Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier: 4k1BI91nhdV+OAyMP16G2Ac8PrXW+kWIFPwr7QGayyk=
Subject key identifier: 5F:84:0D:32:4E:BC:80:47:AC:E3:56:ED:52:13:DF:E5:98:20:CB:70
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer: /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial: 0199FCFD9030270AF71FA5D370C76106E8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number: 14D7
Signing time: Sun 19 Oct 2025 15:01:39 +0000
Manifest this update: Sun 19 Oct 2025 15:01:39 +0000
Manifest next update: Mon 20 Oct 2025 15:01:39 +0000
Files and hashes: 1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: Pb/xgJAJfpr+aRGmRp+RYkS0tfCYdWlFp3zPkSQcddA=)
2: rtyY9Cz1KYossj4NRjvNjMhwRZI.roa (hash: KYSFbkeXEHZUiKzf8OS4b0YogJmArNqO7BI7cVGBHSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:90:30:27:0a:f7:1f:a5:d3:70:c7:61:06:e8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Validity
Not Before: Oct 19 15:01:39 2025 GMT
Not After : Oct 20 15:01:39 2025 GMT
Subject: CN=5f840d324ebc8047ace356ed5213dfe59820cb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:86:34:cb:e6:c3:a7:a3:49:7a:0d:9f:1b:12:
d1:44:23:a9:f8:6e:bf:b6:83:19:78:0a:d3:dc:78:
e9:78:22:92:a2:86:fe:72:28:b5:76:fa:e6:16:95:
2e:5e:79:e9:2c:f8:fb:40:ca:61:07:bf:c3:7a:df:
d0:77:e6:87:cd:ee:ee:22:4e:0d:70:a2:43:b2:ca:
e9:48:78:b5:0f:33:6d:7c:9d:5c:6a:0d:83:a7:c3:
0e:57:e7:e3:de:80:16:c7:69:da:6e:ca:f3:36:57:
8c:1f:61:9c:a8:9f:34:de:3d:a1:e6:59:5f:34:05:
b0:f2:93:11:9c:bd:c4:4e:c1:b7:d8:e6:f7:c2:e0:
1b:c8:33:00:c3:79:86:b0:08:0a:e5:c3:22:53:6a:
8e:6a:bf:7a:b1:11:0e:c9:93:8c:b2:52:5c:cb:29:
1c:04:37:b4:d2:6a:ce:39:8e:ab:93:e3:e4:33:ea:
31:df:23:d6:18:23:00:84:82:11:bd:1f:93:5c:53:
ad:a2:93:4f:28:11:cc:86:10:dc:3e:16:b7:21:e4:
b6:a8:64:2b:27:e5:bb:d1:58:08:1c:09:5f:e7:7e:
f0:c7:16:76:ec:9d:e1:01:2f:a0:af:59:7f:be:c8:
b9:3e:d3:b7:26:e8:27:50:26:8f:d3:42:a0:b2:01:
f9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:84:0D:32:4E:BC:80:47:AC:E3:56:ED:52:13:DF:E5:98:20:CB:70
X509v3 Authority Key Identifier:
keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:63:de:4c:e9:85:8f:a6:77:e4:ac:d8:1e:42:8f:e3:2d:f1:
56:59:1b:42:fe:f8:c8:3e:c4:a8:2a:ae:2f:ef:69:dd:12:15:
a6:64:3f:86:19:88:40:28:17:02:fc:68:7e:d2:2e:fc:d6:d6:
db:60:39:ea:31:0c:e0:76:70:f1:26:43:99:d5:fa:63:b8:a4:
0b:89:5e:2a:10:85:fc:7c:51:99:1d:d8:ea:2c:a3:93:37:0f:
da:50:a0:08:a6:88:91:45:26:0b:b5:4e:ac:76:43:7c:a2:33:
7a:02:1d:bf:ed:bb:cb:05:3b:bd:f6:d2:f4:c6:6e:29:fc:8e:
60:b8:21:06:2e:ba:b4:f9:ca:4c:47:eb:37:bf:f4:8c:3e:43:
ab:94:65:51:78:1d:c3:c0:07:91:22:e8:d6:0d:74:50:46:3b:
3a:af:0b:21:8e:ab:7c:61:cc:23:90:12:21:a3:24:87:8a:1c:
e4:7c:d1:32:0b:56:e8:58:ad:55:2b:72:3c:b8:f3:af:bd:d7:
eb:f3:a8:19:79:db:25:de:e1:e5:b4:fc:26:e7:28:25:82:15:
38:65:80:05:b0:17:1f:ee:33:6f:0e:43:42:56:30:58:27:63:
e5:a5:76:e3:d2:49:94:4f:99:5d:94:d7:e5:e4:9a:20:57:c5:
c2:76:fd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:15 2025 by rpki-client