Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier: sKR4wHXAKUtygCOhK+XCP5VTd9o0oBJvWHXjH+tIFvs=
Subject key identifier: 12:53:A0:11:52:AB:F7:7F:5B:1C:89:36:74:2D:15:F6:4B:69:FC:29
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 0199FCFD42FEEF4B26C749105FA3C9953A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number: 09AD
Signing time: Sun 19 Oct 2025 15:01:20 +0000
Manifest this update: Sun 19 Oct 2025 15:01:20 +0000
Manifest next update: Mon 20 Oct 2025 15:01:20 +0000
Files and hashes: 1: 1--aJOHbG2HarYQRIFHME9kGdrI8.roa (hash: e0PFqEIF1I8KQrFh+AG+JLWzJuU3cKKiEgrK5TdCBkw=)
2: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: QTV3BDQuCPB776ULy5yjDfeurmyuvg7ZcjzmTukOJns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:42:fe:ef:4b:26:c7:49:10:5f:a3:c9:95:3a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Oct 19 15:01:20 2025 GMT
Not After : Oct 20 15:01:20 2025 GMT
Subject: CN=1253a01152abf77f5b1c8936742d15f64b69fc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:ea:bb:e3:cd:21:c6:b0:e1:e7:2a:bf:f0:
16:52:ac:15:95:7a:ad:77:5d:8b:ed:c6:d0:21:46:
54:ca:72:c3:c6:ee:56:ba:0f:5c:5b:0e:db:d8:9e:
64:64:c6:3c:f4:5b:5b:a0:c8:fd:90:6e:98:c6:9b:
27:03:f5:90:3e:14:de:5d:76:e8:86:69:68:b5:6d:
15:4c:91:d5:1f:78:c7:23:34:2e:b4:44:ed:05:36:
3b:d7:eb:5a:a3:ae:d7:de:4c:41:70:3f:fe:36:77:
34:46:c1:c7:a4:95:46:d1:73:69:be:78:e3:a0:21:
c5:14:58:ab:c7:68:36:96:3e:a4:26:0b:ce:bf:55:
d8:f0:e6:cc:72:f9:e2:60:71:02:b8:af:3d:b7:19:
2a:21:05:18:c1:b2:36:18:ee:42:c6:42:74:53:0d:
44:79:30:2a:77:83:c8:0d:6b:79:d0:9e:36:6c:79:
ec:f5:64:aa:16:11:a3:9c:b8:34:85:b3:5f:d0:20:
5d:73:de:89:98:e3:42:c3:18:42:30:6b:7b:84:96:
76:4c:e4:db:d1:12:b3:48:cb:e9:42:3b:e5:62:4c:
2c:ca:bf:68:4b:2d:fd:25:8b:55:7d:52:09:b1:c0:
29:5b:3a:aa:22:39:2d:fa:7a:44:b9:c8:9d:1c:f8:
f3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:53:A0:11:52:AB:F7:7F:5B:1C:89:36:74:2D:15:F6:4B:69:FC:29
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:28:05:8c:5f:de:05:bd:aa:2c:ac:d4:9d:c6:06:01:ca:59:
71:15:9b:02:ad:61:38:bd:70:1c:26:9d:30:2b:87:09:1e:89:
58:47:a7:ce:77:1d:a5:b5:76:96:69:87:6c:64:c0:44:c9:f2:
b5:e9:ee:79:f6:d9:4d:49:9d:03:bc:e5:92:f0:45:3d:cf:25:
a8:94:74:08:1d:e5:a5:7f:54:fc:94:df:7c:24:8a:98:ca:00:
aa:35:d6:f7:af:00:e4:2c:21:92:ae:f5:ed:17:35:73:4f:fa:
63:8f:73:16:dd:71:81:61:6e:7d:dd:70:28:16:a0:33:26:d3:
cb:6d:48:46:af:11:51:74:66:a9:fe:1f:0e:f0:97:bb:2f:69:
cb:19:9f:f7:b4:9c:e9:36:98:fe:5d:a0:26:7d:bb:0c:5c:54:
3a:13:40:80:dc:bc:43:3e:c8:49:f3:c3:a5:6e:57:0a:96:8a:
52:d5:cc:0e:dc:c5:e6:9f:75:0a:a6:dc:a2:f5:67:c2:22:ed:
85:5f:57:6b:b9:f9:b7:63:8f:79:9c:b1:f6:c0:1e:e4:6d:8d:
3d:8b:68:32:c8:9c:7c:47:43:b6:d6:a3:ac:c9:96:fb:0a:90:
89:36:a3:9a:28:cb:bd:f0:38:9d:23:58:7a:89:01:53:8f:7a:
6c:25:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:17 2025 by rpki-client