Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
File: 9-VkfNC39yK-1FafN7i_j5JTjPU.mft (raw, json)
Hash identifier: EJrsPKKuC3Z36EiXzHqe1HnPLyNZU+V4x/AxwmynYf8=
Subject key identifier: 71:25:27:0D:E1:9B:FB:41:EE:EE:88:30:B6:E4:EA:EA:2C:56:D0:4B
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 0199FEB4B742AAD00B3FBE58623F2E3620B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
Manifest number: 1305
Signing time: Sun 19 Oct 2025 23:01:20 +0000
Manifest this update: Sun 19 Oct 2025 23:01:20 +0000
Manifest next update: Mon 20 Oct 2025 23:01:20 +0000
Files and hashes: 1: 9-VkfNC39yK-1FafN7i_j5JTjPU.crl (hash: FQNQ3qf0RI8vMyVTgLt4qE1yGx2u61qkvLHNuXQOqz8=)
2: DBhdVQnWbQeKdQzgQiCpHErXzhE.roa (hash: ke+PE6qJEQ9z2GmlNhQtn8qkPU8ewvFXiEh0aYxuqOo=)
3: q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa (hash: aaFqVy4+hGHKy39rpTWrEUIWgkLIuK6ZgSAREjkESF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:b7:42:aa:d0:0b:3f:be:58:62:3f:2e:36:20:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Oct 19 23:01:20 2025 GMT
Not After : Oct 20 23:01:20 2025 GMT
Subject: CN=7125270de19bfb41eeee8830b6e4eaea2c56d04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:fa:e7:ba:67:71:0f:86:9a:1c:91:1a:55:
08:f6:60:c2:71:e7:26:af:ce:f9:a4:4d:b2:12:5f:
94:78:4a:a2:ef:75:fe:af:c2:5c:e9:55:7f:e0:9d:
7f:42:c5:3a:c9:d2:12:c7:5b:b1:c4:f9:6a:4a:8b:
31:21:bc:f9:bc:c6:bd:ff:95:e3:46:d7:b4:47:1e:
e8:ad:34:63:0a:d7:a9:5c:5a:fe:c2:59:6c:4f:8c:
f5:31:3e:94:60:a7:a7:d5:18:5c:3f:50:c3:5b:2a:
96:38:86:6f:d9:49:61:e3:8c:33:dd:f6:dc:53:42:
46:7d:2f:79:cf:8b:7b:1a:3f:c5:c1:86:78:c5:70:
16:46:a3:a1:f0:32:3f:4f:90:99:78:31:12:15:ed:
fa:41:c1:06:23:ef:1c:a5:61:ca:b4:6d:b0:c6:04:
42:b6:0a:ee:56:bf:7f:68:83:e7:42:bd:3b:5d:5d:
da:0b:03:02:e5:a3:54:17:71:43:c3:37:2e:20:50:
30:93:04:5a:68:79:cf:72:05:c4:4c:8c:59:dc:92:
8f:1c:ba:85:28:03:e9:86:9a:0b:07:10:4e:d5:f6:
d0:2e:c7:12:ed:ba:ea:05:67:73:34:06:c4:6a:fc:
37:b4:52:f0:18:1d:de:18:39:24:0e:ad:37:e2:01:
78:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:25:27:0D:E1:9B:FB:41:EE:EE:88:30:B6:E4:EA:EA:2C:56:D0:4B
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:54:27:65:44:56:48:a6:8a:81:42:98:bb:ef:7b:36:f0:20:
b7:22:3e:c1:a9:f4:91:f8:51:5a:cc:59:4c:ec:23:eb:77:2f:
cf:74:3a:e7:8a:c0:d6:5c:21:57:14:33:ef:f3:95:51:12:bb:
c1:92:d7:93:c9:d1:72:ca:33:8d:4f:38:ea:1e:ce:b8:3b:67:
f3:30:4c:0a:24:b6:53:d9:16:fe:ed:c1:36:8c:17:6a:2b:26:
1f:0c:c3:58:56:15:f3:5b:6c:bf:1f:38:dd:0f:b9:ea:45:12:
1a:82:e8:d7:bf:af:dd:cb:cf:34:de:57:ba:2b:a7:ab:4c:a1:
16:6a:d1:0a:98:50:83:aa:a5:97:2a:0a:37:f5:a1:df:ba:6e:
86:ee:7a:8c:59:3b:d2:a1:59:ae:9e:af:8c:5f:e6:75:a8:64:
72:3b:1d:49:a0:20:ff:0c:70:2e:63:cf:97:fe:4c:95:b3:bb:
55:d9:98:53:c7:7a:05:86:dd:07:cc:ab:02:44:c5:1a:6a:fc:
dc:53:22:4f:e7:7d:4b:b4:d3:58:ab:10:a3:d7:1e:21:fb:b3:
5b:dc:bf:69:24:9b:4c:d2:65:bf:89:e2:40:15:af:9f:49:09:
11:ee:d7:d9:25:26:94:66:f1:a5:36:67:cf:94:59:8c:28:4a:
8b:49:cc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:52 2025 by rpki-client