Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json)
Hash identifier: f1NVNenMawFGfZOM7JcqTUfjD1yj65gZRVtKQm2H70I=
Subject key identifier: CC:E3:10:CF:EF:40:44:53:2B:27:E1:46:B1:6C:D3:C0:21:D3:B6:F2
Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140
Certificate serial: 019A006C22F5C85EC06B34FC8E9090D6D0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
Manifest number: 0350
Signing time: Mon 20 Oct 2025 07:01:18 +0000
Manifest this update: Mon 20 Oct 2025 07:01:18 +0000
Manifest next update: Tue 21 Oct 2025 07:01:18 +0000
Files and hashes: 1: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: oCok3mZg4/NQe6zufDwy1th1EAG3pEL5qofHvmn/do4=)
2: T3T0ZkFQFPUc2BEd0op7sYAz8XA.roa (hash: WuXt/ChkvGDFgO8WDo1RKpja79/oAcXrCCkvEETR+EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:22:f5:c8:5e:c0:6b:34:fc:8e:90:90:d6:d0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140
Validity
Not Before: Oct 20 07:01:18 2025 GMT
Not After : Oct 21 07:01:18 2025 GMT
Subject: CN=cce310cfef4044532b27e146b16cd3c021d3b6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:40:ca:f7:23:b9:d7:55:b9:0b:d2:52:87:
17:2b:a2:9a:a4:79:32:32:72:1f:0a:76:11:dd:92:
43:57:1a:76:9f:ec:d4:5b:e7:69:62:c7:8a:4c:49:
c9:17:74:0b:64:7a:26:fc:b4:3b:f7:21:6a:4a:54:
28:4f:31:2a:b5:1e:42:80:49:0c:0d:01:d5:3b:1f:
1d:15:26:62:47:50:e9:9a:45:b7:6c:0e:81:c6:db:
d5:13:23:46:3d:80:35:a6:39:36:14:2f:f5:55:8f:
e9:26:89:1c:7d:77:2b:49:a4:30:bc:97:9f:97:35:
5e:2e:bd:b5:28:79:4b:6f:10:67:36:a5:f9:2c:82:
62:42:92:27:33:fd:4d:ea:24:3e:b4:92:11:bc:2f:
28:7d:3c:6e:ef:bf:dc:83:46:d3:1b:85:81:be:ae:
3a:b0:ed:9f:b1:3d:f4:7c:70:ee:60:63:70:8b:91:
be:be:58:7e:59:7e:45:1a:c1:60:b1:2b:4c:d1:a0:
2a:34:54:23:b7:1f:f0:45:1d:9f:cb:fe:82:9b:0a:
e0:f2:80:e8:1b:cf:a2:c5:06:f1:66:18:73:2e:09:
ff:55:7c:5b:dc:65:7e:82:03:a0:e9:dd:41:34:ab:
d9:44:f4:3a:42:fa:28:6a:ec:e5:c7:c6:24:12:a2:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E3:10:CF:EF:40:44:53:2B:27:E1:46:B1:6C:D3:C0:21:D3:B6:F2
X509v3 Authority Key Identifier:
keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:26:ac:f6:75:c8:d0:8f:17:c2:98:70:a7:e6:cc:10:78:b2:
d3:06:70:61:db:f4:73:2e:c5:c8:07:99:1c:f9:74:31:54:fb:
22:c4:ea:f0:64:c4:79:06:2b:db:5b:1b:bb:73:4e:5b:d6:6c:
e7:91:9c:ad:b1:22:20:dd:82:7a:b1:31:e8:39:43:6e:18:86:
2d:cd:65:94:17:34:e0:be:54:e8:de:4f:54:2b:75:12:9e:04:
76:7b:70:2d:8d:4f:fe:22:ce:63:9f:5b:37:fa:02:ee:5d:52:
03:85:8f:b1:66:c7:b7:c0:d4:6d:d9:17:5b:66:16:84:04:10:
f6:2c:3f:ff:dc:44:7d:c1:7e:34:2a:9b:4f:86:e8:ce:05:1a:
e3:bc:d5:6d:18:9a:94:e7:54:ad:aa:7c:b6:e4:a3:22:70:be:
8f:6a:f6:16:bb:47:62:19:52:ce:cd:9d:f7:5b:49:b6:d7:8a:
bc:5c:1f:73:50:2f:7a:e8:53:bc:29:6c:b3:1a:27:c4:59:71:
99:32:ad:7c:63:3f:39:04:4f:da:d2:12:0c:fe:f3:85:69:fd:
37:12:a6:8a:ea:d1:14:8e:44:8e:42:61:2f:42:26:a3:33:a8:
8d:54:97:65:b0:d5:27:dd:7b:e7:5d:b5:49:a3:7c:1d:c1:66:
7c:c3:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:11 2025 by rpki-client