Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
File: Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft (raw, json)
Hash identifier: ng58nPRZzQkrWaI6g+QRBLx6+ofpMTiW1mpOgy1/4v8=
Subject key identifier: BD:34:87:77:29:95:84:99:8A:73:48:9C:3C:F8:73:68:F7:8C:3D:5D
Authority key identifier: 31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
Certificate issuer: /CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Certificate serial: 0199FD34618A83FF9AA3F78BF4AB8200F688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
Manifest number: 095A
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: 5_iMF-a8NMa1YPR_P3PyRQQW0y4.roa (hash: WcT24IP06Ufo9Qw11IKoVe7vKY2EcXtQIG8CxBVwap8=)
2: Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl (hash: FOlmL35U6k96ACw9BckXl8O5TZTk2S4TrQTEBXnd+2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:61:8a:83:ff:9a:a3:f7:8b:f4:ab:82:00:f6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=bd348777299584998a73489c3cf87368f78c3d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:e7:ee:5a:77:06:87:46:47:34:03:2d:3a:
cb:0a:9d:46:fc:e0:27:dd:c9:81:11:e5:03:cf:8d:
fb:12:a8:8c:af:d3:32:66:ca:d5:fc:a5:21:48:4f:
c5:01:e0:44:0c:3e:59:74:52:49:d6:f7:05:13:c5:
72:8f:00:90:f4:12:bc:6f:01:41:c1:9b:33:4f:96:
0b:a6:3a:a7:c2:35:f8:78:ca:f4:38:b6:cf:8a:99:
b2:48:62:83:ff:ef:c5:5b:20:9f:6d:d5:8b:97:67:
67:26:10:e2:ec:62:a9:2e:bf:b8:d1:8a:fa:16:14:
8e:11:7f:17:6b:9d:7f:89:40:bc:b5:a9:90:32:87:
1d:95:dc:39:bf:30:a6:cd:5f:96:c9:d8:ad:e1:cd:
cd:ef:8f:7a:f6:ca:eb:1f:3b:44:13:90:0a:82:95:
c8:b1:0c:ef:a1:00:6e:bd:0b:4f:16:92:06:5a:78:
77:87:13:c5:a6:6a:fe:37:fb:6e:7e:95:4b:9e:13:
e7:36:2b:cd:81:f0:32:06:52:df:2e:02:df:d3:9c:
af:99:58:b0:46:74:1f:8d:fb:e3:42:cd:1c:1a:48:
2e:de:1b:d0:d8:a5:5a:32:d1:d6:80:f8:4d:85:bf:
e8:f2:c7:8b:80:95:04:f6:c3:5e:82:25:aa:ec:ee:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:34:87:77:29:95:84:99:8A:73:48:9C:3C:F8:73:68:F7:8C:3D:5D
X509v3 Authority Key Identifier:
keyid:31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8e:08:e2:f1:d5:cf:7e:2a:37:7c:41:bd:a4:c6:08:38:7b:
16:23:b3:6f:2e:72:1f:52:20:aa:a9:2d:c6:ab:55:82:1c:98:
6b:f7:80:01:85:d0:2a:d3:72:be:73:f4:7c:65:fe:e0:5d:e2:
df:1d:33:1c:74:c7:1a:42:ea:57:ac:b9:8c:22:76:4b:e3:70:
62:cc:d1:81:2c:a4:fd:7b:af:13:e2:14:02:6b:e8:20:52:36:
47:db:b7:8d:f6:c0:5b:db:a0:36:e4:d4:b2:c6:51:a9:5a:02:
11:11:d5:95:ff:47:9e:24:a5:a0:4d:ff:6f:84:b6:66:12:75:
30:58:ad:cc:83:ba:2e:4e:85:24:2e:48:be:b2:71:cc:8d:59:
d0:48:8d:6a:a9:7e:4f:fb:e1:24:6d:3f:dd:ba:f2:d7:6a:2c:
8d:07:cf:c9:8c:55:38:d0:38:d2:dc:4a:6d:40:ac:e8:00:43:
2e:e6:4d:30:0f:65:c9:c5:7a:e3:57:01:83:2f:3e:0d:2a:d4:
e7:ae:22:e9:24:cd:af:c2:fb:a2:c4:62:13:cf:a1:2b:ba:3d:
cd:e3:20:e3:e8:df:f0:0e:e4:cb:e2:32:f9:98:9c:28:31:f1:
ad:a7:f8:b5:33:37:bb:fb:f7:7f:15:03:6c:1d:70:64:18:30:
8b:93:f4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:02 2025 by rpki-client