Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
File: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json)
Hash identifier: QMjZgbIGpwR818uU3nAvZsKBh3Nzw92ybSiCI3QnqsM=
Subject key identifier: CC:83:0C:0A:6E:79:E4:99:40:B0:D5:76:44:72:B3:F7:48:90:9F:F8
Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
Certificate issuer: /CN=f539a07ef47f805cca07c10ae187c93968808c47
Certificate serial: 0199FC215285D982CB9C071BAFEA90A87CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
Manifest number: 04B8
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: GCkBZDtoUS9/8KWKQlMN9mNUQOpc67ZtDVGmF4P2hWM=)
2: hQ_4ttT47iSzyY-pXhE0Zk2VRI8.roa (hash: lla8JTSaGgyqrA7kZsNxFenXInFs3bsEJhodvXrTuiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:52:85:d9:82:cb:9c:07:1b:af:ea:90:a8:7c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=cc830c0a6e79e49940b0d5764472b3f748909ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:75:4e:d7:31:a5:8a:05:24:8d:31:cf:71:4d:
ea:a3:21:5e:0b:b9:ce:e4:d9:a1:03:5f:b2:37:4f:
e0:66:e3:99:a9:c9:6f:fa:a2:4b:cb:c3:85:f0:46:
7a:78:e0:e7:4d:b0:49:44:7a:ce:87:1d:b2:a3:c7:
4b:a7:ea:cc:f4:2c:92:07:84:67:f6:5a:03:26:bc:
49:57:b6:d0:54:6f:81:ac:d4:ab:cd:7f:98:a0:f8:
b0:7e:af:12:52:07:25:87:ab:7e:33:b5:bb:fa:1a:
0e:e7:7a:e3:25:81:c4:8f:43:b2:13:07:4b:93:fe:
8f:b3:2f:77:7b:18:36:d0:56:c4:63:e2:4b:c9:7f:
2e:c8:af:ab:ad:ec:52:b1:aa:68:26:4d:86:51:87:
56:99:46:e9:3f:c3:52:a6:ae:4d:29:6b:47:b5:66:
99:18:07:51:e2:72:b3:38:c7:4b:36:ac:fb:12:4b:
12:7e:99:5c:54:fc:96:ec:e3:50:cf:62:97:5f:03:
86:c4:e5:c5:42:d9:28:c1:08:c4:bd:c7:e8:c7:90:
d2:b7:02:42:db:4c:fe:e2:d5:e1:f2:78:1f:26:69:
35:2f:ac:c6:82:7f:26:15:39:bf:1a:7e:6d:21:25:
24:90:b9:66:4e:b9:06:a5:03:0e:71:b0:07:fc:b9:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:83:0C:0A:6E:79:E4:99:40:B0:D5:76:44:72:B3:F7:48:90:9F:F8
X509v3 Authority Key Identifier:
keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f4:5c:98:c6:4f:96:42:a4:0b:53:4e:b6:3f:35:82:85:c6:f6:
db:6c:67:04:13:5e:58:0a:47:f9:4c:de:02:e1:36:25:f1:9f:
7f:d5:0f:8e:8b:d2:5a:34:5f:16:10:fc:0c:e9:54:9c:be:a8:
cd:f8:8c:50:f4:a7:b7:09:80:cd:aa:71:9c:33:26:d5:e1:cc:
c5:75:55:36:f2:4a:22:8c:74:01:da:68:5d:33:32:a6:0b:59:
52:b2:b4:9f:aa:05:97:2f:e4:a6:c5:41:9b:45:02:a4:45:50:
b4:5b:8b:55:56:49:42:72:3e:c6:4a:7d:d8:44:27:9e:17:2c:
e1:25:42:ba:8a:68:77:5f:f0:53:17:e2:8e:37:d0:af:e9:1c:
0b:1c:f5:db:b2:df:8b:9f:04:6d:01:19:38:0d:24:17:e3:f9:
03:07:59:2d:32:fc:d1:76:31:ab:60:32:83:c4:e1:1d:9d:51:
3a:18:36:3c:df:cd:2c:d8:73:be:20:2f:e1:e1:34:e9:d1:06:
a1:e3:05:50:a9:c5:a0:ed:0d:79:7a:22:ce:27:0f:c2:48:42:
31:b5:08:0d:53:dc:ff:06:ce:ea:3a:6f:7e:2e:60:f4:25:38:
ef:26:f2:20:8e:bb:de:d5:ed:ac:d3:bd:fc:37:f3:ad:8f:a8:
85:c7:11:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:41 2025 by rpki-client