
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json)
Hash identifier: cuUfSwehl4f8qKRlrIeao5ngjVSQqXxaSf8MVOKde90=
Subject key identifier: A5:8D:30:5F:DC:7B:84:CC:AA:0D:2B:44:5F:4D:2E:4F:A6:21:71:32
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial: 0199FDD9A129838BBA353CC1FD2FCC1EC3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
Manifest number: 0BD7
Signing time: Sun 19 Oct 2025 19:02:02 +0000
Manifest this update: Sun 19 Oct 2025 19:02:02 +0000
Manifest next update: Mon 20 Oct 2025 19:02:02 +0000
Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: +Kqy4cGzmc4ylYZxdv/yEPLgMrQMZPVBC991CkmVYO4=)
2: ziQt4Au1b87EcX3IQE4F3MWkDm8.roa (hash: KUoOZI3FZormf07wPCHQ5jctubRO3hNmnfHFtLKB4fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a1:29:83:8b:ba:35:3c:c1:fd:2f:cc:1e:c3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Validity
Not Before: Oct 19 19:02:02 2025 GMT
Not After : Oct 20 19:02:02 2025 GMT
Subject: CN=a58d305fdc7b84ccaa0d2b445f4d2e4fa6217132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:a8:03:61:9f:a1:59:ec:0c:39:17:69:ef:
c4:78:b9:a8:77:0f:39:b5:1d:cd:ac:ea:3f:16:a8:
50:c0:3d:86:43:72:5c:67:4c:8b:9e:5a:65:0d:02:
c4:32:d9:04:76:ee:a3:8f:2a:67:04:59:33:68:6c:
0f:4f:81:d6:6d:c2:04:1b:3d:90:74:d0:9b:c9:67:
80:55:0b:8b:10:ca:4c:0c:e7:35:32:99:50:fb:cd:
77:38:c5:e0:9d:37:63:fd:54:8e:33:dd:06:1d:3b:
f5:eb:00:25:0a:8e:bb:d7:be:e4:d9:26:cb:ed:f4:
16:7e:ed:82:1a:fc:51:22:04:a7:67:49:92:50:00:
7d:7d:30:b9:12:a0:eb:b5:3b:8e:5c:ef:6b:e0:4b:
35:03:04:c9:71:fa:0d:85:5d:41:c3:22:c8:f6:f4:
94:63:d4:18:eb:83:10:95:2a:d5:6d:9c:8e:b9:9a:
a2:9b:44:e1:e2:44:38:25:30:c2:fb:47:6e:80:da:
e3:1d:7a:b6:27:4a:04:fa:9d:12:9a:87:0d:67:90:
35:1b:36:9d:ea:fa:6a:c3:ad:28:40:71:1b:4a:6e:
77:20:d2:c5:41:01:43:9f:f5:5d:45:a8:24:88:9d:
0b:4e:d7:d5:6a:73:0b:45:6e:48:cd:30:0f:f0:26:
92:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8D:30:5F:DC:7B:84:CC:AA:0D:2B:44:5F:4D:2E:4F:A6:21:71:32
X509v3 Authority Key Identifier:
keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:27:3a:94:af:32:70:9d:52:0c:a9:26:2e:10:14:1f:87:64:
1e:ee:d0:e7:d3:7e:fe:91:2f:d2:08:4e:82:be:d3:64:09:09:
9b:6f:46:6e:e6:40:1e:ba:50:b4:e0:1f:17:4e:c0:1d:33:d6:
14:b2:d2:89:e0:76:3b:40:3c:96:d2:1d:a8:0b:53:76:81:eb:
bd:12:e9:20:fa:8c:b8:9f:b2:15:96:a2:ca:b5:09:c9:a1:7f:
48:c6:fe:e4:e2:35:b0:f4:63:07:86:86:9d:b0:35:9f:cb:49:
36:a8:19:58:00:1b:08:ac:70:8a:b1:2b:14:cd:90:a0:cb:44:
46:5d:bc:6c:39:9f:2d:08:bc:8b:70:8e:72:9f:f1:cb:e4:07:
57:a0:2f:90:c8:fc:94:12:f0:5f:56:a9:1c:2d:35:b0:1c:cd:
af:2a:9a:09:45:b9:8c:ba:98:dc:50:b5:7c:8b:c2:ea:f9:80:
cc:6d:25:b3:cd:ae:bc:2c:3a:12:a4:3d:78:76:d4:11:1b:40:
a2:9d:92:0a:a8:e3:93:9e:d4:a4:25:e6:bc:7e:25:39:84:b2:
45:4e:91:91:68:10:75:8e:f3:66:a0:86:a9:a1:ef:ed:97:71:
cf:55:ea:f0:ba:6b:5c:4e:7c:9a:e6:66:ad:50:f4:d8:55:62:
02:b6:26:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:46 2025 by rpki-client