Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier: Gb7cWZjtIXIaWct0N2iLwwMuOIpU9Mc/Vilby0UqhD8=
Subject key identifier: EF:FC:5D:07:BE:61:52:98:27:84:1D:36:16:AF:BA:A0:FD:3C:4A:41
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial: 019A047F75F10EE7C679ED7596888C1099C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number: 155C
Signing time: Tue 21 Oct 2025 02:00:53 +0000
Manifest this update: Tue 21 Oct 2025 02:00:53 +0000
Manifest next update: Wed 22 Oct 2025 02:00:53 +0000
Files and hashes: 1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: wD+Li7mbp8CGV2RGqvuNiC2LH8lR5Nfx4orx+YjTiRA=)
2: Yj1ZixuYkYbRfQKF1z7pgksE4us.roa (hash: YrNKpDljk4B4Ef1MFB8qPNVZiTFjojjO2XPhpM/1UPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7f:75:f1:0e:e7:c6:79:ed:75:96:88:8c:10:99:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
Validity
Not Before: Oct 21 02:00:53 2025 GMT
Not After : Oct 22 02:00:53 2025 GMT
Subject: CN=effc5d07be61529827841d3616afbaa0fd3c4a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:5b:21:ac:c2:ac:a5:24:02:a8:fe:28:a3:
9a:5a:e2:4a:2d:d8:34:3b:db:ab:b8:99:a9:3b:83:
bb:a9:06:ed:eb:e6:55:18:30:02:27:3b:b8:23:f1:
8f:cb:eb:bd:90:52:2b:0a:e1:e9:07:5f:d3:9f:01:
e2:73:42:60:9f:29:ec:0a:d7:67:8d:d1:f8:86:76:
9d:ae:62:9b:17:92:c1:63:ac:2e:a6:df:a9:31:42:
c8:11:01:1e:8c:bb:e6:d3:7e:86:99:45:03:13:e2:
9e:8c:4f:c7:f8:46:6b:00:f1:99:f0:21:65:a4:72:
21:ba:38:5c:46:d5:ee:21:4d:9b:53:1e:35:a0:ba:
59:31:04:f5:45:3c:db:00:cc:c2:46:8b:ef:04:07:
b6:64:5a:a7:2b:a2:64:59:08:a3:0d:6f:7b:1f:08:
7e:44:5a:85:b6:7e:40:10:1d:24:ac:57:22:a2:92:
cf:ab:4f:ce:a8:f4:56:72:0d:eb:f5:c7:ab:7b:c9:
09:18:46:62:d5:05:b1:c7:07:cc:04:8f:e2:e7:85:
c9:14:4f:3d:74:da:1a:0d:4c:a4:f7:40:14:bf:01:
d4:7b:4b:27:ca:20:36:f0:e4:b1:ec:7b:fe:91:eb:
e7:fb:3e:bf:ea:20:df:e9:c8:a7:aa:a2:00:70:8d:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FC:5D:07:BE:61:52:98:27:84:1D:36:16:AF:BA:A0:FD:3C:4A:41
X509v3 Authority Key Identifier:
keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0a:b5:41:f8:5d:2c:06:7c:54:c7:66:e8:40:5f:3a:03:8d:
6b:2d:2a:2e:b0:c4:18:57:87:58:cb:fe:65:1c:e2:b2:34:ae:
80:c5:42:d9:0b:49:52:d9:b3:b5:18:75:61:18:2c:e3:2f:dd:
2b:2e:8f:6b:87:0b:ad:f0:1f:ba:ec:f0:80:79:11:10:f5:2f:
b7:39:67:b9:e4:b5:c2:6a:a1:1e:66:fa:ea:1c:28:37:5e:62:
09:19:f5:d0:2e:de:06:b1:fb:2d:ac:5d:9b:31:9b:76:59:83:
24:86:ea:74:0f:7b:a9:54:44:39:25:b2:6a:a6:73:50:44:72:
09:25:d2:80:4b:69:da:ae:1b:8d:fe:9d:fa:24:6a:0c:42:ba:
2b:ae:5b:0f:35:71:a2:00:7f:32:9b:01:92:07:34:d3:7d:18:
74:25:7d:b6:48:3a:ec:ff:58:60:2b:ef:7d:56:0a:c1:cd:42:
d1:73:38:c6:9f:fc:70:9e:7b:75:05:53:a0:01:f7:c8:de:84:
f4:1a:2b:6f:7e:b1:63:c1:cc:21:9b:d1:0e:e7:4c:b8:91:07:
fe:84:0e:59:81:ae:ea:84:57:c9:8f:e2:4a:05:ad:91:b9:93:
c5:63:e5:30:c8:a8:14:61:4e:dc:d2:c2:c0:dd:14:31:e2:33:
2c:71:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:02:48 2025 by rpki-client