Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier: 1YKg0hdBr4pQQqP/9AAFn0VF/iWPgeyGxI43RrzG+0o=
Subject key identifier: DA:27:2C:CE:CC:4A:7A:CB:2D:0D:DF:A9:E4:23:8D:EA:CA:5B:94:79
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 0199FDD923571F16644E33A2035F2BC8CA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number: 1252
Signing time: Sun 19 Oct 2025 19:01:29 +0000
Manifest this update: Sun 19 Oct 2025 19:01:29 +0000
Manifest next update: Mon 20 Oct 2025 19:01:29 +0000
Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: /khKWGmj8eiz9RtnLi0aKg9n+quHGK1s4kWEugYIV90=)
2: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (hash: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:23:57:1f:16:64:4e:33:a2:03:5f:2b:c8:ca:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: Oct 19 19:01:29 2025 GMT
Not After : Oct 20 19:01:29 2025 GMT
Subject: CN=da272ccecc4a7acb2d0ddfa9e4238deaca5b9479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:c8:4d:2e:7a:5f:ed:f9:b5:5f:20:db:50:
28:fd:19:e2:32:5f:ea:11:ae:b9:5b:9d:92:65:7c:
07:9b:f6:1b:78:d0:54:96:27:1a:7e:f3:ff:0d:cb:
97:f2:16:0c:9f:33:2d:98:2c:f9:21:09:81:cf:34:
5a:ea:6d:28:18:f3:dd:87:3c:5b:4b:59:af:7d:15:
d5:a5:e0:e2:ef:be:49:eb:57:a1:6d:e0:5a:93:b2:
f3:66:ba:74:94:2f:7a:28:d1:1e:e5:19:a6:98:fd:
6a:b5:ea:dd:f6:d0:cc:d1:af:75:99:b3:ec:61:2c:
e4:cc:e7:99:3f:3a:61:48:15:8a:ae:6c:ab:6b:f5:
02:1a:59:73:0a:94:60:40:8e:9b:63:26:50:29:b1:
01:2d:dc:35:7f:6f:b0:90:5e:87:5c:28:86:e2:bd:
77:ac:12:a4:fd:8c:51:27:8f:76:38:b1:cb:38:1f:
17:1b:c7:60:df:70:2f:0d:1d:04:22:8f:55:15:58:
7e:65:df:ff:d1:41:92:cf:0c:b8:af:21:18:07:0b:
8c:d8:ff:79:3f:95:74:87:15:50:04:11:b2:31:b1:
94:1f:26:7d:85:af:a1:75:7f:eb:a9:9f:7d:e7:f5:
01:53:02:42:ec:0f:67:ff:34:82:b9:76:76:56:c5:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:27:2C:CE:CC:4A:7A:CB:2D:0D:DF:A9:E4:23:8D:EA:CA:5B:94:79
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9a:54:49:15:df:4c:c5:34:57:3b:cb:b5:c6:75:3f:99:de:
3f:a1:d3:f2:e7:65:8d:c9:ca:e6:2b:7e:8a:c7:a6:b3:19:46:
a8:ca:7d:97:d4:90:41:93:01:de:1d:d8:e0:ff:72:20:16:95:
ad:c4:4f:60:92:36:37:cc:67:ec:50:fa:5e:d1:b6:21:c3:46:
21:7d:ac:31:17:01:22:42:65:39:dc:66:64:f2:7a:d4:4f:32:
f8:0d:05:28:3d:6b:7e:38:80:50:81:9a:8d:02:88:cf:5c:fd:
77:06:75:ca:21:42:75:c1:c2:c5:39:6c:f6:59:54:27:0a:ce:
e5:a0:62:0a:e4:44:bb:b7:87:f0:f2:0a:f5:37:28:e3:5d:84:
83:bd:89:61:89:c8:a1:6d:1c:62:0f:5b:3d:03:6e:6b:86:3e:
13:c7:88:57:93:3e:95:e2:44:55:57:d3:24:f0:30:37:98:c3:
fa:3c:1a:8c:59:13:fb:4b:19:3f:6c:f1:db:fc:08:7e:e3:79:
75:29:1f:d2:e7:32:ef:51:46:2a:59:6f:6a:62:1f:49:6b:d1:
64:37:5e:ac:9c:a8:34:4d:48:2a:0f:2f:f5:a3:d3:35:6c:1d:
05:15:0c:79:8d:66:a7:4c:07:ec:0f:e9:30:e3:e8:32:82:e3:
3e:64:10:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:51 2025 by rpki-client