Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File: f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier: fKkr63dpTxeGAw65buBG9opeu8/HpNPWwqI6NQtXJW8=
Subject key identifier: D4:33:20:11:A3:69:B7:78:F6:4B:27:82:8E:71:1D:D6:09:73:4D:FB
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer: /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial: 0198D58357891022CA299D96246E363E49B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number: 11D1
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: CrYUOPAFPEtuHkKyJhzQE8UrUoM.roa (hash: 9NqhKYyaxDuqPrOUEVd5P1RqZQxAPP5YeCq0DGdnu/4=)
2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: lp4VyMbDC3X0rSK27Sm1OK5xaR1p0hbnLbAeuKOHTlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:57:89:10:22:ca:29:9d:96:24:6e:36:3e:49:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=d4332011a369b778f64b27828e711dd609734dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:92:d2:72:01:1f:59:d1:4e:d1:23:df:fd:
ff:d2:3d:7a:9f:c7:62:c9:70:27:0d:3d:af:ea:23:
ee:c6:31:97:3d:15:4b:59:72:e8:bf:be:97:68:da:
0c:2e:22:c2:bf:7c:fc:e5:22:4d:a0:a5:49:23:f7:
c6:96:18:3c:47:73:e6:e2:db:30:94:da:1d:08:69:
b1:2b:92:2f:68:d5:e1:d2:81:ab:90:fb:9e:4f:f5:
dd:a4:4c:56:08:30:9c:55:1a:26:8c:55:d0:2d:9f:
61:64:c2:67:6f:01:f0:98:a1:d9:1a:03:d0:da:23:
5e:f1:aa:75:99:9c:cc:08:be:62:c1:99:2f:4c:fc:
3f:ce:74:38:47:bd:b6:58:26:56:49:7a:0d:e1:81:
3d:da:68:1e:91:5f:8f:56:4f:ca:41:fd:01:7f:97:
40:58:2a:97:64:85:3c:62:22:63:af:ff:c9:e5:52:
15:73:79:25:7f:6d:a7:b0:4f:0c:56:5d:e3:6e:d7:
d9:2f:c5:da:94:a3:09:a8:e4:e4:24:47:01:05:1c:
3c:79:3d:e3:f6:68:d9:c1:55:4f:e1:6c:f9:88:91:
42:d1:b3:bb:03:a7:90:8a:e5:e6:0f:6d:5c:fc:16:
7a:5f:ee:a2:3a:1c:37:63:0b:a8:a5:ed:3d:08:0d:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:33:20:11:A3:69:B7:78:F6:4B:27:82:8E:71:1D:D6:09:73:4D:FB
X509v3 Authority Key Identifier:
keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5a:c1:3c:b3:1d:77:76:fc:ed:83:80:52:27:47:6e:29:1d:
b5:94:6f:7e:18:0b:f2:8c:a7:79:10:59:b1:1c:bd:8c:22:a1:
ca:88:d9:3d:eb:af:9b:0a:2f:1f:00:a2:fe:ee:b5:b7:d4:7f:
44:be:de:05:07:85:8b:8d:3b:5e:01:90:e7:8b:8a:3c:81:18:
29:b1:62:dc:64:cd:ef:61:44:9a:3d:f0:1c:f3:47:e8:01:28:
3e:2f:44:9f:30:5d:3d:7a:e0:3d:c2:c0:d5:a2:63:2c:a9:d6:
ba:01:05:78:65:7c:8e:fa:04:fd:61:cc:4f:48:01:1c:1f:94:
cb:c3:9f:36:d7:f5:cc:aa:c1:ba:c4:13:56:d4:24:a1:71:ba:
d8:1d:a2:e2:36:05:3e:1c:6c:ec:e4:47:55:ba:44:ac:5e:88:
66:1a:fa:4f:69:4d:8a:22:d0:58:33:4a:08:1c:ab:b7:ca:9b:
77:c6:b6:ab:76:59:a8:d1:ad:40:c7:f5:66:9c:3f:ae:84:ec:
7d:e4:40:fa:63:4a:f4:04:93:df:f6:bd:b1:a4:66:70:d0:e5:
4d:cc:b1:47:20:12:ca:e2:86:40:42:d1:0d:60:ea:66:1c:e1:
98:bc:42:b0:24:a6:ee:64:25:ea:b8:9c:99:19:cd:52:74:75:
f5:06:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:08 2025 by rpki-client