Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: lMA64jFbqY1Ngp6HnjXjHvr6n4JT4ORwyA0mA97z4JY=
Subject key identifier: 2A:BD:5D:D7:6A:4D:18:FB:6A:C9:70:5A:65:3F:56:98:91:83:21:29
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 019923A0775A7DF09FA5B1AEF99474BD9879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 1389
Signing time: Sun 07 Sep 2025 10:02:22 +0000
Manifest this update: Sun 07 Sep 2025 10:02:22 +0000
Manifest next update: Mon 08 Sep 2025 10:02:22 +0000
Files and hashes: 1: 0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa (hash: rLEoAgpILfeLseNAIpfgmASNTffHIHsRIbvYzKEOLhA=)
2: GoeAUL2QksRS16LiLx9M0SmG6h8.roa (hash: Lp7ZvoPe3FFQc8UoBl571bW941fIgYX0UUaKwSRXqLI=)
3: p9gQbHg8IpMtNLW0NQ42q_UAiDc.roa (hash: t3Lsla/WvydRj60ad7MeBwokpBl+kvF1NmkVZ9213jY=)
4: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: FaeYt4fvNFK6LsE+hmXQDfCbjm9pW0jKqOKJyCkH+1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:77:5a:7d:f0:9f:a5:b1:ae:f9:94:74:bd:98:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Sep 7 10:02:22 2025 GMT
Not After : Sep 8 10:02:22 2025 GMT
Subject: CN=2abd5dd76a4d18fb6ac9705a653f569891832129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:e8:09:0a:63:b2:37:c8:6d:0a:c4:fc:a9:
1f:24:46:60:36:8b:8a:c1:d7:d4:f7:9f:7d:00:e3:
03:e2:c1:0d:38:ae:43:fb:8b:17:e7:a7:1d:9c:c0:
52:ec:27:c7:07:ff:9c:b7:32:be:f3:e8:c2:50:68:
18:fe:6c:a7:3d:7d:8e:59:74:f0:ad:10:75:c3:d9:
54:d4:90:44:00:b3:78:3e:e0:de:c9:d7:0a:6b:42:
63:66:5e:f2:e5:40:db:a4:a4:fb:d1:67:c0:d2:64:
e8:44:49:6c:e9:08:40:d8:17:c1:58:64:c7:73:b0:
ad:b5:9f:56:9b:5c:ec:16:42:70:cd:f6:c9:ed:33:
83:eb:90:c6:8e:75:66:b5:66:9e:33:52:d9:6f:b6:
86:19:6c:ef:54:14:28:bd:8a:ec:1d:96:e7:7a:8c:
d9:75:38:13:ce:01:47:47:a2:06:97:da:f2:8f:12:
60:80:e6:b5:c6:b5:97:2d:39:e5:7f:40:82:57:e5:
0a:34:23:51:5b:ea:36:24:12:a9:62:d4:4d:05:3f:
b6:32:5e:cd:46:cd:84:07:94:ff:31:74:8a:c9:d0:
41:13:38:69:09:b6:3a:3e:01:36:e2:f6:ad:e3:fe:
73:98:14:f1:67:d5:89:13:39:17:6c:31:2e:bf:3c:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BD:5D:D7:6A:4D:18:FB:6A:C9:70:5A:65:3F:56:98:91:83:21:29
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:33:63:14:2f:c8:4b:98:a7:47:8e:8d:61:2f:98:f8:42:20:
88:c6:7c:6b:16:d4:c5:58:61:e8:ee:bf:6e:6d:6d:6b:f0:86:
4e:57:6e:a4:36:b9:c4:1e:e9:9e:9e:f7:3c:9b:78:a1:a8:10:
60:0e:19:fe:88:ab:1c:b0:5f:ea:10:af:98:31:3a:8d:53:05:
22:92:06:67:15:40:01:60:33:dd:58:1f:cb:9f:56:ed:94:ee:
63:6f:de:f1:d6:b2:c4:dd:59:9f:f1:d0:5f:50:7c:6f:e3:76:
b5:ba:6b:b5:fd:b3:f4:ca:43:b8:84:f7:f2:8a:f1:2c:e2:41:
53:f4:76:50:48:b5:06:ab:fa:81:e6:8a:91:8a:d9:d9:a1:8c:
26:95:3c:99:11:db:f6:29:00:3f:5d:56:d1:7e:cd:a3:d3:cd:
03:4a:c3:23:7d:ad:cb:95:d6:03:92:ce:9d:bd:91:55:08:56:
c6:7b:d7:f7:f6:97:32:b2:13:f6:85:12:15:93:09:0c:b3:1e:
3e:2c:0a:97:38:3b:78:9d:3c:21:01:91:ec:98:ee:71:ca:8c:
e6:57:99:36:19:bf:6b:7a:5d:7a:b9:3f:b8:2a:53:ad:07:a9:
7e:6c:e8:92:3e:4c:cb:09:e1:07:58:c4:4b:27:da:f4:8a:29:
72:f5:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:35 2025 by rpki-client