Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: xMmYbIQ7rcanAQACJZEmoPi9T4HrmDQir/93kiaJnI8=
Subject key identifier: C7:4E:6F:6A:BE:43:5A:01:11:76:70:0B:06:81:3C:A5:2A:93:65:ED
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 019A00DA65CA1BAA2BA000003B36F472972D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0B0E
Signing time: Mon 20 Oct 2025 09:01:44 +0000
Manifest this update: Mon 20 Oct 2025 09:01:44 +0000
Manifest next update: Tue 21 Oct 2025 09:01:44 +0000
Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=)
2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: iv2urbmP3CQAHujVpRW2h9G2OgsKmjYHnHkikuJxshM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:65:ca:1b:aa:2b:a0:00:00:3b:36:f4:72:97:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Oct 20 09:01:44 2025 GMT
Not After : Oct 21 09:01:44 2025 GMT
Subject: CN=c74e6f6abe435a011176700b06813ca52a9365ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:79:36:5f:a4:82:3e:ae:0d:45:3e:5b:2d:35:
07:9c:a0:2a:03:e4:b0:84:6f:b3:8d:92:07:d5:b9:
ee:b7:89:98:fa:18:ce:78:3d:e4:d0:27:62:e8:53:
92:b5:46:7a:c7:e3:9b:e6:2a:55:cc:ff:1d:70:77:
65:94:a6:fc:e5:09:f1:71:aa:c6:e6:e0:f1:30:5c:
35:71:1d:f7:c0:54:d3:b2:1e:94:f1:41:d7:bf:01:
c1:99:ff:52:c4:5c:9e:ac:f1:c3:d2:70:d4:e0:7e:
cd:af:fe:a0:e3:3e:e2:8a:36:24:7c:a0:51:b5:68:
57:bf:9c:05:97:07:67:91:9c:2a:4e:3e:b8:d9:a2:
d9:b8:54:f3:b1:51:4a:4a:61:7a:99:f0:74:03:d5:
a0:07:62:b5:37:80:84:ab:46:ca:cf:8a:31:0d:63:
f5:d3:37:39:d7:bf:b0:d2:42:f8:ed:64:c3:fa:ab:
d8:e5:51:e5:e4:9c:be:63:37:ec:46:7b:4d:b0:7e:
c7:fa:97:a5:b2:17:99:22:d3:9d:e1:e0:09:6f:43:
35:0d:44:e1:25:66:4a:5d:38:26:f8:b7:5f:15:05:
89:5e:0f:7e:22:95:8b:5c:ea:59:42:21:71:04:27:
72:59:e6:a0:37:c9:95:19:49:8d:2f:c4:3d:fb:70:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4E:6F:6A:BE:43:5A:01:11:76:70:0B:06:81:3C:A5:2A:93:65:ED
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:88:1e:ee:02:93:11:e8:70:24:dd:c8:47:6c:36:f6:2d:a7:
ec:37:60:9a:fd:a0:bc:40:55:ea:c1:1f:69:d8:a3:4a:15:69:
59:e3:8e:00:28:10:7e:8e:cc:48:cd:40:cb:1a:1c:43:5c:40:
55:7e:53:85:1a:08:73:de:6a:8b:45:e5:09:00:a3:2f:7a:5d:
df:fc:7c:5d:c5:d8:06:5e:03:32:e5:50:55:f8:7e:2c:c1:3e:
3e:bc:c3:31:be:1b:e2:cf:38:10:0d:14:0e:e4:26:75:84:c3:
91:57:6c:2b:60:d3:23:73:b4:29:16:f0:ad:95:99:a2:fd:20:
c8:0b:47:7a:8c:36:d5:e4:8e:70:57:95:d4:82:16:c9:96:42:
c0:6f:2d:21:aa:54:47:43:d8:13:77:ae:4e:a8:2a:42:c9:d2:
d1:6c:9a:95:9d:a9:ae:ae:e2:3e:7e:eb:cf:83:96:4b:d1:06:
93:a9:35:51:a6:de:70:41:69:66:be:1d:f1:c9:50:dc:c2:65:
7f:1b:f2:a6:8e:36:9f:20:93:67:aa:f5:32:6c:d4:08:7d:df:
30:6e:da:86:31:d3:85:7b:6b:99:75:8c:4e:c2:05:90:e3:7f:
61:de:98:6f:d0:d9:f6:f7:34:c6:de:16:81:ca:e5:33:a8:9f:
c6:75:28:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:50:56 2025 by rpki-client