Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
File: 9-VkfNC39yK-1FafN7i_j5JTjPU.mft (raw, json)
Hash identifier: 5VX0DS9XydoYUGnyb2EA5Fskm78cnOoPbP8f1qjjKcY=
Subject key identifier: FA:16:DF:FD:D7:EF:8F:43:7C:8D:3B:95:C6:1C:13:56:8D:D1:F7:4A
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 0198D54E20C1DB9F48450F58666B805B3206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
Manifest number: 126B
Signing time: Sat 23 Aug 2025 05:02:03 +0000
Manifest this update: Sat 23 Aug 2025 05:02:03 +0000
Manifest next update: Sun 24 Aug 2025 05:02:03 +0000
Files and hashes: 1: 9-VkfNC39yK-1FafN7i_j5JTjPU.crl (hash: lYTPqkKuUzFAqSaaKD3C9cEI7Np1bN4Ota3Y9vJwUP0=)
2: DBhdVQnWbQeKdQzgQiCpHErXzhE.roa (hash: ke+PE6qJEQ9z2GmlNhQtn8qkPU8ewvFXiEh0aYxuqOo=)
3: q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa (hash: aaFqVy4+hGHKy39rpTWrEUIWgkLIuK6ZgSAREjkESF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:20:c1:db:9f:48:45:0f:58:66:6b:80:5b:32:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Aug 23 05:02:03 2025 GMT
Not After : Aug 24 05:02:03 2025 GMT
Subject: CN=fa16dffdd7ef8f437c8d3b95c61c13568dd1f74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f8:ee:4a:b7:f6:7a:bc:e2:04:03:97:25:ba:
79:b7:a1:d0:ce:95:96:8d:97:62:49:a1:72:82:18:
a3:fb:91:f1:3c:38:1d:93:59:dc:bc:40:a4:c7:a4:
91:7f:6c:9b:6a:58:f1:20:4a:e8:f2:02:fd:0d:65:
c3:53:53:74:bb:a1:eb:99:b9:f5:ad:31:d6:05:a7:
95:fa:97:a9:b5:73:d4:91:ea:ce:4d:03:1a:1d:a0:
5e:74:cf:40:19:7d:7e:b6:26:f9:13:96:0f:a0:83:
a8:9d:ec:73:55:85:1b:47:81:20:ef:51:4f:8c:87:
8e:d4:af:bf:c1:f7:20:ff:44:08:4f:85:3a:43:46:
7e:78:7f:68:dd:84:da:db:ed:22:d1:52:9a:36:1c:
5d:cb:0c:ec:4c:00:59:17:e4:70:30:13:f6:c0:2e:
d8:0c:f3:f6:a8:fa:05:6a:f2:84:51:f0:3f:f6:ef:
81:37:f9:dc:6a:04:3c:47:94:41:bb:d4:56:ff:ca:
ba:50:81:7c:3d:ee:fb:0b:24:ac:ee:5c:3f:89:17:
a2:00:1d:7c:a1:20:37:84:f7:1f:52:8d:46:55:ec:
2e:33:cc:4e:8b:4d:31:4b:db:5f:77:5e:3f:9e:29:
fe:d4:8a:80:a6:77:fd:34:08:44:fd:ea:b3:f6:bc:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:16:DF:FD:D7:EF:8F:43:7C:8D:3B:95:C6:1C:13:56:8D:D1:F7:4A
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3e:ef:3d:a8:ef:50:c8:55:e8:f9:fb:d3:fb:0e:5e:62:6c:
33:60:6d:6a:69:52:78:ed:83:1f:7b:a8:1a:88:87:26:15:57:
82:5f:7c:c9:54:94:c6:13:c0:25:3e:0f:4d:32:72:24:fe:42:
16:71:c1:79:76:de:ea:da:c7:5e:26:86:bb:b9:50:9a:04:de:
df:0a:55:12:67:03:97:c1:b2:30:3e:58:e0:94:ec:a5:7b:a5:
98:45:b3:98:e1:42:d5:cd:e1:98:3a:2e:50:12:54:55:11:33:
09:f6:f5:31:13:23:6f:a8:c7:37:ee:68:70:e5:71:13:67:a0:
22:e7:b8:1e:da:97:47:a3:45:29:d3:77:f1:ce:82:1f:ae:11:
e0:d8:17:0b:74:9e:96:ae:0c:1d:d0:af:58:27:37:cb:52:9e:
ca:1b:03:dd:8b:01:0d:41:29:38:fd:d3:a3:25:7a:af:fe:57:
5d:bd:50:04:b4:a9:2c:f5:f6:9b:ba:52:af:54:ac:7a:40:09:
24:c0:89:19:f1:12:d5:31:28:c5:ce:8e:46:66:2f:38:13:ab:
1a:46:f5:da:5d:78:6f:a5:4e:63:a8:ea:e3:cc:15:10:ba:22:
51:54:2b:1f:0a:17:34:e4:22:fc:bb:c9:4a:95:94:c2:c3:de:
04:8d:06:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:33 2025 by rpki-client