Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: 9BnHgqeiUleuZ/Y9wEP5Hjjo/hIapYdcv2bwEAOgCI0=
Subject key identifier: 0B:E1:93:5F:3D:6A:6C:43:1D:7B:C1:5E:8F:7E:E6:0E:87:75:25:AF
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 0199FBEB96A1539E35331129C3EE5EF73509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:24 +0000
Manifest this update: Sun 19 Oct 2025 10:02:24 +0000
Manifest next update: Mon 20 Oct 2025 10:02:24 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: UZoob3/b/sApa7f+okLwa/cMM1YM5Kc+zJcHvZfLwZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:96:a1:53:9e:35:33:11:29:c3:ee:5e:f7:35:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Oct 19 10:02:24 2025 GMT
Not After : Oct 20 10:02:24 2025 GMT
Subject: CN=0be1935f3d6a6c431d7bc15e8f7ee60e877525af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:37:70:e2:c1:4c:fa:64:9e:25:c9:7d:4d:
f6:f2:22:ce:12:de:39:7a:a5:cb:31:87:c6:a3:06:
3d:5f:b1:7a:a4:3a:f5:b9:53:5b:f3:c2:4e:b2:52:
72:ea:4c:1a:51:2f:ab:16:69:15:3e:44:7d:b6:8e:
d8:fa:bb:70:1f:1c:dc:4b:ab:ce:d4:70:85:49:09:
f5:4f:27:f6:92:1d:3f:28:90:5f:33:78:c9:c4:72:
25:0f:ae:c5:57:15:c3:1d:8f:af:84:b1:51:2a:da:
90:b4:32:10:70:f4:07:f5:0e:37:00:63:af:9e:1a:
c1:21:5e:84:7d:35:32:c9:5b:ac:59:41:ea:f1:ce:
b4:bb:df:71:a9:93:de:22:3b:11:86:49:ca:0d:6e:
b2:07:36:ea:3e:2e:50:2d:13:9c:a8:fa:85:97:b4:
29:e9:a0:d5:1f:66:cb:e3:a7:aa:7b:de:ca:93:d4:
b8:f2:25:f0:db:cf:7a:65:f1:61:39:e9:9d:41:5b:
d0:7e:aa:2c:32:6a:0a:ab:3c:95:ef:3e:26:fd:95:
fb:67:6e:99:71:c3:0f:ed:93:b4:29:e7:87:d7:e8:
2d:65:e6:ce:3a:6c:c0:62:66:81:fd:d1:89:28:d7:
29:ac:68:8a:55:55:55:0f:d3:f6:f4:b5:f5:8f:43:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:93:5F:3D:6A:6C:43:1D:7B:C1:5E:8F:7E:E6:0E:87:75:25:AF
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c8:44:90:83:f9:a2:3f:5c:13:7b:cd:17:6f:f2:bb:fb:8e:
fa:8c:72:34:de:a5:2c:57:d5:70:d2:b5:11:a7:60:98:b0:a1:
ba:29:a1:4b:80:7d:f8:35:0a:b0:15:68:0d:91:6a:5a:7b:dc:
45:1b:7a:b9:e2:b6:45:08:24:f1:b7:f5:1a:c6:13:75:bf:76:
ce:09:22:d6:0b:db:ac:d9:73:e6:c5:19:cc:58:02:db:43:eb:
f2:ad:1f:ce:9a:a4:09:2c:a2:15:27:00:25:d0:e5:9f:ba:9f:
2a:1f:e7:70:b7:45:4f:54:0d:59:bb:a9:74:5f:14:10:29:18:
0c:66:0f:db:68:e5:b1:0b:3f:e3:4a:62:00:96:b9:47:1b:1a:
e2:15:1f:aa:00:38:fa:73:8c:ae:f5:43:13:89:cd:97:0f:20:
25:72:1c:76:fa:5f:ee:dc:d4:ef:a9:95:02:c7:54:5e:e9:0e:
82:d7:f1:25:e4:b8:54:6c:89:54:06:15:b8:55:97:6f:4f:3b:
4b:c5:b9:0b:19:95:ad:25:35:33:43:d4:5e:4a:72:37:4a:c3:
30:1a:47:fe:02:12:1a:90:85:b3:3d:87:4b:0d:67:cc:38:bd:
42:94:76:1e:c2:ae:4e:33:3e:e0:ac:f7:fb:ce:05:4b:71:f7:
ff:19:1d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:21 2025 by rpki-client