Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
File: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json)
Hash identifier: GfUUw+L73LG704vYVLsks4iLhvoaOiOLntDHuqokM3s=
Subject key identifier: 85:EA:75:41:A9:21:76:69:35:49:AE:EC:A9:4E:CB:2B:FA:B8:B9:31
Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
Certificate issuer: /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Certificate serial: 0199FCFDB7761D61F7521D90B4E48E60E96E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
Manifest number: 029D
Signing time: Sun 19 Oct 2025 15:01:49 +0000
Manifest this update: Sun 19 Oct 2025 15:01:49 +0000
Manifest next update: Mon 20 Oct 2025 15:01:49 +0000
Files and hashes: 1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: hL367ROQ5yLjzIhsKQ6oljBh8JY7zhz7UW0Z7VyDnVs=)
2: MDg3SGQivd4Gkhmi2ar9KtkbxPw.roa (hash: kp0L4LourZESQv5PNyUfmc/3RRGNdSH3s5Vl6lYig18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b7:76:1d:61:f7:52:1d:90:b4:e4:8e:60:e9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Validity
Not Before: Oct 19 15:01:49 2025 GMT
Not After : Oct 20 15:01:49 2025 GMT
Subject: CN=85ea7541a92176693549aeeca94ecb2bfab8b931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:17:6e:cb:07:c0:4c:d5:38:41:a5:e2:a9:
c0:dd:b0:f6:01:2e:e7:29:c9:e4:ce:7d:a3:48:23:
b1:9f:2f:1a:0f:fc:de:da:d4:0a:c2:58:3b:ce:aa:
76:b1:56:b8:74:ff:82:48:15:b9:35:db:4e:d9:7f:
55:5d:05:61:45:10:9f:1e:a0:34:b0:e8:76:64:ee:
42:a0:38:95:62:d7:8e:bb:f7:f4:f4:59:f9:a6:c3:
73:e9:87:84:2b:6d:27:e9:81:3a:25:6f:6b:e2:30:
98:36:7b:ab:7b:ff:03:e6:ef:62:23:61:41:c0:58:
89:1e:a2:92:b3:cc:5b:00:25:33:23:12:a5:97:28:
b4:3c:0f:b3:67:f1:f8:94:5d:f3:a4:68:5e:2a:9e:
b4:cf:5e:7e:4a:6d:b2:05:7c:88:05:58:52:b5:27:
7a:98:85:5c:72:98:14:c7:d6:19:26:c3:40:26:fb:
e9:51:1c:3d:4d:bf:37:94:c5:32:cb:56:34:96:2a:
ee:ea:27:51:5f:4a:12:e5:66:70:bf:a9:78:2a:8c:
1f:a2:af:b6:98:01:0f:91:8f:cc:e2:a8:bd:7d:5d:
1e:2c:db:68:1d:d6:bb:9d:ce:57:19:0d:ff:5b:30:
f8:a4:15:ca:e2:7c:3b:08:16:7a:65:98:29:15:8c:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EA:75:41:A9:21:76:69:35:49:AE:EC:A9:4E:CB:2B:FA:B8:B9:31
X509v3 Authority Key Identifier:
keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:98:8f:6e:4e:f9:e4:fc:dd:d9:52:39:67:a0:58:af:3c:6f:
e9:9e:a1:91:90:4f:a2:eb:9c:62:21:53:db:21:ce:49:4e:93:
10:0d:d1:0a:b2:27:e2:df:37:74:dc:a4:9c:ae:1a:6f:e7:25:
1e:72:a3:77:0b:ab:3b:64:61:dc:d1:7f:60:ca:62:18:1e:d1:
b1:10:4f:f3:b9:67:88:6b:6a:7d:50:0d:2a:bd:86:62:1d:e5:
e2:63:8b:d9:16:ff:4f:f9:8c:7a:83:8f:e1:0a:9b:29:2e:69:
41:39:77:87:33:46:56:43:fa:bb:96:4e:19:b9:00:f3:00:bb:
23:e9:97:fe:96:9e:22:9a:7b:74:57:ef:5e:ac:78:2f:30:88:
ec:12:22:5e:13:0e:1a:7b:a3:b8:d9:e3:bf:24:a2:57:53:18:
9e:c7:bd:dd:17:8f:23:cf:49:68:e4:b4:31:bc:40:42:3d:ae:
81:73:0e:03:47:b0:a1:b4:61:92:2a:e4:0c:42:8c:97:01:c7:
25:07:fb:e8:89:0e:70:a2:ac:05:40:77:2c:6b:71:0e:66:c3:
78:b8:df:04:aa:b6:97:d9:7a:04:f4:1c:1f:65:4b:8c:0f:28:
71:c8:3e:02:c0:86:9f:23:d2:6e:c9:9d:45:ad:3e:56:7e:2d:
c7:04:c9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:08 2025 by rpki-client