Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
File: 9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json)
Hash identifier: H3kc4TOlZ23SEr1Xgl38S4qqaYlOfpVDhk2KC5ymf8c=
Subject key identifier: FC:8D:D0:DD:58:4D:B7:A2:3B:B7:B9:CA:E2:66:CD:85:8F:5A:93:DF
Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
Certificate issuer: /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Certificate serial: 019A02FE6A86A06E8B2E12A4AB85E934521D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
Manifest number: 11BD
Signing time: Mon 20 Oct 2025 19:00:18 +0000
Manifest this update: Mon 20 Oct 2025 19:00:18 +0000
Manifest next update: Tue 21 Oct 2025 19:00:18 +0000
Files and hashes: 1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: uhdQGuLEWbsedty7Cu2jV46GwPtc1VNwdP/b1ha0LmM=)
2: xm2GnCrITkLspXymDcS4A7YJbbI.roa (hash: +DAgDZIg9Wj4wTdH4O9JnrjTmjk3rUCiBhMUo5eAXI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:6a:86:a0:6e:8b:2e:12:a4:ab:85:e9:34:52:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7
Validity
Not Before: Oct 20 19:00:18 2025 GMT
Not After : Oct 21 19:00:18 2025 GMT
Subject: CN=fc8dd0dd584db7a23bb7b9cae266cd858f5a93df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:a1:61:b1:89:a4:61:73:75:26:4a:91:53:
c3:f0:c2:bf:67:da:90:8d:ca:6d:ae:b8:ce:e9:87:
36:8b:8a:f4:63:c1:49:53:9c:3b:85:e0:e1:c2:e4:
03:67:fd:97:87:f5:72:ee:e0:99:c7:d9:ae:ab:c3:
be:8b:ca:0b:55:ef:92:08:d2:51:63:d5:1d:9f:cf:
cb:ca:fd:b9:b4:f7:00:d3:06:58:cb:29:ef:28:a0:
1f:7e:a3:0c:bf:c4:3e:98:fc:15:73:ab:0c:28:c7:
1a:09:e5:6c:15:b0:da:e3:3e:a4:5c:fc:70:2f:77:
e8:b0:6b:a7:4a:07:c3:e6:6d:37:f0:39:14:4c:96:
6c:79:4e:2d:6a:41:ea:ad:6c:13:a9:b6:02:bc:96:
67:d0:fb:2f:af:77:a0:e8:86:f5:6e:81:ec:fe:5a:
3e:99:e8:64:2f:b5:65:79:9c:75:fa:46:27:d1:3c:
2e:ae:ea:41:e1:60:a1:e8:1e:2d:60:95:f4:a4:de:
05:19:09:a0:3a:a4:4a:aa:15:c3:bf:e1:42:9c:bf:
a8:3c:0f:0a:7a:55:cd:fa:6d:6f:6b:d9:59:46:86:
b6:67:81:ff:84:00:49:fe:3a:67:a9:56:34:63:10:
fc:7b:bc:98:a7:72:b6:1c:86:6e:69:5a:32:e6:ad:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8D:D0:DD:58:4D:B7:A2:3B:B7:B9:CA:E2:66:CD:85:8F:5A:93:DF
X509v3 Authority Key Identifier:
keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3b:1d:5a:eb:71:4f:74:9b:a0:c0:75:15:1e:b9:2b:d8:75:
ec:4e:ae:ca:36:15:66:88:af:a8:42:7b:73:b5:ad:36:99:d2:
68:c1:fd:43:fc:f6:e9:35:17:f4:2b:42:c3:1f:ae:4f:bb:e2:
42:d1:d0:aa:d6:6c:3b:57:95:09:80:bb:71:ed:78:e2:73:01:
7e:0f:19:2e:44:84:10:c4:d4:0e:dc:89:d7:a7:51:a2:0a:40:
1f:12:19:ae:8c:fb:e9:b2:30:a8:00:76:6a:6b:61:40:4b:9b:
aa:41:28:0c:91:f8:9c:8f:dc:94:86:91:63:82:25:2c:28:ef:
f3:05:d7:60:c1:e4:97:4b:cd:c0:c2:0a:09:04:fb:db:b6:71:
4e:e1:5b:26:95:69:5f:8a:ae:8f:0b:cc:74:55:12:6b:d7:99:
58:54:33:65:12:8c:d0:40:cc:26:91:82:42:2f:90:1a:3a:87:
82:1b:34:75:57:2f:8a:59:b2:1f:40:e7:bd:42:95:d3:cf:42:
40:d8:e7:dc:70:c9:37:87:fe:4b:be:f7:32:62:ae:3c:a8:cc:
75:47:54:0e:24:5d:f9:8e:16:aa:6d:0a:40:1d:b4:b6:36:39:
97:98:bb:2e:8b:d6:ae:51:85:99:91:d6:92:69:8a:39:05:8c:
48:fc:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:11:33 2025 by rpki-client