Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: kHV194iCD92CFrmh5Z53IWgg6l8Zrulx+LVoH+rV36E=
Subject key identifier: 58:F4:EF:2B:42:2E:5A:AA:B1:D8:ED:8F:87:93:2B:0F:CB:FE:92:A3
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 0199FC8F53F4F2E63A1F90778313CD2E6A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 141E
Signing time: Sun 19 Oct 2025 13:01:15 +0000
Manifest this update: Sun 19 Oct 2025 13:01:15 +0000
Manifest next update: Mon 20 Oct 2025 13:01:15 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: 9L3DMkNLO+GeuB+rzDU4uBYvlf+88Bi6qUC0+QJf5R4=)
2: VBSMUM2E1eY-HeRIXiGsI4i681A.roa (hash: 9hPqZnbB+hAnaLIqMz7J1BKYjhJ96B3SoRz8LPWNz7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:53:f4:f2:e6:3a:1f:90:77:83:13:cd:2e:6a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Oct 19 13:01:15 2025 GMT
Not After : Oct 20 13:01:15 2025 GMT
Subject: CN=58f4ef2b422e5aaab1d8ed8f87932b0fcbfe92a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:99:2e:cc:a2:b6:fa:92:04:2a:e0:93:64:25:
02:4a:6e:fa:66:05:d0:e5:bd:50:30:fd:01:42:bd:
cd:f2:6c:e8:8b:3e:50:23:22:b8:6a:cc:6a:b5:8e:
24:aa:32:0f:09:32:2b:df:0d:45:42:25:dc:22:78:
af:30:15:59:35:c9:ff:ac:8a:52:25:6c:58:57:fe:
a3:2d:1c:f3:7a:87:68:68:f6:1d:d9:86:d8:d4:19:
ba:b8:27:a0:d9:3e:0a:57:9e:0c:2d:9a:8a:30:3d:
4f:80:9c:70:ae:6a:58:b8:79:96:24:46:95:e5:e4:
6d:ca:d1:42:9d:77:94:50:50:f4:4d:ff:14:7a:13:
8e:ec:fd:73:bc:71:77:c8:2c:57:a8:55:8e:1f:e5:
aa:4c:c8:92:1b:e3:80:c8:d6:44:b0:5f:95:0d:fb:
48:fe:ea:cd:2b:b5:d1:e8:a5:5c:59:75:14:1e:bd:
dd:37:a1:64:66:b4:db:a0:ca:87:83:46:fe:65:ec:
de:42:93:b8:64:7e:58:13:99:62:c8:d8:75:03:50:
90:28:b0:81:ee:c6:56:c0:93:73:a8:2b:7a:93:56:
28:80:d1:a4:b6:77:1e:04:97:ab:0d:f8:05:b0:99:
8a:77:2e:0a:1c:20:33:54:98:be:a6:90:02:b3:31:
87:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F4:EF:2B:42:2E:5A:AA:B1:D8:ED:8F:87:93:2B:0F:CB:FE:92:A3
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:dc:16:2c:63:4b:95:b8:b6:dd:c6:b8:4d:e4:b6:4c:78:6a:
17:e3:0b:cd:29:70:04:9f:4c:cf:7f:df:3e:cf:68:aa:bc:e6:
1a:20:35:a4:5b:e9:2d:4e:62:11:d9:72:3f:d4:bc:41:8a:cf:
f3:89:fc:84:5f:bb:3a:d5:dd:e9:5d:aa:ed:96:98:fc:9d:e7:
26:66:6f:bf:9d:bd:9e:78:b7:ab:98:b2:6d:a1:09:42:50:e0:
98:9e:a1:e6:54:ed:96:20:2f:88:89:5a:2b:9d:c4:38:e1:84:
0b:c3:06:c0:43:3c:82:72:31:57:a4:df:a9:6f:60:ea:64:66:
61:74:a0:60:1e:e7:d1:aa:28:90:aa:3a:74:16:a2:7b:f2:dc:
0d:fe:6c:cb:19:cc:6a:7d:f6:2c:62:c4:cd:4d:7d:68:50:7e:
80:b3:90:0c:1d:97:09:d3:90:00:ff:45:cb:bb:1d:a9:f3:09:
8c:d5:f9:8f:07:cb:29:fb:80:06:32:13:e5:03:7c:d3:40:3f:
4b:a3:e7:63:1c:ee:00:9c:c8:0f:3d:4d:52:d5:70:cc:75:7c:
56:6b:e0:3a:be:dd:fa:46:09:94:97:cc:2e:0e:63:45:dd:7a:
ef:f0:77:1a:6c:5a:2f:fe:e7:7e:a5:b6:b4:01:66:a5:dc:a4:
bb:e4:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:08 2025 by rpki-client