0:1f:03:ba:41:c9:8c:1c:
2b:51:37:94:01:cc:6f:49:17:3c:67:08:f1:7c:f8:04:b3:20:
42:7a:4b:fd:00:df:e7:22:7d:1a:16:df:a3:f8:84:0a:6b:c0:
a7:e2:8b:f0:4f:5c:26:93:0b:2d:e8:3b:dd:f4:5e:de:a4:80:
cd:3b:13:b1:4c:2a:ad:5d:c6:b4:f1:f1:8a:59:ad:9a:72:bd:
84:60:81:66:be:f8:b0:52:65:d3:11:5a:5a:9c:45:9b:41:39:
a5:28:c6:c3:d6:1a:79:d8:2e:f4:0d:c8:eb:3a:ad:57:ac:6e:
62:ae:77:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:39:50 2025 by rpki-client