Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier: +2+OieoRLgfQEaOGU63OrCAnEmW0aw45Qm2LSvadU+c=
Subject key identifier: CB:61:47:5A:7F:A8:B4:F1:C3:6B:41:9E:0F:9A:A1:11:C7:F2:10:2E
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 0198892180E8EBEB74D95B958F2BDEEE3631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number: 06F2
Signing time: Fri 08 Aug 2025 10:02:10 +0000
Manifest this update: Fri 08 Aug 2025 10:02:10 +0000
Manifest next update: Sat 09 Aug 2025 10:02:10 +0000
Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: QWJiK+dDl/c+Hzxl+jJoD8QLM05x1rGC9IxTzy6dMxQ=)
2: Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa (hash: 3AsnPktXMzidA1tsY7S+Rc/2XsSBvEXEVlda+G5oNPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:80:e8:eb:eb:74:d9:5b:95:8f:2b:de:ee:36:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: Aug 8 10:02:10 2025 GMT
Not After : Aug 9 10:02:10 2025 GMT
Subject: CN=cb61475a7fa8b4f1c36b419e0f9aa111c7f2102e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4d:1b:e6:0f:d2:ce:bd:46:bd:4c:26:4e:4b:
6f:d2:aa:d8:4c:1a:00:ad:ce:f9:09:98:c9:b3:a9:
43:d6:ba:04:36:4a:4b:73:2b:38:bb:ac:8c:c6:da:
93:5f:51:d1:dc:32:44:6e:5b:42:52:72:4f:3c:ea:
5f:0c:4d:42:38:2d:d0:81:df:53:a8:79:26:a2:5b:
8b:5f:70:ef:ea:e7:77:b1:b6:0e:12:12:e7:1b:1d:
e3:11:54:13:85:24:4c:2b:ba:30:99:0b:d9:68:80:
ab:5b:ca:63:78:62:4f:81:a3:8c:cb:8a:b0:5d:56:
97:01:00:42:04:e9:fd:cb:46:0a:98:2a:d7:b6:9c:
16:4e:57:52:06:96:cb:a3:71:7c:ff:2e:9a:b8:08:
2e:f4:0f:fd:ec:2b:e9:1e:dc:5d:f5:7a:7f:fb:e9:
50:f9:8c:b5:64:7e:78:03:b3:da:96:d7:61:33:a9:
89:6e:98:fd:25:45:e3:7d:9f:25:7e:07:57:40:f5:
b4:b4:9e:7e:b3:fe:da:42:c8:9e:7a:63:02:0e:09:
27:b3:62:01:a2:91:14:ba:0e:94:3d:b1:d8:91:58:
9e:34:cf:67:db:42:63:25:36:b9:02:f5:3a:00:94:
3a:39:83:6a:97:f2:13:c6:f1:1e:fc:5f:d2:9b:38:
a1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:47:5A:7F:A8:B4:F1:C3:6B:41:9E:0F:9A:A1:11:C7:F2:10:2E
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ac:a1:28:9d:e1:17:97:5f:f1:c0:aa:f5:bc:9d:77:9b:4a:
75:43:a2:05:71:90:30:15:fe:35:9b:6f:06:34:e2:4a:cf:e9:
2b:79:b4:cd:c5:16:69:12:9f:af:2f:db:58:4b:19:5e:95:a0:
5a:09:62:76:bd:8a:5e:e0:e8:62:1f:ac:0e:15:0f:0d:41:21:
9c:de:72:da:4e:59:75:6b:10:f8:e9:d5:06:83:6b:8a:11:a8:
05:58:73:7c:20:d5:d5:61:e1:44:b7:c5:e1:22:6c:9a:b2:ac:
df:44:99:a8:db:17:af:62:ac:58:f4:84:3d:5a:73:a1:dd:6f:
fc:e4:81:28:69:02:74:79:09:10:cf:3c:b8:b8:35:93:62:75:
14:97:26:fc:15:f3:fd:9e:d3:39:0d:0c:b7:fa:28:04:1b:4c:
7b:ea:fc:1e:32:3a:a4:04:60:2a:e0:dd:04:75:96:43:c9:2f:
16:cb:3d:c8:d8:cd:c7:8c:93:51:cc:2f:f7:70:ac:dc:9b:7f:
52:d4:81:5e:a2:86:1d:17:bb:72:82:fa:7d:de:fe:d9:57:bb:
19:5e:71:67:8b:95:37:81:16:c6:1e:99:81:7c:02:eb:0c:26:
80:54:50:42:a2:9f:b4:a6:50:d0:4d:8e:ae:2f:af:d1:29:59:
2f:81:d3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:58:13 2025 by rpki-client