Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
File: 9JUCyXSCsoUChSyX75vToKKl6fA.mft (raw, json)
Hash identifier: xS6Vp2/+w9i+O4GRKRl4dpEv+XIAvjp4b+RZ+dXSJpE=
Subject key identifier: DE:6D:2B:A3:E9:9E:07:62:20:33:C9:66:6E:5D:EF:18:38:7C:B0:12
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial: 0199FD349152F63EBA0DD8C8A7FFD5088C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
Manifest number: 14B3
Signing time: Sun 19 Oct 2025 16:01:44 +0000
Manifest this update: Sun 19 Oct 2025 16:01:44 +0000
Manifest next update: Mon 20 Oct 2025 16:01:44 +0000
Files and hashes: 1: 9JUCyXSCsoUChSyX75vToKKl6fA.crl (hash: 6azE0R7NQw0P8nYeXtCkwD8XrLqiyQo0p4qw7lcnGT0=)
2: EaZvYH2YGiO37NZ1bGFHkmEdMcw.roa (hash: HSZLZ0cKEKUvUtWkwWARshBwReQDxlGBdY+EDDOfXjA=)
3: NbJCCt6mZbGhQhsVck9Ye84ql_A.roa (hash: 1GHJ4CqSoQFt3IGPoRuzPcM9vgZHBXB7ib41DM1rbg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:91:52:f6:3e:ba:0d:d8:c8:a7:ff:d5:08:8c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Validity
Not Before: Oct 19 16:01:44 2025 GMT
Not After : Oct 20 16:01:44 2025 GMT
Subject: CN=de6d2ba3e99e07622033c9666e5def18387cb012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:b2:0f:19:c1:06:0a:b1:c1:f0:dd:f7:b6:
7e:67:bb:1e:ac:8b:29:48:34:f3:9d:c3:7c:f1:b9:
88:20:53:98:eb:db:ce:a1:e0:a9:6a:8d:ba:72:97:
8b:cd:77:96:b3:98:bb:b9:02:76:42:6f:ff:14:55:
f1:11:af:d1:04:ab:8a:13:24:9a:42:36:9c:3e:8c:
eb:94:8d:8a:3c:c1:b7:dd:0b:6d:61:86:26:c7:6d:
84:2a:77:a4:6f:39:6f:64:b5:8d:e6:af:3d:fc:99:
8d:e9:70:42:4f:1e:7f:a9:95:9a:46:e0:98:b4:65:
46:ba:9f:5c:b8:58:d0:f4:3f:16:af:b9:5f:b4:34:
f3:f2:f6:13:89:ca:1a:85:14:11:2a:65:26:cb:e4:
bc:ea:10:66:76:1e:fb:c9:b7:af:ef:5e:ff:45:95:
8f:ff:12:99:a5:97:52:d2:b8:3c:22:93:b6:19:60:
a1:54:cc:20:ff:b1:c0:f0:23:4f:9e:b7:24:cf:7b:
4a:85:00:c0:56:da:f1:f8:9a:94:16:60:1c:dd:95:
d0:23:79:0a:d4:e8:0c:1f:97:33:16:30:92:9c:6f:
08:96:b1:f7:72:eb:e7:a0:d5:c6:f6:f5:5e:b5:3e:
4a:b6:9f:da:5f:de:a7:a6:e1:ea:cf:de:6f:9c:79:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6D:2B:A3:E9:9E:07:62:20:33:C9:66:6E:5D:EF:18:38:7C:B0:12
X509v3 Authority Key Identifier:
keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:90:60:46:0d:18:20:29:6d:06:78:b5:b1:50:75:bd:bd:15:
09:04:a5:61:6b:d8:7a:73:b9:2e:d0:98:73:0a:6a:16:ff:c6:
16:05:a3:9c:e9:da:a1:65:fa:01:09:27:23:f1:0e:2a:be:10:
42:58:ae:a7:7b:8b:1d:bf:38:29:f8:26:a5:0e:04:9d:1f:6b:
a1:35:3f:26:7b:fd:84:cd:07:ce:5a:35:61:b2:f3:c9:bb:77:
b6:aa:4d:d5:21:91:db:ca:a3:8b:7f:07:26:d0:7d:91:79:29:
f9:0a:33:65:52:e1:4a:17:9b:f4:78:9b:35:69:69:b7:40:43:
89:e9:b6:ab:37:d3:e0:a6:98:05:d1:71:80:c4:7b:5c:cd:67:
6c:05:58:1c:13:65:4d:fc:62:bf:d0:c6:7f:6c:27:6a:83:ad:
cf:1e:b6:0f:e6:eb:11:ef:1a:02:78:52:e4:98:dd:19:a9:37:
2b:27:ad:63:f1:59:e0:0e:c3:b4:b3:55:d3:ba:12:ac:5b:e9:
78:5c:87:df:d8:35:e1:86:94:10:f7:4c:5d:c4:79:d9:be:d7:
4e:fb:a5:61:24:79:65:2f:af:93:46:4b:67:d6:d5:1f:2a:1c:
66:11:4f:42:e9:22:05:61:6a:c8:e8:7f:d3:53:f1:15:bb:36:
08:2c:ed:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:11 2025 by rpki-client