Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier: LLXvwwbK1yrpwadBBQ8zyymYEChQ4eJHswIKCxoOJmk=
Subject key identifier: E9:1E:C3:76:5A:7C:8F:03:DB:D8:5B:6E:6B:FD:F9:27:06:E6:0D:45
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 0198D5834C95CF0E10CD1AD18ED62384611B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number: 0A29
Signing time: Sat 23 Aug 2025 06:00:08 +0000
Manifest this update: Sat 23 Aug 2025 06:00:08 +0000
Manifest next update: Sun 24 Aug 2025 06:00:08 +0000
Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: NS9X8BRinF8FgIYhPHToslojEg5yVkfA04KiAYwfMo4=)
2: oArMezXxnppYeQKqa4Fni7TfbMc.roa (hash: qlkimcr4G31oui8MrYfktlDJ5C4NmKprfu244lU2XRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:4c:95:cf:0e:10:cd:1a:d1:8e:d6:23:84:61:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: Aug 23 06:00:08 2025 GMT
Not After : Aug 24 06:00:08 2025 GMT
Subject: CN=e91ec3765a7c8f03dbd85b6e6bfdf92706e60d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:85:a2:d9:99:1a:4d:50:36:34:ae:07:7f:f0:
0d:c6:f9:1e:53:57:1b:f7:18:e0:bd:70:b7:a8:ed:
a7:c1:5a:c6:6d:ea:a2:1f:3a:e3:d4:7c:1b:7b:e1:
bc:8b:a8:97:47:ad:ce:d7:d1:8f:ae:53:08:d1:ff:
ac:5c:e0:a6:2e:27:b2:30:d8:8b:c4:27:57:3f:cc:
29:35:a0:ec:23:5d:02:e2:06:0b:13:dc:17:21:f7:
84:28:3b:85:54:0c:ec:2b:26:bf:21:c6:79:9b:fe:
7f:6d:b7:24:9e:89:c0:42:9a:97:3f:3f:c7:26:91:
81:7b:26:17:24:d4:23:4b:d8:c3:9c:0c:55:d4:ff:
97:29:49:6e:c1:8e:88:04:17:76:e3:d6:49:66:2e:
45:55:04:c0:04:ba:d8:68:a5:35:a1:6a:3b:26:b3:
59:6d:fc:ac:0d:e8:b7:2f:3a:64:f9:95:45:ab:61:
99:d4:0f:75:91:53:7c:8e:db:54:b2:c9:7e:b5:78:
fe:d1:3a:98:9f:35:ed:e0:7c:a2:81:c2:e3:dd:ec:
b8:29:9d:e3:53:0f:a4:54:5d:9b:68:42:b0:6b:2b:
46:e0:20:15:75:3a:f3:57:5c:4c:23:63:8f:3c:44:
37:4b:a1:ae:ad:df:2c:27:75:f5:1d:67:5c:fe:9a:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1E:C3:76:5A:7C:8F:03:DB:D8:5B:6E:6B:FD:F9:27:06:E6:0D:45
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:28:74:62:1e:53:74:8e:10:64:00:f2:f2:66:0d:5a:9e:96:
87:d4:d6:f0:93:a9:77:d6:99:eb:ee:ab:a8:04:c5:a7:e3:93:
5f:39:1c:6f:2e:d2:68:bf:ec:e1:3b:73:89:41:17:cc:c1:c5:
bf:3b:ba:de:65:57:9f:65:9d:0f:39:28:28:54:46:53:f6:d4:
ae:53:89:f0:9a:d2:23:0a:30:fb:61:34:c4:c5:fb:0b:7a:d8:
2e:a6:d3:62:58:c0:10:60:36:25:3b:4f:58:ee:ca:6b:ad:72:
0a:75:0f:8b:bc:ec:91:a5:10:45:0b:91:71:f8:a5:41:27:2f:
4a:6c:e4:0a:81:44:fc:0d:e5:e9:2e:38:ea:d0:7f:a8:7a:5f:
90:3e:b2:02:e9:67:10:ad:d4:a6:61:37:44:31:ad:9c:95:67:
e6:f4:04:15:31:d1:98:42:5a:cc:c2:f9:86:0d:4c:35:da:33:
5b:28:5c:76:be:c9:40:b9:ba:d5:7d:aa:f2:04:09:ed:66:b3:
4d:a8:b8:a1:ab:8e:82:a3:de:74:d7:5a:99:22:bb:c9:93:37:
37:8a:24:91:83:a4:32:6f:10:0c:ce:3c:97:52:1d:88:6c:34:
87:61:48:60:37:1f:d6:63:49:54:f9:3c:e8:0f:24:3e:7b:ef:
6d:b2:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:57 2025 by rpki-client