Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: 4yZ275cqPJVis1nSfAOJ1clfSKgeyl8rl+lRExX0QnE=
Subject key identifier: B0:6A:4A:8D:EA:03:A4:C8:D8:04:21:5D:DE:6C:3F:57:55:8A:4D:11
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 0199FDD8FCC5E445017B5EEACD9580CD7843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 03E1
Signing time: Sun 19 Oct 2025 19:01:19 +0000
Manifest this update: Sun 19 Oct 2025 19:01:19 +0000
Manifest next update: Mon 20 Oct 2025 19:01:19 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: jwStA4G2BN8u0CyeOxbMbO7CLyIK9cqTlWY5erta//o=)
2: OHGF750j4DJGNc1Oe80dc-FWYaY.roa (hash: h+xssOn739NLfAUDZmv5GlRt0V3PO+xTJdzfH9zAWE8=)
3: _HF2gqhC9uCDDnAOpKs3WUfmbDo.roa (hash: QhESuMW1F4EzEaEsL+0TS0hEypm5aO6tHQYl52gTh58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:fc:c5:e4:45:01:7b:5e:ea:cd:95:80:cd:78:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Oct 19 19:01:19 2025 GMT
Not After : Oct 20 19:01:19 2025 GMT
Subject: CN=b06a4a8dea03a4c8d804215dde6c3f57558a4d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:7c:74:9a:56:3c:5a:cd:d0:6b:af:79:a0:
7f:c3:09:6b:d6:5a:1d:08:cb:36:14:79:13:36:90:
4f:48:19:a4:db:c3:c8:62:d0:6a:61:00:6c:e6:b2:
f9:81:ed:9a:08:e5:ff:2d:f8:85:b4:5d:46:7b:49:
a9:05:18:2c:ed:b8:3f:90:f1:59:68:a6:13:bc:37:
21:a5:09:a2:89:cb:3f:20:18:db:de:bc:86:d7:76:
e6:58:8e:ff:79:21:90:7f:fb:de:36:c3:6f:49:5d:
43:47:8f:8f:a9:ef:63:4b:e0:2c:ac:f3:16:83:e5:
72:42:14:88:f9:69:43:76:89:da:71:80:24:33:cd:
40:65:c3:b3:7d:df:f0:e2:72:07:97:59:6f:bf:54:
3f:31:e3:5c:1f:25:2d:b5:ea:b4:58:42:e4:eb:37:
6a:cd:96:73:94:c1:8a:6f:f8:c4:7e:52:6f:93:fc:
1f:b6:de:25:f8:c1:a9:d8:ea:a4:25:e8:0b:ca:58:
f4:ba:64:54:17:7e:e4:cc:2a:0f:f3:01:ae:02:92:
ea:e5:18:20:a2:e1:ee:8e:b2:05:6f:e0:49:c8:3a:
36:a8:fe:0a:93:41:fc:a2:fd:10:83:f0:9b:19:96:
59:74:ed:7c:6a:19:88:0f:c0:45:96:f5:5e:4f:ab:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6A:4A:8D:EA:03:A4:C8:D8:04:21:5D:DE:6C:3F:57:55:8A:4D:11
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:32:7d:c2:aa:35:26:f4:36:fb:c2:41:df:74:05:ad:e9:41:
ab:60:be:17:9b:03:3b:70:ab:8e:e1:66:4c:d4:1f:c6:3b:dc:
93:4a:17:bb:15:6c:a6:bb:f0:c6:7e:af:84:3b:e0:bd:22:46:
0b:de:a6:f7:69:d9:5f:25:92:b7:d3:aa:6b:d0:98:77:a7:3d:
14:ca:39:82:8a:fb:24:57:12:98:67:ea:da:45:10:3e:6f:0f:
b3:9f:38:62:96:82:f8:a9:1b:9b:8c:ac:88:72:87:56:c4:8f:
ca:f6:3d:3d:df:07:29:2e:f9:b5:b8:74:a8:f8:99:38:a7:03:
27:43:ab:12:04:bb:8a:37:d5:f0:1c:87:5f:6d:97:32:0c:4f:
a0:86:b6:b5:23:86:9d:5d:fd:b2:ea:6f:ae:02:a4:f7:d2:7d:
d1:78:b3:57:45:00:d1:6b:0c:09:d4:35:5f:4e:88:d2:cf:a4:
ec:92:48:10:f2:30:fa:47:01:5a:0f:ea:d7:03:c5:67:57:3f:
6a:43:aa:f6:de:02:b5:a3:4a:da:d8:f1:ef:8a:af:96:af:cd:
e1:51:fb:6a:30:51:90:d8:63:93:f3:b8:b4:1a:17:6a:eb:cb:
b9:a7:6d:5b:e6:c8:24:12:96:68:e6:29:ae:2f:b3:31:c2:51:
6a:c9:28:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:16 2025 by rpki-client