Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
File: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json)
Hash identifier: ZD/T7deiHfiOChlACtQRQVvZCQxSGXJweLPUXiDreOA=
Subject key identifier: 64:EF:43:8E:F3:FB:E3:D1:18:E8:EB:3C:7B:34:64:FE:D5:D0:9C:6C
Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Certificate issuer: /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Certificate serial: 0199FAD857B7986468A442A4D47A19CD7E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
Manifest number: 7C
Signing time: Sun 19 Oct 2025 05:01:46 +0000
Manifest this update: Sun 19 Oct 2025 05:01:46 +0000
Manifest next update: Mon 20 Oct 2025 05:01:46 +0000
Files and hashes: 1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: HlEyZPCWGhNkJmMoe9cFcH/Rf/Lyuq2Sm7cGqtdrUSA=)
2: f1Mto9GzcPc4M2Oix0yJMh6toWA.roa (hash: 84CvNJo6FYo7qJUGi59PScidN7rKl7gKNL3hWWKJ6Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:57:b7:98:64:68:a4:42:a4:d4:7a:19:cd:7e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Validity
Not Before: Oct 19 05:01:46 2025 GMT
Not After : Oct 20 05:01:46 2025 GMT
Subject: CN=64ef438ef3fbe3d118e8eb3c7b3464fed5d09c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:0e:5c:1c:6a:4c:da:b5:72:3f:67:70:57:
b8:29:ba:61:71:fb:7a:60:e4:72:26:4f:0c:21:d7:
b1:6d:f3:ad:32:91:cb:13:93:74:91:4d:b7:53:0a:
8e:96:73:e3:88:a7:da:89:e8:00:e4:c7:2a:b0:f5:
f1:44:26:b0:97:fb:4f:a0:08:bb:63:6f:c7:1f:8f:
bf:7a:1c:19:a0:6a:2a:1e:17:10:d7:3b:d0:4f:48:
31:40:a9:5a:d8:d7:8c:10:20:20:0c:83:b5:5f:3c:
e0:20:28:df:9a:74:a6:08:83:e7:5c:b5:0a:47:07:
4f:5e:a5:3e:19:66:d7:96:ba:bc:bc:c7:30:96:28:
53:ad:c2:41:c9:17:f1:b9:04:77:5e:b7:87:09:c0:
a1:32:85:58:6a:ff:49:b1:7d:37:4e:da:cc:d3:d5:
39:12:f8:71:9a:16:0d:23:36:97:83:c5:e0:e0:06:
c4:fb:78:bd:b5:a8:c6:45:fa:f1:60:04:fc:37:f0:
18:a0:fa:f5:0e:e5:d1:02:f3:23:1f:b3:3d:85:58:
b3:fb:b9:a4:d0:f7:51:e6:df:70:01:57:16:7f:7e:
03:86:8a:3f:3b:cb:49:40:dd:6d:d3:88:d9:92:6f:
13:3f:4b:43:b0:e7:5c:db:e9:fb:c8:ef:28:44:76:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EF:43:8E:F3:FB:E3:D1:18:E8:EB:3C:7B:34:64:FE:D5:D0:9C:6C
X509v3 Authority Key Identifier:
keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:68:1b:7d:4b:9c:74:70:f2:7d:dd:1f:67:0c:cd:f8:dc:a3:
d2:a1:29:bf:a6:af:bd:62:46:e9:be:40:2d:6e:9d:0d:12:55:
fb:ba:c2:65:98:2e:91:b3:73:ad:77:6b:82:a6:2d:98:12:c0:
39:09:5d:ae:53:14:bc:17:3f:e6:d6:c4:10:99:04:01:90:05:
43:72:a3:b8:88:fd:99:2a:2f:32:a4:0d:8a:dd:6c:8f:ce:26:
9e:52:45:5d:d9:59:b8:bf:a4:12:1b:61:ef:a1:80:f1:e3:84:
21:29:4a:a5:29:fd:e4:f2:51:ae:08:9f:22:8d:1b:ca:2d:b8:
1b:b6:34:38:70:75:15:6d:c8:65:3a:cc:8f:36:cd:5a:2c:c6:
92:da:be:43:71:c7:23:03:4d:ca:03:7f:64:cb:ec:41:a9:ab:
e1:a6:78:ca:f0:00:90:15:0e:e8:cf:d2:32:3d:ad:6e:87:cb:
32:43:dd:ef:7b:c7:3d:93:3e:9a:a3:7b:49:a5:d3:4c:0a:a1:
dd:1b:af:a4:bd:60:ff:98:71:0a:ee:c2:a8:b9:c3:fa:89:6a:
26:01:fa:5f:1c:a1:63:a8:53:c8:52:44:63:c1:e2:c5:69:2c:
c2:13:a7:f8:d1:04:eb:db:df:3f:8d:ee:ad:44:1f:90:5c:b5:
11:ba:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:57 2025 by rpki-client