Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
File: f9GKakmRDMMx3JERSuWbcYXV8w0.mft (raw, json)
Hash identifier: US8L7hpQCeWr4tTU4y0BVNS6+5TBiLjIo4syE65fucQ=
Subject key identifier: 65:AA:31:BF:B4:42:2C:46:66:BA:72:80:2C:4E:F9:74:D9:6C:04:2A
Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
Certificate issuer: /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Certificate serial: 0198D65F9C12842E096462E7A0FBB6286BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:46 +0000
Manifest this update: Sat 23 Aug 2025 10:00:46 +0000
Manifest next update: Sun 24 Aug 2025 10:00:46 +0000
Files and hashes: 1: V0avlIfWr1Ry2dGFNI3vVU-t6qU.roa (hash: 9Z/Tt+Wupiygby78OxWX59dKpP6JLPmGNyGTYRjbjHQ=)
2: f9GKakmRDMMx3JERSuWbcYXV8w0.crl (hash: VM0GQ2HkUmyFOS0XZOB7F3D2b2SuDbHYEErYF4AaQ1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9c:12:84:2e:09:64:62:e7:a0:fb:b6:28:6b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Validity
Not Before: Aug 23 10:00:46 2025 GMT
Not After : Aug 24 10:00:46 2025 GMT
Subject: CN=65aa31bfb4422c4666ba72802c4ef974d96c042a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:68:96:f9:0f:4f:de:19:e5:ac:13:b1:b3:
1d:b5:1f:25:1d:f7:c5:eb:8d:94:e6:dc:cd:be:2c:
94:cb:7e:57:ae:28:12:e3:6c:99:88:9b:08:41:44:
fd:77:15:26:cc:db:65:9c:63:98:3c:30:84:cf:d7:
4f:92:62:66:1f:65:b4:67:cf:36:6d:db:cd:84:b5:
cb:29:8a:06:b1:be:d9:df:a0:99:59:76:43:4e:8f:
8e:e2:67:17:0a:cc:46:53:df:66:8e:a5:81:ba:cc:
30:b1:9f:66:8e:21:ff:c7:54:94:5d:c1:40:bf:57:
e0:20:b3:06:d1:65:d1:c5:2d:7c:ff:a8:86:cb:be:
9c:06:ea:27:8c:c4:0d:23:48:0f:d1:44:0d:45:46:
2d:b0:f3:08:38:e3:a1:12:ce:14:61:68:5d:56:29:
3e:cf:b2:dd:97:f4:7e:68:09:ba:48:18:79:b6:12:
bb:e4:cd:a3:18:c4:75:ca:f5:62:05:38:22:5e:25:
91:bf:12:b7:e9:c3:b3:4c:51:aa:42:4c:24:a9:57:
43:d6:00:fd:34:3e:ac:75:e3:e6:df:2b:40:6a:67:
fb:e1:1a:cf:a5:fa:85:15:3a:4c:a1:63:c0:ff:7b:
20:df:df:56:5e:8d:4b:de:d2:0b:50:02:8a:f1:a7:
16:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:31:BF:B4:42:2C:46:66:BA:72:80:2C:4E:F9:74:D9:6C:04:2A
X509v3 Authority Key Identifier:
keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9b:bc:25:4c:36:0e:a3:ab:28:00:10:3b:30:9c:20:85:29:
21:f9:6e:33:37:27:15:a2:b8:e7:1b:c2:0b:3b:83:13:f9:51:
fd:57:7b:14:8a:97:8e:7d:18:60:f8:d9:bc:13:17:20:57:1f:
8a:e0:71:a2:7e:0a:fe:cb:99:00:c9:99:88:00:1e:a6:d0:b7:
32:44:b9:50:db:8c:ac:ba:e1:0f:d0:04:56:af:e5:4b:54:8b:
7e:6a:52:2b:f7:7c:3d:9e:2f:58:27:0d:a7:6a:05:dd:40:30:
6a:32:5d:68:e1:14:48:83:08:3a:ab:5f:5f:4d:d9:30:26:27:
a2:81:4f:19:ee:6f:24:8d:9e:59:8e:a3:4b:a9:01:70:20:6a:
5e:05:99:27:de:0a:27:1b:1e:30:37:6a:e6:c0:71:4b:48:22:
9a:f9:f9:6d:3b:2d:90:66:ae:9c:8a:38:1d:ae:06:1f:64:8d:
02:37:6f:68:7c:e6:0e:6d:e1:6b:85:1d:28:b7:78:b2:e0:d4:
94:59:cc:0f:16:74:34:87:67:a5:3e:5c:3c:30:98:a7:6d:ef:
a0:0f:5f:c4:bd:5b:99:7d:31:86:19:91:13:93:2a:28:4a:b0:
0b:0e:00:c5:5c:4f:55:3a:79:62:53:b2:54:35:7e:11:6e:cc:
a9:f7:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:38:47 2025 by rpki-client