Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier: h/JAXZaAxEMwiMEtOCvZ7AYRu6DEPxWm08ZS5y7Nebo=
Subject key identifier: B1:E3:2D:DA:62:1A:7A:07:1F:82:70:32:8C:FD:9A:66:88:D6:28:94
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial: 019923D5C9FEFCB57A6A1A05611FA4D2EE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number: 085E
Signing time: Sun 07 Sep 2025 11:00:37 +0000
Manifest this update: Sun 07 Sep 2025 11:00:37 +0000
Manifest next update: Mon 08 Sep 2025 11:00:37 +0000
Files and hashes: 1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: 9oXHphLZYruq2DYZab1vojIMua8YFYgbcRMlTZDKGTs=)
2: MP9C5tlE4sTN1JTDz4jlrkAW_YU.roa (hash: 2Qb7MzrDpByF3hW1GYmCH1FHWyuhYVmQ2YbJ0M55AAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:c9:fe:fc:b5:7a:6a:1a:05:61:1f:a4:d2:ee:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Validity
Not Before: Sep 7 11:00:37 2025 GMT
Not After : Sep 8 11:00:37 2025 GMT
Subject: CN=b1e32dda621a7a071f8270328cfd9a6688d62894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:73:63:42:30:5b:e7:b6:c3:3e:62:08:f6:4e:
0f:c2:1e:92:be:74:28:3a:73:55:87:01:60:64:83:
08:67:2c:9a:55:30:bc:18:b5:c4:f4:a7:74:5a:0a:
fd:09:dd:5e:54:e0:9e:50:3e:71:33:39:e9:89:95:
1b:90:dd:49:2a:f9:b8:12:39:96:4f:85:19:98:55:
20:02:68:f7:a8:07:ec:c5:86:d6:12:74:79:0f:a0:
27:d2:3a:4b:0c:bd:ef:48:e8:51:b7:74:cb:f1:e6:
57:8c:7b:a5:4e:05:c9:4f:49:22:e7:21:33:0e:87:
98:52:26:81:78:b1:41:8a:c9:84:48:2b:68:a5:99:
af:50:95:58:bd:ea:42:90:72:aa:03:68:4b:1c:bc:
ae:5c:fe:80:1e:d0:b6:25:0e:f2:28:53:90:16:cf:
d2:cb:ac:52:43:30:6d:5f:f5:c2:c0:bf:b6:99:1e:
bf:93:a5:04:4c:57:03:56:89:0b:be:0f:1f:bd:ec:
47:19:29:08:a6:8c:c0:98:51:fa:b3:75:75:51:46:
65:ff:70:74:84:ee:8a:b8:ea:ac:58:13:bb:1c:cd:
98:8e:b5:c9:9e:c6:a0:36:ee:ea:e6:c9:36:de:e5:
c9:d1:43:58:1f:bf:53:03:7b:11:da:59:7f:e7:31:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E3:2D:DA:62:1A:7A:07:1F:82:70:32:8C:FD:9A:66:88:D6:28:94
X509v3 Authority Key Identifier:
keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4a:56:66:95:5f:5e:0c:7f:b5:e3:f0:87:e2:17:fe:e9:0f:
2f:ca:66:51:b2:05:c7:74:4b:cb:78:90:ad:79:63:d1:81:17:
73:cb:7c:44:5b:3d:12:bf:df:6e:09:f6:aa:8e:55:a8:b5:b5:
7a:4e:ad:d7:9b:d1:85:fa:32:76:c1:35:58:be:71:56:59:47:
ae:93:f2:bd:9a:65:e5:2c:b9:2e:ea:64:e3:0f:ea:f3:3b:96:
b6:a2:de:84:af:f5:8b:ca:1b:ab:35:48:1d:88:e5:5a:12:72:
f4:09:f4:d5:6b:27:ca:fe:23:14:e0:25:d1:cc:9f:7e:6f:22:
3a:d7:c6:76:bf:98:72:62:5b:7c:52:71:aa:e6:72:04:fb:0f:
4b:5d:23:d9:6c:3a:70:2b:c8:c0:d8:6a:84:93:16:b4:e8:64:
ef:cd:eb:3b:6e:cc:2b:7f:c5:68:01:09:bb:8e:e5:f5:fb:6b:
ad:5a:2b:0d:e2:fe:f6:a8:7d:b5:14:55:ca:de:53:f7:a0:db:
91:ae:00:d1:ae:51:f1:1a:fa:1c:50:68:b6:dc:34:73:2a:da:
bc:b8:8b:74:b7:60:ed:c7:a8:27:75:79:66:36:8a:68:20:7a:
4c:30:42:40:03:0c:42:0c:b0:d8:a6:af:55:30:07:84:54:93:
2e:21:eb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:54:32 2025 by rpki-client