Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: e4WTZQj/aUj2OV0dbzOlU3AcICan2RcH45cqqlLD7lU=
Subject key identifier: A2:B4:02:FE:92:49:6F:87:AB:EB:80:17:74:06:59:86:E8:D5:B6:4E
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 0199FC218C37E2CEA696EF5B5513FEA98799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 07CB
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: eRoFI31oNI4O/QeTT00ZEhbhgzzzIyZtFTMW+KmNCEQ=)
2: goyOFyNzCSnjNoSGUslWBJblZKU.roa (hash: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8c:37:e2:ce:a6:96:ef:5b:55:13:fe:a9:87:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=a2b402fe92496f87abeb801774065986e8d5b64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7c:8e:e6:b7:93:fc:c4:c1:e8:75:fe:7f:d2:
7f:1a:2a:54:8f:81:4b:95:d8:9d:ca:1c:74:0f:f4:
92:f1:9d:e3:5c:e1:45:7f:57:94:67:fa:d6:ab:1b:
3d:aa:a7:50:b7:18:74:32:9b:1a:86:3a:0b:8b:1b:
36:77:b5:a6:c6:4f:5d:e5:0d:e6:68:16:7b:cf:2f:
d8:e3:45:fc:5a:0d:24:a2:ec:d3:23:e9:98:e1:e7:
2e:58:ee:07:b3:31:9c:fc:69:0e:0d:d2:c2:c3:b5:
67:89:f6:05:ca:ab:72:b3:ab:08:5a:62:32:4f:f3:
38:1e:64:3a:a0:2d:76:78:86:2c:b3:e5:71:62:90:
82:87:45:93:7b:3b:46:b3:ff:b1:01:2e:29:7e:12:
4e:51:7e:f0:f9:78:fd:bf:c4:1a:f8:62:ef:5d:d3:
15:a7:db:c4:25:9a:7b:7c:f9:b3:86:f3:ab:55:08:
2d:e3:6a:3c:d6:13:19:1f:3f:72:9a:ac:fb:68:c8:
2b:f4:a7:f1:da:6f:8f:ec:25:ef:fc:10:77:08:16:
e6:52:68:48:ad:ad:69:34:9b:18:8b:b7:da:67:c2:
3c:1c:a0:13:05:39:c7:34:93:34:77:58:0d:dc:8d:
eb:dd:ef:5d:89:75:7a:c6:5b:7c:b8:f6:00:ab:28:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B4:02:FE:92:49:6F:87:AB:EB:80:17:74:06:59:86:E8:D5:B6:4E
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2f:ef:4a:63:e8:ad:3b:d8:79:b2:2d:e2:e4:60:a7:59:a7:
37:ef:fc:09:04:38:31:6b:ab:3e:cf:1f:27:07:bd:0d:b8:d0:
a4:ec:02:98:03:81:cf:d4:60:a8:d0:7e:8a:a6:fa:32:58:f8:
43:78:e7:7f:17:9a:bc:d6:12:8b:07:b5:76:91:c8:3c:0b:ab:
3d:b1:12:91:52:26:b3:20:fd:13:d8:7d:7f:bc:5f:03:44:26:
7a:20:08:1f:98:dd:4c:d8:41:7c:43:a0:7b:46:a8:f7:4a:04:
f0:5a:c3:be:45:7f:af:7a:ed:3c:af:e6:66:54:9a:75:0c:c6:
a8:4a:d8:bc:b9:1c:40:65:88:94:ab:cc:b5:aa:f1:92:44:7f:
f1:7b:79:c8:fa:1d:68:01:07:0d:00:63:f2:38:7d:f4:00:47:
04:c6:d8:5b:7b:53:90:74:aa:37:21:6d:07:7b:fe:ed:55:e4:
f6:15:f1:62:65:47:5b:2d:cf:c0:c5:b0:51:6f:d0:60:e4:ec:
c7:dc:3a:1f:dc:60:3d:99:2c:05:d8:76:36:83:a8:2e:7e:b9:
bb:b6:c2:5b:8f:24:87:22:68:37:5a:e1:48:5e:55:3f:35:f4:
ac:b9:a6:e3:31:3c:2f:43:64:02:1c:e1:df:b6:c8:42:88:b0:
32:6d:c3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:50 2025 by rpki-client