Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
File: 9q2iC9mLq990w9Vs14raZu2HoUg.mft (raw, json)
Hash identifier: IqEf0hdUN0onN78t67heGdFSiMny3sq5nJ/AiM2ApHU=
Subject key identifier: 8D:97:FC:B1:E1:AA:E2:22:A7:5F:84:D5:3D:E6:2F:7C:C4:4F:86:6C
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 0199FE46F0A6B4FF7A5A05C86F6684AA9620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
Manifest number: 0AAA
Signing time: Sun 19 Oct 2025 21:01:25 +0000
Manifest this update: Sun 19 Oct 2025 21:01:25 +0000
Manifest next update: Mon 20 Oct 2025 21:01:25 +0000
Files and hashes: 1: 9q2iC9mLq990w9Vs14raZu2HoUg.crl (hash: BZq9mYFkGuON7Kq8NvuaqQ+c48+J2ZSYnNVk5+ROkl0=)
2: s-x7d6jJvL70qmh-6OnRq31TKUk.roa (hash: 2DbOtbQA27lHr7qNRTboKovEtkv/3fhOLEwI/H6E4D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:f0:a6:b4:ff:7a:5a:05:c8:6f:66:84:aa:96:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Oct 19 21:01:25 2025 GMT
Not After : Oct 20 21:01:25 2025 GMT
Subject: CN=8d97fcb1e1aae222a75f84d53de62f7cc44f866c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:99:27:7f:97:22:20:e2:90:aa:c1:61:c5:
a2:06:0c:f0:bd:c3:b6:e5:11:e3:92:4a:9c:dc:86:
96:fb:29:9f:0c:db:77:e6:bb:e7:e0:25:e3:c4:90:
de:47:e8:80:77:2b:a8:57:57:16:f0:b5:95:99:bf:
94:eb:c4:a2:de:ea:db:a5:a8:37:cd:89:a6:76:58:
1e:49:dc:7c:d1:74:44:c1:39:50:80:5b:ec:2b:e0:
37:75:73:b0:5c:4b:27:ee:60:c7:13:d5:0e:22:9a:
4e:7d:82:91:f0:1c:23:66:fc:e0:12:79:ef:1a:8c:
8d:9a:16:ff:51:fa:45:64:2d:c2:30:22:e3:0c:50:
33:a5:27:e3:46:1b:b1:2c:f2:e0:98:f7:d2:44:95:
81:cd:d6:34:b1:75:53:43:12:d6:0b:e0:ec:a5:c0:
64:f5:06:0d:db:b6:01:a9:1a:e3:36:97:72:ed:27:
11:c2:31:3e:44:e6:2d:d3:d0:99:77:32:5c:0b:06:
e1:b4:e7:06:04:f1:58:e5:15:59:b8:42:08:eb:4e:
d4:77:94:bc:1f:06:99:59:83:d7:bc:17:ba:a4:dc:
d5:6b:f5:ce:39:3f:fb:f7:67:28:a8:45:7a:80:2b:
8c:c5:8c:b5:07:51:25:76:30:26:f1:46:d3:47:0e:
52:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:97:FC:B1:E1:AA:E2:22:A7:5F:84:D5:3D:E6:2F:7C:C4:4F:86:6C
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:57:42:a5:a1:38:6d:22:34:ef:63:6f:12:76:ab:57:7d:16:
32:19:23:bc:76:e2:18:6f:25:94:98:cb:d2:ff:c8:02:6b:14:
02:d5:30:42:b1:47:b3:b2:dc:6f:fd:13:45:37:5a:6e:67:e3:
b6:4a:e9:45:39:66:d7:57:8c:38:96:f7:3c:02:39:0a:37:b6:
61:1f:fb:f9:98:2b:4b:55:04:56:f1:35:d8:11:f6:33:a6:f3:
8b:d5:fd:1b:03:57:f5:5a:9b:31:2d:45:07:7b:66:e4:56:38:
e7:e0:42:46:b0:64:fc:87:33:e6:db:b2:3c:a6:7c:1f:06:0e:
c1:5d:39:cd:b2:85:37:59:40:81:59:47:0a:75:48:eb:b0:4f:
50:d3:2c:c0:fa:6c:4d:7e:df:21:26:be:7b:43:61:b7:9b:7c:
1c:ef:d3:d1:2f:dd:c7:cc:a4:45:d5:ee:bf:00:00:c1:3e:5e:
e9:ec:2e:f2:2f:e1:97:be:19:68:05:fb:d0:73:56:32:27:57:
9f:07:c0:5d:f9:84:4d:60:2d:c4:66:72:72:1e:f3:41:fd:51:
44:f5:97:ab:a5:c8:4a:9d:25:a4:c4:28:9d:20:cf:47:87:ea:
ce:fe:63:3a:c5:9b:26:c3:64:82:2f:c8:7e:77:e5:77:ba:f4:
1f:0e:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:41 2025 by rpki-client