Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: lHOdJvbQBQEzicKwfd+GouMY8cLirg1JffbzT6RYah8=
Subject key identifier: E1:82:10:0F:79:57:BF:16:62:4A:81:C0:6D:D2:C7:6A:A7:33:76:9F
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 0199FC8F271E5CEC80558B136826C342FAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 0823
Signing time: Sun 19 Oct 2025 13:01:04 +0000
Manifest this update: Sun 19 Oct 2025 13:01:04 +0000
Manifest next update: Mon 20 Oct 2025 13:01:04 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: 2DAz7gRx2H2W2up4oQy/56eId2rxxe4SDZJQxCmxr9I=)
2: uNPxSzoBaXvBOJFQn-2SS8eLdrE.roa (hash: aQ7mvpV3ivI5FkoVAB6sSeBflcpGk3YWeApRgwYyH1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:27:1e:5c:ec:80:55:8b:13:68:26:c3:42:fa:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Oct 19 13:01:04 2025 GMT
Not After : Oct 20 13:01:04 2025 GMT
Subject: CN=e182100f7957bf16624a81c06dd2c76aa733769f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:a2:c3:a6:79:e8:61:6a:13:52:da:2f:e9:
2a:2c:40:22:5f:a3:4c:64:50:45:57:bc:94:81:30:
40:9e:52:cb:80:e8:01:58:38:d1:7b:c2:66:cf:35:
11:60:28:6b:a8:b6:23:25:d6:da:32:0c:a0:76:a2:
43:d1:f4:9c:9f:3d:1c:90:6b:6c:2a:2c:d7:42:c9:
4c:1f:54:50:c8:0a:37:35:59:38:40:0f:50:86:ef:
dd:7c:c1:aa:9d:b1:0a:d2:0c:53:0d:39:9e:3c:b0:
a6:93:3b:83:a4:95:54:58:a7:80:0a:55:ba:4d:71:
e8:b1:78:13:f5:9f:c7:28:ea:bb:1e:52:7c:b2:be:
4e:24:38:4d:a7:54:d8:ec:ce:51:c8:6e:41:5a:c7:
cc:8f:58:b5:ad:ed:87:fd:9d:f5:90:3c:ef:28:89:
0c:69:c2:bf:60:a9:65:1e:12:3c:f1:2e:b2:e1:b7:
1d:fc:3f:90:50:04:96:97:87:c3:bc:73:51:13:14:
4a:06:41:a1:e5:0b:3b:77:0d:0f:95:c6:f1:0f:70:
93:ad:02:29:45:0c:03:6a:6e:a9:f0:5d:48:e6:40:
e3:d8:24:85:b3:b6:08:17:c3:b5:6e:c3:44:63:09:
c8:ad:c2:b6:fa:5b:25:2e:5e:2a:0a:08:36:51:84:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:82:10:0F:79:57:BF:16:62:4A:81:C0:6D:D2:C7:6A:A7:33:76:9F
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:67:24:b9:2d:da:05:f9:42:50:0d:59:19:39:de:e5:7a:3d:
28:a3:57:e6:a6:b0:20:84:73:7c:7a:f7:d6:5c:fa:6f:94:ef:
11:4e:99:2b:a9:b8:f7:1d:c1:88:5f:10:14:61:b3:53:0e:18:
ea:4f:37:2a:e6:ee:c2:91:a7:c2:57:67:34:1d:74:93:f8:12:
07:c3:f3:0a:c1:6b:7a:db:a7:16:dc:b3:b2:d2:f3:eb:55:64:
7b:be:d8:ac:d0:c6:e6:f3:74:64:39:c3:1d:25:c8:eb:11:91:
a5:06:12:cd:57:50:c7:23:8f:d9:51:55:e0:74:54:9a:62:14:
41:7a:5f:31:38:aa:c4:ea:24:3c:82:63:3f:bf:3c:e8:26:ad:
f2:5e:6b:32:3c:b5:69:da:49:f8:f8:a4:27:68:7f:9d:0d:31:
95:a0:86:7b:bf:83:00:4d:9f:a5:92:8e:11:ad:19:13:50:5a:
4e:85:90:a9:36:d8:80:89:81:b8:04:db:6e:6f:ac:fd:db:49:
b3:f8:b1:e5:b9:a2:48:fd:83:9c:80:0c:7e:e1:de:3c:61:52:
b7:fa:35:4d:03:c9:ee:ea:ad:9b:63:18:8e:4b:b5:ce:22:51:
12:76:ff:c6:89:dc:78:c0:86:54:b2:51:2c:75:df:84:f5:c1:
15:83:28:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:45 2025 by rpki-client