Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: 8h4UU6Qua8MBOiv3XE0AXkm7nors2bD/8Uxsah/8VsU=
Subject key identifier: 29:9D:B7:0D:FD:A6:9C:EB:10:C0:13:BC:82:E7:F5:0D:A1:0F:5B:42
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 0198D5835D0377444FEAA638CD90126A036A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 1235
Signing time: Sat 23 Aug 2025 06:00:12 +0000
Manifest this update: Sat 23 Aug 2025 06:00:12 +0000
Manifest next update: Sun 24 Aug 2025 06:00:12 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: v6ty9XWTYKSPFYov4H0YJu1YVRTcS4bX8otddea8Y+k=)
2: jFj_wAVFaMa6v6BwAOU_Uc1FIto.roa (hash: OCl5X/o2fl4tL/vj2OOu1PZNEi03ZxIx2lIN6Tnh8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5d:03:77:44:4f:ea:a6:38:cd:90:12:6a:03:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Aug 23 06:00:12 2025 GMT
Not After : Aug 24 06:00:12 2025 GMT
Subject: CN=299db70dfda69ceb10c013bc82e7f50da10f5b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:f7:0f:55:ec:90:08:1c:bf:35:75:e4:d1:
83:a1:3a:7d:67:ea:b5:4d:9d:23:0a:22:36:b4:06:
43:12:7a:b0:2d:e9:58:15:ac:42:d2:87:75:6a:4b:
0f:39:cd:ba:2e:98:83:16:00:83:f1:ba:d9:95:0a:
f1:52:48:d0:3a:50:7a:d8:c6:69:c8:6e:60:a2:43:
66:e3:e4:e2:2d:a0:97:47:14:71:0a:7e:0a:ae:65:
e7:dd:2e:2e:b0:fb:65:36:45:ee:b3:3d:10:ca:08:
3a:24:4a:a3:9c:8e:37:d3:88:fc:9f:5a:2a:71:98:
bd:9f:37:ee:f2:4f:44:7b:8d:61:4a:fc:f4:b6:dd:
cd:7f:10:5b:08:fb:09:8b:05:06:e3:c5:b5:99:57:
62:0b:eb:de:d2:93:98:38:42:2c:87:4b:d0:17:74:
26:50:26:91:88:dc:4a:80:c1:8d:a3:18:43:ae:08:
c2:20:f1:a1:22:33:96:e7:6e:83:16:b3:ee:26:2d:
d6:30:f7:7b:4f:eb:2a:6e:f5:dc:da:7f:de:c2:71:
e2:3e:e9:9d:9c:21:ac:b3:02:69:4c:95:9e:dd:eb:
2a:dc:6a:51:80:a8:05:75:ee:63:3e:ba:c5:63:da:
74:f7:5b:77:cf:86:11:03:08:90:dd:e3:8b:b1:10:
3f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9D:B7:0D:FD:A6:9C:EB:10:C0:13:BC:82:E7:F5:0D:A1:0F:5B:42
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:85:2e:8d:21:c2:ad:32:b2:74:07:08:30:48:5f:2e:39:e2:
3a:be:da:b7:f5:bd:37:89:2c:d8:b2:36:2b:0a:28:3e:15:cf:
9d:8c:25:ec:3b:94:40:6c:0e:ea:59:aa:a6:fd:89:9f:1b:f7:
d7:f2:9f:74:71:82:32:55:db:dc:2e:9f:60:86:1f:f1:68:c8:
0e:4d:ce:a4:79:bd:d6:13:f0:35:bc:5f:65:50:f9:6f:98:d9:
2d:d1:7b:aa:25:62:96:51:0b:d4:76:1b:73:87:bc:af:bf:bd:
6d:0c:8a:81:48:72:a4:d4:12:74:b1:cc:e0:12:a6:6d:0c:06:
2c:fc:07:df:c9:ae:da:31:db:d0:e3:03:20:78:60:04:9f:8d:
00:a3:3a:fb:17:06:52:82:3a:4c:8c:e3:20:bb:97:cb:87:12:
cf:dd:36:e9:71:4e:4a:43:18:33:4b:4a:93:32:37:48:a0:40:
91:dd:3d:1a:2d:c0:b1:8b:a2:5d:2d:e1:0f:f4:58:fc:da:1f:
bd:a1:ee:0c:f7:1e:6a:c2:9b:28:16:91:91:73:43:00:b1:ac:
bc:fa:3c:9b:ff:76:db:56:8f:7c:63:10:1d:2e:9c:89:d2:d9:
d2:fe:ef:e5:aa:2d:04:58:21:40:43:19:97:24:11:f1:06:2b:
01:d6:c4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:44 2025 by rpki-client