Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: A1Xd6pPd+LvOLV3cPIk6cj9FQ8/YRjOebg5LryDSSKc=
Subject key identifier: 5C:2E:29:B3:7B:74:68:BB:24:10:0E:2D:1E:0A:5D:35:06:D0:4D:02
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 0199FCFD2695355114E8CA79C1D411CF83C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 0664
Signing time: Sun 19 Oct 2025 15:01:12 +0000
Manifest this update: Sun 19 Oct 2025 15:01:12 +0000
Manifest next update: Mon 20 Oct 2025 15:01:12 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: vkO3d4PHq5rPsilS5vyMy0meiKWfJlx+Scv1qi+nswg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:26:95:35:51:14:e8:ca:79:c1:d4:11:cf:83:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Oct 19 15:01:12 2025 GMT
Not After : Oct 20 15:01:12 2025 GMT
Subject: CN=5c2e29b37b7468bb24100e2d1e0a5d3506d04d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:96:37:b6:3b:4d:a6:e8:62:8f:42:69:2c:a0:
46:9c:82:17:12:57:01:9f:28:9c:e0:6a:c5:17:a0:
1f:d5:59:c1:bb:bf:e8:bd:68:ea:8d:5d:79:5a:be:
f3:dc:2b:09:93:1a:af:fb:8c:a7:94:02:f9:d8:7c:
53:ec:6c:c3:98:c0:e2:da:6e:7b:ad:4b:3d:60:11:
ed:3f:85:e0:d1:b1:04:9f:ab:b8:41:5f:1d:af:9f:
08:09:87:19:12:f2:d0:bf:ec:12:bc:a3:2f:8b:81:
91:db:29:d3:98:94:61:81:60:31:40:46:98:7b:cc:
8e:a2:78:a0:9b:c9:89:47:79:b4:30:c0:3a:18:af:
4d:81:58:63:96:b0:ef:cf:42:40:a0:e5:f5:84:f9:
2b:6a:50:24:4e:2d:88:a2:c5:bf:37:e1:48:3d:81:
3e:98:4e:f6:d7:25:e2:37:cb:c6:72:21:a2:a9:f2:
01:3e:5d:0f:fb:31:b6:db:fa:cf:be:29:2f:15:b2:
21:f2:f2:af:48:a4:fe:02:45:4c:13:7c:f5:bc:79:
a2:6d:4b:5c:0e:81:58:a6:b4:da:5a:d2:c6:99:9e:
d6:5f:ea:5d:ea:cf:99:05:87:56:3b:68:4b:dc:fa:
75:68:18:c2:b9:4f:2d:66:d6:94:ba:c7:0e:fb:dd:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2E:29:B3:7B:74:68:BB:24:10:0E:2D:1E:0A:5D:35:06:D0:4D:02
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:af:1f:ae:d3:d6:a2:39:b5:19:ca:2d:d3:2c:4d:6b:09:3e:
46:20:6c:a7:80:de:20:98:c7:ce:7a:00:45:bd:97:82:35:22:
b3:78:ed:0f:a4:63:36:cc:07:26:32:52:b6:ea:81:bd:9b:38:
07:b5:1d:d0:51:a2:67:de:a7:7e:07:38:9e:3a:30:b4:81:7a:
26:be:ad:52:6a:f9:20:5e:ba:bd:b8:36:84:5b:0d:2a:a0:eb:
0b:ed:8d:91:e8:d6:f2:b4:44:27:0e:a5:1d:4b:12:02:0a:64:
4b:5a:4e:e2:21:02:e0:bb:77:0c:f6:a6:f5:fb:e3:82:c3:13:
0a:e2:8e:bc:16:1f:01:3d:3a:7b:a5:84:0c:e2:c6:f8:ed:6d:
1d:82:ed:a6:98:ed:f3:6f:b5:2f:47:5f:03:cf:1d:be:ba:ec:
ea:2c:3c:05:3d:98:05:54:5b:38:82:7e:f7:e3:86:f6:b3:d7:
b7:de:a2:31:46:81:97:9b:22:dc:1b:a8:ac:d6:dd:cc:f9:cd:
34:21:c7:84:76:a4:ab:bc:7a:06:01:db:37:f6:10:7d:71:8b:
bd:a0:3c:5b:b7:20:ee:f7:ac:b0:24:66:45:39:33:60:d7:d4:
2a:71:12:66:d2:51:3a:6f:9b:fd:93:87:85:24:a7:53:04:a6:
8f:82:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:11 2025 by rpki-client