Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
File: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json)
Hash identifier: C7yfoJQHrOGoBzLHrJ152//EyfAUsQvGMqvV+2WlTZk=
Subject key identifier: 93:C5:2B:12:21:E6:C1:1C:74:6C:05:DB:34:57:80:0E:BD:E6:CF:3C
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Certificate issuer: /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial: 0199FAD840CC49E4D5E9174D7A05FEF42378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
Manifest number: 0348
Signing time: Sun 19 Oct 2025 05:01:40 +0000
Manifest this update: Sun 19 Oct 2025 05:01:40 +0000
Manifest next update: Mon 20 Oct 2025 05:01:40 +0000
Files and hashes: 1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: CHU8J5TJBlwSO5HsttWKDYC+MCpEuWCRFNgUXeymTAE=)
2: jSx6lr1ClHwvX34A8pMwt0RR9b8.roa (hash: 8qaP26J8XC7Mhz3DA86mgKU6vMfpb43EGZW/j662nEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:40:cc:49:e4:d5:e9:17:4d:7a:05:fe:f4:23:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
Validity
Not Before: Oct 19 05:01:40 2025 GMT
Not After : Oct 20 05:01:40 2025 GMT
Subject: CN=93c52b1221e6c11c746c05db3457800ebde6cf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:4b:51:5e:6c:ac:02:cf:36:73:1a:d3:6b:
75:97:3c:3f:db:92:46:64:db:90:94:0b:4d:e3:76:
2b:09:2b:b9:20:21:ab:3e:c1:61:5b:df:c1:f0:b5:
50:29:33:c7:9f:3e:ed:68:2e:0c:4d:35:30:32:53:
b2:a4:21:5d:a5:5c:b6:6d:fd:91:65:19:c5:63:df:
b4:14:bb:42:5d:7b:2a:06:4b:00:0b:20:01:7a:cc:
2e:81:b8:e5:19:d9:91:03:3b:42:e6:62:bb:33:af:
c8:21:0f:ff:03:8f:49:83:f3:29:ff:6d:c8:e4:47:
39:2a:98:37:2f:d6:3e:09:4b:af:c6:12:2b:3d:f9:
b9:52:a6:cd:50:10:f6:c2:51:a8:6d:62:9e:bb:8e:
5b:28:60:d2:84:d5:41:06:3d:09:c5:d0:df:9e:41:
fe:15:f4:86:d5:19:0e:97:00:c8:ad:53:40:dc:f7:
80:97:e0:f7:f2:d1:41:6c:2e:9c:4e:41:13:b5:c8:
ef:b0:40:1f:48:f3:86:eb:03:c5:06:87:bf:cb:0a:
9b:4d:72:97:68:94:79:2f:38:d4:6b:2a:e4:e4:c2:
21:ea:b2:e7:c3:36:70:4c:9a:4a:8d:bf:e8:26:06:
2e:ba:1e:02:23:34:74:8f:f4:55:c9:eb:1b:f2:2d:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C5:2B:12:21:E6:C1:1C:74:6C:05:DB:34:57:80:0E:BD:E6:CF:3C
X509v3 Authority Key Identifier:
keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:32:5a:34:81:96:af:2b:b1:22:54:c4:bf:f7:2e:72:4d:92:
d4:d2:20:28:de:12:9b:0f:1b:8b:ec:61:b8:67:30:86:84:e2:
c8:5c:66:30:d0:10:29:e3:78:48:45:d8:71:68:5c:4f:25:46:
b1:c3:59:dc:f4:8b:63:5d:39:77:80:4a:25:21:60:51:49:33:
25:66:78:57:55:1f:9a:72:74:11:70:99:1c:e8:bf:95:0d:b5:
dc:4f:dd:5a:af:ec:19:a3:16:86:5e:37:89:48:36:df:30:08:
a6:98:0e:29:31:98:0c:36:4a:52:57:9c:a0:f5:08:60:3f:f5:
20:67:bd:b0:c7:f8:f7:3d:69:87:2c:6a:c2:5e:d0:37:f5:0d:
75:a9:a2:1d:6a:2e:3a:89:98:00:ab:82:0c:fb:40:92:b5:ef:
50:f8:e8:35:14:aa:8d:86:98:12:cc:72:ba:59:ff:30:70:93:
6d:18:01:3e:c6:aa:67:c0:3b:d2:5f:31:e7:e4:ac:dd:ca:c1:
d6:9a:64:c0:c2:68:47:83:9d:14:eb:8d:7d:67:01:4f:07:e1:
a1:ac:b5:a2:7c:93:c0:75:39:e3:2b:d4:df:2b:88:1a:61:4b:
da:bb:a5:e7:1e:51:02:78:c7:54:23:29:fd:1f:91:de:11:1f:
7c:3e:ed:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:07 2025 by rpki-client