
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
File: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft (raw, json)
Hash identifier: 8ha4Zye+ctMKDdZXVQRZcuRo3rb0lY7C/aVsTAZNVnA=
Subject key identifier: B2:D6:6E:2A:69:9A:AD:D5:19:B6:ED:05:98:7C:CE:F7:E6:74:5E:68
Authority key identifier: F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
Certificate issuer: /CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Certificate serial: 0199FB462035C5B69B1084A2A8EC2879513D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
Manifest number: 0DFE
Signing time: Sun 19 Oct 2025 07:01:40 +0000
Manifest this update: Sun 19 Oct 2025 07:01:40 +0000
Manifest next update: Mon 20 Oct 2025 07:01:40 +0000
Files and hashes: 1: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl (hash: B1ZdrDqUBrqbEs3aPoySCbhTIzFkv6MP4RVhtAaNnhc=)
2: ebpSJwwODthJSAtEhWxsuE5jmWc.roa (hash: DHoxuM9A5djnyMyGDG3UGPu6tBxqwYzj6AbU5sL1Pg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:20:35:c5:b6:9b:10:84:a2:a8:ec:28:79:51:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Validity
Not Before: Oct 19 07:01:40 2025 GMT
Not After : Oct 20 07:01:40 2025 GMT
Subject: CN=b2d66e2a699aadd519b6ed05987ccef7e6745e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:21:16:a7:ea:86:52:86:51:4b:a1:b2:ce:
fe:fd:50:1a:76:df:67:a2:d6:96:db:d1:20:da:a3:
41:38:4d:cb:31:71:36:a6:e7:82:7f:9f:63:a8:c0:
eb:b1:3b:b1:89:94:65:26:d7:ea:90:96:0b:2e:58:
87:60:c6:a7:38:2e:61:ad:48:03:5b:fa:0d:3c:67:
b5:5e:08:2b:33:16:b0:71:72:b2:8a:ef:d3:6f:8d:
d3:91:97:63:b7:7c:42:54:d7:24:89:fc:b8:98:aa:
a9:92:92:13:a2:b0:54:5f:60:a3:86:59:96:23:93:
dd:71:91:3f:55:20:02:dd:77:89:dc:4a:d3:85:bf:
2f:a5:fb:56:42:08:5a:b3:30:ed:aa:75:f9:77:38:
32:1a:a5:27:7c:13:b7:a9:60:68:2a:d2:e9:36:c5:
b8:67:dc:1e:20:34:5a:21:6c:2f:d6:dd:2f:0e:9c:
e5:67:ce:ef:47:5d:11:ac:76:bd:1b:8e:1a:7c:8a:
50:54:20:cd:c0:52:79:78:90:41:07:c7:93:db:e1:
04:3e:59:54:cd:e1:6c:a8:fe:f8:77:f2:97:1e:9d:
fd:bd:9d:47:58:12:4b:d8:84:57:f0:2f:1d:bf:1e:
85:ef:08:cc:ca:d5:8d:c1:1e:70:a9:ef:5b:5a:d6:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D6:6E:2A:69:9A:AD:D5:19:B6:ED:05:98:7C:CE:F7:E6:74:5E:68
X509v3 Authority Key Identifier:
keyid:F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:11:a6:ac:e2:49:d8:92:a9:ba:5d:7f:6d:c1:59:28:20:c1:
4f:81:61:c6:f2:77:8c:aa:14:3f:44:dc:39:6d:53:3e:9d:74:
94:1f:cf:ac:87:3d:1c:b6:e6:cf:3f:38:9a:4b:ac:54:07:e3:
59:49:6d:29:98:07:02:fb:f4:bd:e5:61:d6:e7:6b:6e:23:20:
f9:a3:e1:22:df:aa:7b:dc:7c:ff:35:fd:11:d1:ec:b8:8b:3e:
20:8f:7b:dd:92:0c:af:f2:04:99:54:51:54:60:22:3e:0d:92:
8b:41:56:90:d9:e2:df:30:bc:1c:3e:bd:a8:bb:26:fc:22:25:
3e:2e:ee:e7:ff:a6:26:70:ba:46:eb:30:30:c0:61:98:6c:00:
61:a2:a9:f8:0c:21:29:9c:6b:59:31:4c:c6:a9:5a:6f:01:0c:
3c:f8:7d:8b:32:1d:1d:5c:ca:5b:74:81:e6:39:cc:86:0d:58:
d7:b7:b3:dd:99:62:48:b9:3c:e2:98:c1:3a:21:26:3c:04:f6:
0f:56:db:69:62:9e:cb:1f:1e:4c:3f:f0:63:88:ff:e2:ac:05:
75:8c:38:20:6e:ea:4e:4a:d8:bd:9e:71:ce:36:fd:b1:cc:81:
64:43:80:97:87:4c:95:55:2c:02:c8:96:2a:cc:cb:c1:83:08:
9e:77:e7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:55 2025 by rpki-client