Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: hFXqPpzZxfzKkIoAL5EDFwWcgfrIAO3ZxQOEhwOHY2M=
Subject key identifier: 2D:CE:C8:2A:2C:56:B1:3E:71:FF:F8:EB:7F:0D:3D:05:D1:1F:CF:4C
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 0199FC8F9B33CCB40391086F53B46DB51E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 09D9
Signing time: Sun 19 Oct 2025 13:01:33 +0000
Manifest this update: Sun 19 Oct 2025 13:01:33 +0000
Manifest next update: Mon 20 Oct 2025 13:01:33 +0000
Files and hashes: 1: 84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa (hash: UeaLHRP7oFc/d7B28fPSHAmNwBiXwzZTNmEOfITVZrU=)
2: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: ma3BfSSAUJs11NoRYZIAEyBgspWSBToJ26BEaCMy4xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9b:33:cc:b4:03:91:08:6f:53:b4:6d:b5:1e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Oct 19 13:01:33 2025 GMT
Not After : Oct 20 13:01:33 2025 GMT
Subject: CN=2dcec82a2c56b13e71fff8eb7f0d3d05d11fcf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:05:21:79:33:ed:36:4e:d7:68:37:b1:53:
bb:36:6b:79:91:4c:2c:cb:97:0a:f8:54:3b:5d:9f:
b5:20:fb:6e:5f:ae:27:58:47:23:bf:34:37:59:1a:
f6:66:67:52:0b:11:86:b0:ca:85:bc:cb:24:87:f6:
63:97:04:0f:db:60:68:1f:2c:75:66:ec:f5:b0:11:
55:83:69:12:8a:65:c9:7f:b6:53:cc:87:15:01:92:
4e:c9:ea:35:1c:cf:71:01:a3:84:d7:42:86:28:e6:
08:3e:dd:e1:f6:04:c2:c1:2b:5a:50:3d:a3:b9:fc:
2a:cd:d2:f1:02:0e:bf:7b:9f:70:e0:ad:b3:d7:7a:
96:fa:a6:e2:ff:45:25:d3:28:4c:bd:ce:ef:7c:40:
65:59:56:66:72:c3:ef:bb:36:6c:9d:75:5d:3b:d2:
61:a1:a3:4c:bd:47:db:b1:b6:d6:44:49:ec:6c:1c:
cd:b9:45:c7:1b:c3:60:41:73:c2:55:a3:26:0a:26:
ed:3d:0f:3a:8b:99:2c:54:1e:1f:d2:11:0d:99:0e:
1b:33:a2:86:11:8a:45:40:ed:b8:0d:09:de:9b:ea:
ab:eb:5b:9e:b2:e7:0b:30:29:24:39:6c:ed:4a:05:
0f:8b:98:ee:3c:e3:70:b7:83:96:93:5c:05:3f:86:
d1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CE:C8:2A:2C:56:B1:3E:71:FF:F8:EB:7F:0D:3D:05:D1:1F:CF:4C
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:5b:98:34:93:b3:45:a3:54:8a:b4:ab:c1:74:87:52:4a:89:
f9:09:d7:4a:19:ea:26:97:47:4f:dd:06:92:4e:64:44:16:e4:
b7:21:7b:9b:c4:9a:2f:14:e8:0d:c5:93:82:2f:27:98:d6:58:
3b:c8:30:49:08:a3:1e:14:9a:1a:75:59:43:4b:67:fa:2b:9a:
d2:36:27:24:47:be:ba:be:53:e6:a1:91:eb:f9:36:ab:3e:6e:
70:23:a7:6e:3b:65:2a:5a:05:5a:19:5b:d0:4c:d8:0c:aa:88:
ad:aa:ab:8f:1a:87:d9:2e:d4:fb:59:b5:a7:24:83:3c:75:5c:
82:38:79:99:ad:17:51:66:06:04:6d:51:59:7a:62:30:39:fb:
17:8a:45:f6:b4:1d:a8:62:ff:f3:e9:f0:bc:8b:37:2b:da:3a:
f4:b2:0e:ea:48:38:67:f7:c2:98:3f:83:93:e2:9f:7b:d8:35:
57:27:72:1d:3a:31:0b:42:38:25:25:f7:fd:e8:0e:ab:b8:08:
be:80:f3:39:be:3c:be:0d:da:2d:19:15:22:3c:be:8c:22:2c:
ee:6f:a8:91:ac:dd:40:af:6c:76:59:1e:2a:06:59:a1:1b:a1:
2c:eb:e4:ee:b7:be:43:fc:ba:8a:34:10:8f:24:13:c5:63:30:
4e:a0:27:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:39 2025 by rpki-client