Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
File: V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json)
Hash identifier: wZQPCenR1ROa6/Qv9JIw1pWmMIAutVnxry56ICteu2E=
Subject key identifier: F3:40:61:60:D6:35:60:4E:C8:F7:BD:09:76:4B:8A:74:60:21:C3:E0
Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
Certificate issuer: /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Certificate serial: 0199FDD8DC86BC26C07E850BFC8761C99F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
Manifest number: 08F8
Signing time: Sun 19 Oct 2025 19:01:11 +0000
Manifest this update: Sun 19 Oct 2025 19:01:11 +0000
Manifest next update: Mon 20 Oct 2025 19:01:11 +0000
Files and hashes: 1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: 5STYnZH7gjBMLamzbQOKH/LM5VOZAa0Hw4BFGjiT06g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:dc:86:bc:26:c0:7e:85:0b:fc:87:61:c9:9f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Validity
Not Before: Oct 19 19:01:11 2025 GMT
Not After : Oct 20 19:01:11 2025 GMT
Subject: CN=f3406160d635604ec8f7bd09764b8a746021c3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:d9:b5:43:10:47:fd:73:62:80:95:1c:1d:
ce:4d:f5:4e:e8:c6:7e:73:7a:f8:3c:94:c6:f7:ec:
51:fd:4b:21:07:3b:eb:a3:4a:d6:ff:24:c1:40:e0:
aa:fe:58:8b:06:53:07:62:27:24:a3:1e:3e:cf:3e:
6e:b5:c6:f1:b6:2c:b9:90:d1:15:09:ce:80:7e:5e:
4f:fd:6a:6b:af:52:29:1f:2f:3b:fe:80:7a:10:b1:
79:eb:fa:58:c8:49:98:0b:40:df:bd:da:b9:2d:c2:
e3:e8:53:7f:5e:f6:ec:3a:d5:ed:b4:4b:aa:ad:28:
eb:82:1e:43:57:59:5d:b9:28:af:8a:a9:b7:19:c4:
4e:6d:8d:ac:7f:51:10:0b:0e:ae:85:2e:de:4f:a8:
df:7e:6e:c4:ac:28:24:0b:cf:f4:73:e1:e3:76:47:
3f:db:f1:91:98:c2:ba:dd:c5:8d:23:df:0f:54:70:
d6:38:6b:7b:35:d2:45:4a:4f:e0:97:46:09:e3:c8:
8b:3e:36:71:10:f2:53:db:e7:37:fb:f2:67:92:1a:
4d:4a:02:38:05:9e:a1:34:9c:93:bd:ab:68:ed:b2:
17:46:6b:3a:24:3c:22:2f:26:65:87:f3:07:63:57:
37:80:cd:88:10:ae:0d:dc:b9:52:1d:4d:04:9a:43:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:40:61:60:D6:35:60:4E:C8:F7:BD:09:76:4B:8A:74:60:21:C3:E0
X509v3 Authority Key Identifier:
keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:97:e3:0d:97:f5:e2:39:94:3f:df:c6:04:0e:89:66:63:0b:
58:7c:64:29:52:6a:5b:1e:3e:bd:b8:01:c7:81:19:18:13:99:
e0:8a:87:f9:f9:86:c1:2b:26:11:52:90:fe:8b:83:78:72:6c:
20:c4:c9:3f:15:96:bf:e9:b4:71:93:25:9f:4f:61:9a:fc:99:
1e:7a:2d:a0:f7:51:97:d3:2f:1d:8b:aa:a2:df:b9:09:f4:73:
15:95:a6:3d:b5:11:23:0d:00:12:1e:59:03:83:1a:49:43:67:
49:2f:71:8d:e2:19:68:fa:51:e0:79:85:27:b3:8f:82:ef:f3:
20:11:de:d7:be:56:47:4a:9c:70:2c:c7:df:8e:d2:0a:c2:4a:
19:96:65:4d:e5:79:1d:d8:8e:a3:66:ff:3e:52:0a:58:6a:70:
1b:c4:f5:72:8d:2e:f8:ef:f4:68:5b:2b:37:61:f2:3b:8d:7b:
5b:af:5c:db:e1:33:39:80:0e:8d:79:82:b2:53:83:b4:ea:ba:
b6:cb:34:67:ab:09:6d:a5:6b:d5:aa:3d:4e:b2:02:30:87:d3:
a5:49:af:5d:29:97:19:cd:ee:75:cc:19:b4:5e:4a:5c:57:ce:
f6:bf:58:5a:c9:d7:f1:c6:26:2d:12:36:95:9e:98:84:ad:87:
42:d6:7d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:46 2025 by rpki-client