Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File: f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier: 6VMLdQm0FT5s6CK5NMW3jgjthsKXArIY4TGzNCOf5BQ=
Subject key identifier: 72:EE:35:9D:46:3D:17:B8:07:1B:6F:E8:C1:79:8A:F4:76:7E:C4:9B
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer: /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial: 0199FCFDAA4E5D1ED41FFC79D71D4E1F02EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number: 126A
Signing time: Sun 19 Oct 2025 15:01:46 +0000
Manifest this update: Sun 19 Oct 2025 15:01:46 +0000
Manifest next update: Mon 20 Oct 2025 15:01:46 +0000
Files and hashes: 1: CrYUOPAFPEtuHkKyJhzQE8UrUoM.roa (hash: 9NqhKYyaxDuqPrOUEVd5P1RqZQxAPP5YeCq0DGdnu/4=)
2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: 85yVB3lnhEPy0vE9XcM4C0k/GtC5jQiGTdSKKw3RXtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:aa:4e:5d:1e:d4:1f:fc:79:d7:1d:4e:1f:02:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Validity
Not Before: Oct 19 15:01:46 2025 GMT
Not After : Oct 20 15:01:46 2025 GMT
Subject: CN=72ee359d463d17b8071b6fe8c1798af4767ec49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:18:0c:5c:49:97:2e:07:69:7f:86:50:9f:
de:1b:b6:e0:fb:94:e8:74:b7:d8:bf:3f:68:9a:55:
13:83:dc:e7:63:1c:c7:67:b9:09:6c:f8:83:2e:d2:
0a:fc:35:e9:ac:93:c8:1e:b9:06:3c:97:97:ea:fe:
6e:f2:6e:d8:ec:0e:8e:98:77:8c:f1:22:c5:62:05:
1e:6a:61:25:27:d4:a2:79:29:0c:02:dc:6d:09:f1:
32:99:0e:5c:58:fd:d7:35:ec:c5:1e:d5:94:76:7e:
d7:c2:48:48:54:4e:19:14:21:cc:c5:e8:21:10:13:
03:7a:0c:70:80:11:72:5e:5f:fa:da:18:36:a7:f9:
35:8e:d3:63:1f:21:d5:f5:5b:79:e4:79:d5:6e:77:
e5:ad:f2:33:b7:ef:ce:ee:b2:8d:0f:09:ba:cc:6d:
db:8d:a3:c8:57:60:f5:45:8e:2f:1e:b6:de:5c:83:
aa:06:51:be:15:4a:3b:ad:bf:b3:27:02:ab:bf:dd:
d9:36:0e:25:b6:ce:89:7e:89:58:19:7d:03:6c:29:
0a:92:e6:8e:5f:de:d3:88:30:32:a8:58:3e:b7:20:
c1:7d:27:08:ab:ae:ef:67:38:3b:20:00:10:b7:0e:
6d:86:54:c6:4f:d5:b9:1f:3b:ea:a6:bb:98:48:ba:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EE:35:9D:46:3D:17:B8:07:1B:6F:E8:C1:79:8A:F4:76:7E:C4:9B
X509v3 Authority Key Identifier:
keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:36:27:6f:af:80:fb:ea:dc:ef:d8:2a:b4:9c:08:e3:f0:77:
6f:2b:28:81:02:86:91:9d:a4:4f:55:71:7e:8e:fd:8f:d5:d1:
86:6e:22:f5:c2:55:d0:25:e0:d5:cc:7d:69:c0:20:eb:e7:e3:
fe:6e:f6:19:cd:46:b2:c6:d1:0f:13:59:fc:90:96:bd:f4:5f:
f5:ac:e4:d6:75:e5:4a:3b:9e:c6:ee:b9:c5:d7:75:6e:75:a9:
15:a1:9b:4e:4b:ef:86:d5:1d:5b:9f:08:02:09:66:45:2d:92:
a4:83:8b:fb:66:76:c1:38:c1:fc:d1:cd:70:a3:eb:ed:bc:cf:
ed:30:be:99:2b:40:e0:a5:e5:77:21:f0:2f:ce:f6:ff:e0:68:
d4:19:0e:92:ad:d3:0d:07:95:f6:c8:72:e0:d6:4e:4a:47:a7:
f3:9d:07:6d:3f:9c:fa:91:96:08:f2:64:a0:1a:15:9e:f1:ae:
9b:1d:29:78:69:56:5c:6a:7e:a3:85:52:5c:41:82:cb:1a:0c:
16:f6:d9:7c:09:f8:05:ca:f1:1d:e8:2a:b7:77:1c:4c:dd:41:
41:00:1a:0f:0b:1f:31:fa:88:f5:03:0a:fa:63:48:dc:4c:f5:
7b:c9:9e:15:74:96:0a:1a:98:91:d4:ca:d4:cb:42:7b:a3:e1:
ca:78:61:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:45 2025 by rpki-client