Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier: EspRbgiiYOmXjPhwOUWgieHnw6YbWIZSZjqS8jz8N4A=
Subject key identifier: 87:BB:56:A9:CE:8A:BF:E0:E3:BA:DC:13:C8:04:29:7D:66:E0:65:B1
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 0199FAD7FF5A0380970107D5F87A042CF2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number: 09F8
Signing time: Sun 19 Oct 2025 05:01:23 +0000
Manifest this update: Sun 19 Oct 2025 05:01:23 +0000
Manifest next update: Mon 20 Oct 2025 05:01:23 +0000
Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: 7Dopg5v0yQUUP98PBpUIKD3XUTcQChRQzhoajh0T3/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ff:5a:03:80:97:01:07:d5:f8:7a:04:2c:f2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: Oct 19 05:01:23 2025 GMT
Not After : Oct 20 05:01:23 2025 GMT
Subject: CN=87bb56a9ce8abfe0e3badc13c804297d66e065b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:63:3b:7e:00:8e:84:34:a5:65:c5:a8:72:
f3:e8:10:12:1a:d5:c3:aa:35:a4:b7:35:a6:b2:5b:
69:61:a8:c8:8c:2b:33:1b:fd:b8:98:af:9d:dd:34:
98:dc:65:3c:ba:6a:a7:28:cc:60:55:01:85:a1:bc:
5e:78:68:58:d3:c5:48:d5:ed:0e:91:7c:0a:ce:ed:
d8:48:fb:c0:bd:ec:53:6c:fe:15:f8:19:60:68:29:
7b:1b:96:ad:8d:eb:cf:8b:92:05:12:95:15:be:71:
2f:f6:22:f8:a6:61:4b:2d:36:68:c9:f9:ed:1e:6c:
c5:df:29:85:06:12:6e:fd:8f:14:17:e9:a5:9a:de:
5f:be:6c:2e:ff:66:50:b3:fa:f5:01:74:44:9b:51:
9b:4e:26:53:49:8e:bf:e4:4d:65:f3:d2:7c:c0:49:
95:e8:73:f0:60:06:b7:77:cf:8d:65:b7:81:66:52:
80:9a:55:a5:a7:69:d2:11:0b:67:f4:bb:47:fa:ee:
ce:8a:76:80:32:be:2a:20:b8:81:40:11:fc:7b:7b:
af:70:95:7d:43:bd:2a:f2:0d:25:66:3b:13:95:84:
d9:3b:79:93:14:63:57:9f:90:68:52:69:fd:ba:7f:
29:3a:45:6d:55:b5:30:4f:68:fd:a1:d4:20:5c:91:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BB:56:A9:CE:8A:BF:E0:E3:BA:DC:13:C8:04:29:7D:66:E0:65:B1
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9a:84:9e:cc:7a:8b:e0:ea:6f:03:e9:5a:3b:6a:9b:9d:59:
88:30:db:6a:09:db:41:a8:de:2b:7f:39:b9:b4:a2:50:88:9a:
0d:6b:06:07:b4:e6:c1:d2:de:d4:23:d2:af:f7:05:50:83:a1:
fc:3a:76:22:2c:ec:78:a2:bb:8a:c1:25:60:2f:f0:1e:45:04:
3d:98:ab:72:63:b4:b4:b2:81:d7:3a:93:de:62:4e:ca:f1:9f:
4c:6e:01:0e:94:c4:d4:5d:2b:d1:6e:9e:17:67:b7:1a:cc:6e:
3d:fe:c8:39:fd:79:c9:6a:ec:76:42:60:4c:7c:63:ef:8e:cd:
4c:61:27:f8:68:1c:ca:da:82:a5:69:82:b5:bf:67:6d:95:6e:
9e:8e:ec:07:60:27:a3:fa:55:f3:42:ef:22:a9:f7:ea:cb:ed:
a7:b8:bc:18:41:e8:55:3f:57:13:6e:ed:36:bb:68:99:74:27:
b6:22:57:9f:56:ba:8d:a9:ae:db:06:9d:fd:c1:4a:fc:30:b3:
4e:8c:e1:62:e2:3a:7e:c0:5b:0e:19:74:9d:9f:f1:5a:33:68:
2d:84:a9:30:dc:a8:f4:64:19:2f:b0:34:2e:94:a7:3b:48:12:
91:bf:9d:cb:36:f3:35:97:56:6b:e7:8c:ac:8c:26:2a:05:74:
7f:cf:fc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:17 2025 by rpki-client