Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File: S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier: SY1q3suFS+KbVOhuPSrd0pzQZNJ7C1DU7DdimElZwKk=
Subject key identifier: 41:D1:A7:7D:5E:89:3C:1D:B0:14:4A:07:61:09:5D:62:53:31:E6:9C
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer: /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial: 0198D472DB68F332A5EF87DA70CB16691766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number: 0BF6
Signing time: Sat 23 Aug 2025 01:02:33 +0000
Manifest this update: Sat 23 Aug 2025 01:02:33 +0000
Manifest next update: Sun 24 Aug 2025 01:02:33 +0000
Files and hashes: 1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: upo94Ha1m4jWbnwdsnLU/CtuQ3dwkbN9FVjqPNJj940=)
2: oa49XCli4BnhzjMFZt__xzBFHcY.roa (hash: tJwIQtT+Kk475hshkks2qpfV9lu0TNlB3mE3lLaKnow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:db:68:f3:32:a5:ef:87:da:70:cb:16:69:17:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Validity
Not Before: Aug 23 01:02:33 2025 GMT
Not After : Aug 24 01:02:33 2025 GMT
Subject: CN=41d1a77d5e893c1db0144a0761095d625331e69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:ca:48:2b:3f:7c:c4:87:db:08:65:5b:f4:
77:46:e3:86:67:14:34:6a:af:43:f8:1e:b4:ef:84:
5d:57:0b:8e:23:0b:e3:5e:49:bb:ab:2d:ae:fa:6e:
d0:85:57:4b:e2:b9:8b:bc:25:49:38:a1:4f:b4:e4:
6d:4f:63:ae:5b:de:ee:59:5d:75:e1:66:df:c2:f4:
2f:a4:c9:74:6b:ef:6a:f8:0d:3c:85:19:d5:99:71:
fe:23:8e:ca:70:f3:8b:37:43:51:1a:8d:2b:4b:4c:
7b:b2:a0:76:af:78:b4:41:78:9b:52:8e:d5:c6:71:
e2:67:73:33:b2:2a:b7:36:32:c8:1c:91:65:a9:d6:
b0:4a:10:be:e7:f9:ea:37:9d:fa:52:d2:d7:63:b6:
35:3e:42:7f:f9:13:8f:6b:11:ef:dc:24:cd:1f:75:
75:33:0b:b8:7a:dc:98:93:75:cc:3b:57:67:79:cf:
e5:c1:73:8d:2d:0f:2c:d7:66:74:5a:67:29:2a:ae:
8c:9b:51:00:5b:94:ab:1b:8c:8f:62:db:55:7c:c5:
20:e8:2b:de:39:88:0e:17:06:4b:31:9a:51:d5:b1:
12:dc:a8:f6:31:e4:e7:0a:b6:da:a1:fc:4c:b8:a7:
62:44:49:ce:0d:60:0b:22:60:62:0e:d7:17:ef:fc:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D1:A7:7D:5E:89:3C:1D:B0:14:4A:07:61:09:5D:62:53:31:E6:9C
X509v3 Authority Key Identifier:
keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a6:ba:e2:f3:61:d6:85:a9:50:af:fd:88:91:28:ec:89:6b:
f6:6e:75:3f:aa:bd:ca:ad:f4:c3:f9:38:6e:a5:e6:fd:39:8e:
66:7b:47:1c:14:64:39:f1:f9:cd:ac:a3:56:ea:91:cc:42:5d:
60:cb:f5:bd:88:97:ee:7d:c5:27:d1:6f:39:77:7b:52:9f:a1:
d3:0c:56:0c:fb:99:22:b8:aa:c0:34:3b:7d:db:fa:01:39:49:
36:3a:04:b3:ab:2d:e1:4d:2c:0a:23:d3:35:84:b4:1f:ad:7a:
02:00:30:80:1d:21:68:60:49:fe:76:6a:ee:97:ce:d9:16:60:
e0:4b:c6:05:69:bc:54:f9:36:3a:e6:91:d8:b1:06:75:7c:3d:
d5:c8:74:d4:0c:52:22:72:8f:95:bc:af:71:6a:0a:80:11:ec:
37:f3:04:0b:f8:75:ff:de:65:cf:92:7a:f8:ca:e8:1b:90:a6:
eb:64:aa:59:4b:1c:03:ac:b9:f0:9d:31:ac:f7:97:21:c4:1a:
87:a0:c0:f1:e9:8a:c1:aa:2b:67:c4:e5:5b:f1:fb:d4:35:33:
b3:b6:20:ea:12:05:b7:a5:1b:a1:74:1a:1f:ae:85:11:76:80:
dd:d7:2f:a0:bf:45:14:b8:ac:6b:48:25:69:55:04:9b:13:55:
62:c1:b9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:54 2025 by rpki-client