Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
File: 9vqbUoZNztDV7ON-dDciSyVCJIs.mft (raw, json)
Hash identifier: 7THuZxdTYplm3At+qg2MnEgt3jZBqxO1ZNRaUg2D8m8=
Subject key identifier: 83:24:8F:5E:22:40:8F:74:E9:DC:3A:65:B4:14:AD:6B:85:1D:62:CA
Authority key identifier: F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
Certificate issuer: /CN=f6fa9b52864dced0d5ece37e7437224b2542248b
Certificate serial: 0199FC213D7EFCB6CBDEDFFCCDAD90F60307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
Manifest number: 3E
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: 9vqbUoZNztDV7ON-dDciSyVCJIs.crl (hash: dOoINZDBDPkVyCrlGGHQj5iDt4Cu3GhNt/SidckvM08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3d:7e:fc:b6:cb:de:df:fc:cd:ad:90:f6:03:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fa9b52864dced0d5ece37e7437224b2542248b
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=83248f5e22408f74e9dc3a65b414ad6b851d62ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:52:ca:58:7d:da:3c:96:2c:d7:b5:b9:cb:
07:e4:f3:ef:4e:28:ac:ff:fa:a7:76:ea:ee:47:26:
25:07:87:c4:f4:30:b2:0e:64:a9:ad:f1:2c:f0:1a:
83:67:64:0b:bc:61:78:be:2f:37:c8:9b:1e:3e:1f:
6f:30:78:4a:8a:ed:1a:03:c2:30:88:bd:22:47:fd:
0d:40:6b:54:e7:f1:35:09:29:fb:8d:44:2c:e1:e3:
70:7c:94:2a:e3:d2:b2:f4:00:8c:a9:4d:93:e8:7c:
5b:fe:28:b8:a7:be:fd:29:1b:33:bd:dd:2f:98:59:
2a:8f:fb:0f:52:38:52:37:67:c3:ca:84:da:a9:72:
b1:f8:28:45:4b:f3:7d:c0:59:5b:c7:69:5e:29:44:
94:32:52:b4:21:93:e9:d1:4b:ce:da:bc:cf:f4:cd:
d7:0c:61:52:e4:17:fb:e9:3b:e8:b4:a8:23:04:af:
d4:d6:97:e2:86:37:12:f6:8a:bd:2c:8b:f8:a7:ec:
fd:9f:6c:d4:fb:99:57:6d:18:69:e3:15:ea:91:fb:
0e:a1:d9:6e:b3:dc:90:76:49:86:d5:e1:e3:6c:4c:
02:9f:6e:24:2e:b1:ef:b6:ee:67:4a:0f:7f:34:cd:
98:c1:37:39:92:5d:25:07:a1:b3:3c:7c:d2:19:a0:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:24:8F:5E:22:40:8F:74:E9:DC:3A:65:B4:14:AD:6B:85:1D:62:CA
X509v3 Authority Key Identifier:
keyid:F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:47:04:37:07:2d:3e:9b:d4:ba:e6:fb:6b:8f:ed:68:f8:94:
65:2d:88:4f:6a:e1:36:86:a7:de:c5:9c:8b:b2:80:ab:6d:0c:
e0:ff:35:73:45:93:a3:7c:ef:80:ed:4a:51:a3:80:11:ab:a2:
96:81:be:78:49:80:c6:e3:b9:2d:f6:5b:a9:53:94:16:64:0d:
95:54:69:00:d2:82:6d:15:35:8f:cf:d7:67:23:83:2a:40:75:
a3:dd:6a:15:79:2e:1e:97:f9:f0:0c:8a:41:ab:cd:56:20:e3:
ef:4d:57:c1:bb:d5:60:8d:ea:1e:43:11:05:c7:e0:2c:14:fa:
1f:17:ab:08:ce:f5:1d:22:f2:3b:1f:29:b0:d2:11:a7:b5:bc:
3a:2f:0a:15:5d:98:fc:d8:e6:71:8e:4c:a4:1d:d5:fd:dd:df:
18:7b:cb:40:31:02:90:60:7a:5d:89:4b:4a:4f:14:ea:fc:37:
84:89:50:c1:9c:23:ff:df:ba:34:17:d5:cf:43:c9:b6:70:f1:
07:d8:c2:ac:7d:2b:0c:a0:f9:a5:7b:ce:5c:e2:2a:95:8e:e1:
39:ec:4e:80:c6:ab:57:b5:65:5f:a3:f5:04:51:73:ca:1a:13:
30:e1:27:57:30:d2:8f:be:95:9a:76:13:72:b8:d6:b7:83:d4:
d1:b0:6b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:20 2025 by rpki-client