Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
File: 9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json)
Hash identifier: PhDR+bN2iVmyK4+eCM24+sd4yoPHJUvpKDoSHV5TaQY=
Subject key identifier: 4A:D3:19:3F:A1:10:18:8D:D4:B5:DC:E6:06:BD:C7:34:A4:EF:87:95
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 0199FF59AED5B6FF4C6372E8E21798E9FA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
Manifest number: 01E9
Signing time: Mon 20 Oct 2025 02:01:31 +0000
Manifest this update: Mon 20 Oct 2025 02:01:31 +0000
Manifest next update: Tue 21 Oct 2025 02:01:31 +0000
Files and hashes: 1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: C5hxfobhWZs663Zqn80dTpSCWNNb3PxdSJTgcgehrrQ=)
2: blFPI1QT3vGyXWS1-axkqAT7T1o.roa (hash: 9ZF4v61ldXuDLq/JdKEO0mrKJOTY13vVthxskJAXAEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:ae:d5:b6:ff:4c:63:72:e8:e2:17:98:e9:fa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: Oct 20 02:01:31 2025 GMT
Not After : Oct 21 02:01:31 2025 GMT
Subject: CN=4ad3193fa110188dd4b5dce606bdc734a4ef8795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:a6:c6:90:0b:4d:37:7d:37:4a:04:7a:12:
a0:6d:37:86:07:98:1c:60:b0:c5:65:55:f4:40:52:
17:be:24:37:c4:7f:b5:c2:7b:c3:fc:94:84:e9:4e:
68:ad:f4:23:ec:f8:89:e2:df:97:4d:7d:7a:18:72:
29:bf:e6:03:fb:53:a3:bd:8c:fb:99:e6:33:88:bf:
41:b5:16:e3:2a:a3:d7:81:a1:a7:28:8d:2a:f9:9e:
a0:7a:aa:64:e5:a3:85:3e:05:2b:16:b9:31:ce:75:
7a:ec:60:2d:fb:c6:3e:ef:dc:98:b7:11:33:1e:fb:
6f:9d:78:21:b6:6c:05:85:30:cb:54:7c:f1:b7:ad:
03:b8:c9:fb:5c:16:88:3c:b4:50:f8:5c:cf:91:c6:
93:73:5a:57:50:91:e9:65:46:54:71:64:21:cd:4b:
3c:00:c9:c9:e5:f9:e2:a7:9c:0c:ed:5b:ca:50:dc:
5c:40:cc:47:35:20:b9:0b:86:5e:a6:be:83:1f:cf:
0f:37:0b:22:0b:e7:4f:76:71:f3:9a:c5:de:0c:c1:
fc:b4:d2:3d:30:20:d9:0e:8c:f1:6e:84:19:ed:95:
9f:05:31:04:bd:e6:f2:7b:04:ae:c5:5b:a8:1c:9a:
d5:2a:e7:bc:71:7b:39:18:1a:80:38:bb:38:3a:c5:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D3:19:3F:A1:10:18:8D:D4:B5:DC:E6:06:BD:C7:34:A4:EF:87:95
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a4:f2:19:6a:0c:3a:cc:59:24:fa:89:47:89:23:90:5e:bc:
fd:98:9d:b3:e7:30:0d:6b:d0:f1:55:b0:53:65:01:cb:84:42:
1c:ef:03:c9:4e:7d:5a:16:2d:e3:d1:44:d8:43:d8:ba:ee:e2:
aa:e1:78:2c:04:a9:60:30:f4:66:1b:62:0b:dd:a5:19:b2:42:
b1:50:1e:8b:d5:43:88:9b:72:4a:4d:7d:1b:94:a1:58:32:b4:
97:d0:bb:c6:0e:84:de:f0:71:d0:c1:d5:ed:99:f5:3b:76:94:
21:03:1a:87:c9:a3:ef:2c:31:ce:12:7f:2d:a2:a5:9a:d8:43:
24:c9:59:35:43:d9:6f:22:6c:2e:4d:f0:16:78:ec:4d:4c:43:
51:5c:70:72:5a:ab:85:9a:91:07:f8:e4:68:26:9d:0d:ac:e8:
be:f3:b4:64:81:dc:14:1c:44:22:c3:2b:33:c4:4e:eb:aa:8d:
a1:f8:1b:79:b0:d1:64:52:69:da:a9:80:76:8f:eb:b8:dd:f6:
5f:4a:ad:f7:f8:4f:79:2e:38:93:13:19:12:3b:bf:87:7f:81:
cf:f0:08:3f:71:b9:45:2a:86:22:c4:9e:ad:ef:4f:dd:fe:9c:
e9:93:2e:cf:79:eb:c7:04:b2:30:42:48:5c:16:38:13:e7:6b:
5b:b3:90:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:55 2025 by rpki-client