Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: lUSud7XZdmMyFIAzTHypyHErriuwrXEFf/nxl7cf1Gs=
Subject key identifier: 4E:0E:44:0A:24:EA:2F:3C:D7:4B:E1:72:01:F3:46:D4:C7:79:D6:52
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 0198D4E0B6053DE6D237E244BFCDD6F5ED97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 09B2
Signing time: Sat 23 Aug 2025 03:02:33 +0000
Manifest this update: Sat 23 Aug 2025 03:02:33 +0000
Manifest next update: Sun 24 Aug 2025 03:02:33 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: 3ua1uMEoZm8GZSo3pmD0ee5uv7O7wxv7b4k2XbUgUDQ=)
2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b6:05:3d:e6:d2:37:e2:44:bf:cd:d6:f5:ed:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Aug 23 03:02:33 2025 GMT
Not After : Aug 24 03:02:33 2025 GMT
Subject: CN=4e0e440a24ea2f3cd74be17201f346d4c779d652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:a5:d6:0a:a9:3b:4e:ef:53:54:f5:d6:de:
8a:39:c3:2c:80:c5:60:6b:0a:fa:58:66:25:60:99:
66:f3:e2:2d:26:2a:f0:66:bc:99:f6:16:07:71:fc:
cb:06:25:a4:27:61:79:a5:90:dd:5f:bd:f4:5f:ca:
7b:8f:a5:8d:e0:f2:dd:5b:9c:ca:4a:99:e9:94:ed:
a8:8d:32:3f:7f:07:7f:a1:09:78:dc:14:f8:55:22:
7f:77:69:88:70:eb:6b:96:34:cb:bb:22:38:cb:2b:
d7:cd:6a:3c:d7:c2:36:30:f1:cc:3b:3d:54:c3:39:
3d:9f:8e:26:b3:fb:3b:52:0f:3d:41:21:81:79:ea:
56:3c:95:97:89:6e:e6:a1:6b:fc:1a:4c:a5:de:b9:
2a:05:84:30:39:5a:59:40:28:02:47:aa:20:6b:a3:
ae:a9:96:cc:23:ce:d2:43:c6:20:78:51:1b:b8:bd:
80:97:bf:35:fe:f9:98:dd:08:52:0c:31:bf:0d:e2:
1f:40:8c:5d:80:2b:93:51:91:86:c3:ac:d5:01:71:
ff:d5:47:fa:2d:21:e2:c6:8e:4c:8a:06:ec:1d:08:
32:34:59:5e:4b:cc:10:14:06:fb:93:e0:6a:5c:18:
68:7e:b8:65:32:ed:84:3a:8a:81:f0:f3:af:e3:53:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0E:44:0A:24:EA:2F:3C:D7:4B:E1:72:01:F3:46:D4:C7:79:D6:52
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:26:d5:7f:c1:8f:82:2b:87:ff:8a:53:52:0c:99:17:aa:0a:
21:40:5d:fd:e2:8a:fa:39:fa:66:0f:24:39:3d:35:86:b7:f0:
10:0a:e2:7e:15:ff:ae:5f:98:b6:bd:38:57:a5:7f:ca:ba:15:
a5:4a:47:47:47:4d:3c:32:ea:98:4f:ab:87:7a:3f:68:1d:de:
0a:f9:41:a4:34:91:8c:6d:0b:f4:50:14:68:83:76:45:90:dc:
74:8f:33:a0:3e:e0:74:06:c5:5c:d5:ee:ae:39:c4:d8:e2:b8:
74:16:eb:29:74:de:63:39:47:a5:27:b1:9a:17:90:e5:08:71:
17:36:d5:12:d2:98:34:33:e3:cb:3d:14:1f:1e:aa:9e:16:e2:
2d:57:a9:ca:41:6f:4f:fa:54:2b:5d:c8:19:b7:f6:23:0d:b3:
fe:e3:eb:58:b8:2d:46:02:ef:e2:db:50:95:c7:1d:65:3d:63:
2c:77:43:49:85:8f:23:b3:fa:dc:4e:73:e1:6a:c2:cb:e7:5d:
48:92:a6:8e:c8:14:5a:f0:77:2e:ae:51:c5:b5:44:11:c1:64:
f6:d1:ba:93:9f:b2:6d:bd:d3:8f:f8:e6:1c:da:3e:55:f5:75:
cc:98:4f:ab:5d:7a:4e:57:59:d8:69:7c:2d:e0:05:55:5f:0f:
ac:8d:2d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:58 2025 by rpki-client