Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
File: 9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft (raw, json)
Hash identifier: 7BVTTn1cUF8IwnZNtN76QG7SmrHhqzdl6vnJrhgViwM=
Subject key identifier: DF:78:7F:EB:92:5D:FB:29:C7:AD:F7:01:79:34:EB:41:03:2E:0D:8E
Authority key identifier: F7:14:3E:85:7E:21:54:30:FE:0C:B5:2C:2D:F4:CB:ED:1B:34:73:8D
Certificate issuer: /CN=f7143e857e215430fe0cb52c2df4cbed1b34738d
Certificate serial: 0199FB7D0D1E05473DC8D2CA0F1E71CCBE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
Manifest number: 84
Signing time: Sun 19 Oct 2025 08:01:40 +0000
Manifest this update: Sun 19 Oct 2025 08:01:40 +0000
Manifest next update: Mon 20 Oct 2025 08:01:40 +0000
Files and hashes: 1: 9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl (hash: sKv5e4HAvgrKY9YyJz8U2N2WQgzmkAKZ/wCEflURjlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:0d:1e:05:47:3d:c8:d2:ca:0f:1e:71:cc:be:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7143e857e215430fe0cb52c2df4cbed1b34738d
Validity
Not Before: Oct 19 08:01:40 2025 GMT
Not After : Oct 20 08:01:40 2025 GMT
Subject: CN=df787feb925dfb29c7adf7017934eb41032e0d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:74:39:54:e8:6d:8c:2b:a1:21:75:50:75:
fa:2c:6c:b0:42:f7:92:ab:95:13:ab:36:75:80:20:
32:30:3a:45:9c:9f:bb:76:c1:c6:23:95:b8:74:da:
cb:32:d9:01:8e:6e:51:51:83:1d:5b:a7:fe:ac:09:
25:c3:38:07:ae:1e:7a:1c:b5:0a:be:a2:9b:d4:76:
48:93:cd:82:c2:0f:9c:08:b0:95:cb:57:0a:5a:46:
d6:29:fb:d8:df:42:8b:50:71:2c:fd:a7:46:77:a1:
5d:7b:58:fc:24:89:9c:23:93:a6:08:7b:7b:5c:bd:
d1:91:59:c2:fa:78:47:75:a4:fc:69:a3:7f:8a:10:
d6:8f:b3:09:9f:a8:c2:92:5c:82:0c:be:d0:df:5d:
6e:02:19:da:39:37:3a:78:4e:ee:42:35:5b:89:41:
6b:07:8c:95:d4:b8:37:8d:38:57:63:b7:ff:87:3e:
58:cc:8c:23:b1:84:51:c3:08:53:e0:0f:f5:07:a3:
a5:64:62:1a:16:f9:64:e8:fa:4f:07:5b:7e:1b:28:
72:79:6d:64:af:2a:06:f2:86:d7:f6:8e:51:cd:1e:
96:f9:5f:85:b6:c7:27:34:1b:3b:6c:e0:b3:8e:8a:
ee:37:76:48:3a:6d:ad:54:0a:2a:53:3c:bb:05:81:
25:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:78:7F:EB:92:5D:FB:29:C7:AD:F7:01:79:34:EB:41:03:2E:0D:8E
X509v3 Authority Key Identifier:
keyid:F7:14:3E:85:7E:21:54:30:FE:0C:B5:2C:2D:F4:CB:ED:1B:34:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/adbe17-1b78-4534-b405-a47a957c962d/1/9xQ-hX4hVDD-DLUsLfTL7Rs0c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:62:a9:45:c7:cb:8f:cb:3a:51:a5:15:55:0d:5c:fa:2b:ce:
f2:a9:97:29:b4:29:16:63:c1:72:33:a3:ac:f1:99:97:da:78:
83:dc:4c:a5:e8:52:fb:55:b6:84:66:c0:6b:7b:73:36:b7:72:
cc:8c:05:00:82:b3:cf:a9:8a:3a:e6:e3:12:19:9e:b4:dd:ab:
92:a5:11:53:13:15:cd:81:2a:6a:ad:de:d7:9b:f3:88:42:84:
80:6a:b3:89:76:25:09:51:40:53:a1:67:e4:3f:61:07:19:2e:
46:77:65:7f:21:3c:f2:86:6d:5c:ad:34:ed:17:1f:68:5f:1c:
85:3d:06:90:b5:69:d6:99:a5:2f:1d:f3:e9:5e:35:38:40:af:
9c:56:2a:1b:1a:34:ef:0d:ff:27:b2:e9:46:e9:a1:57:da:02:
31:4f:d6:9b:b3:01:0f:e5:8c:53:a5:74:23:04:5e:78:25:8a:
8c:1f:65:bf:50:f9:bf:fa:41:3b:96:d9:4e:d5:53:73:dc:fb:
41:55:e0:ac:4b:40:46:d8:04:04:3d:ce:d2:13:60:f9:1f:54:
c2:79:5d:89:15:ca:58:b7:48:0a:de:0a:d2:3a:b2:df:ce:27:
83:b4:cd:43:7d:27:75:2e:c0:f7:0f:2f:2d:18:3c:da:06:25:
ca:bd:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:26 2025 by rpki-client