
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
File: CR2q09J9vPlNMAb7-6fh3dXSnxY.mft (raw, json)
Hash identifier: v81ILiWWHaKWQsTUUWDRFhjKf2dmpdp7BVyFNbgtbeQ=
Subject key identifier: 1B:4B:6E:77:01:6D:13:F9:42:28:A3:4F:2E:25:2D:5D:00:2D:78:71
Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
Certificate issuer: /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Certificate serial: 0199FC58D0755E9483BF1B7CF56924384520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
Manifest number: 07A0
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: Bd7FcffIWEfbujnp9WS-BYRh8lY.roa (hash: 1aqbGtOUu0Pm7rzIGfOGmwYKjDdAbGNYXLp563xVUt0=)
2: CR2q09J9vPlNMAb7-6fh3dXSnxY.crl (hash: fV9GWAayi+pfK3ndBIzs32bq4p9TU68OLTt9QZsl6nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d0:75:5e:94:83:bf:1b:7c:f5:69:24:38:45:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=1b4b6e77016d13f94228a34f2e252d5d002d7871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:17:f5:83:76:da:d1:4b:46:78:a6:90:ab:de:
cd:13:90:be:a7:67:80:63:0e:bf:6a:89:fc:28:c3:
1c:ba:94:f2:34:d0:ab:4d:41:3a:06:99:71:ce:00:
fe:0a:08:bb:a8:e7:bb:aa:b7:d9:86:ea:90:f8:d2:
6d:4f:3a:8e:44:1b:97:21:90:bd:cd:c7:8f:b6:41:
a6:80:0c:6b:7f:22:78:45:dc:aa:fc:9f:c3:46:21:
cf:a7:f4:74:dd:cb:61:c6:a9:f5:d9:12:e2:d6:35:
c1:e0:c4:87:22:34:f2:ad:a5:59:64:c6:8c:7a:d5:
ca:63:99:e4:a1:47:37:c9:6e:bf:26:29:80:26:9a:
03:4d:bd:46:dd:a7:72:7a:f1:cb:0e:b1:e0:8f:46:
e9:49:14:b6:a6:48:62:36:cb:7c:9d:31:c6:64:67:
51:72:b9:16:84:31:88:e7:39:b6:43:9f:a1:5a:89:
2d:41:38:55:01:0d:d7:0d:f1:ef:5a:7b:77:47:73:
3f:2d:ce:02:18:17:80:0c:b8:6d:c0:3b:17:6f:f5:
7a:24:09:d9:6d:83:6a:58:88:ee:2d:45:b4:aa:c0:
31:89:26:51:26:e8:07:cd:6d:3b:1b:95:ab:61:c5:
f2:26:19:95:07:72:a6:1b:4b:1c:b0:b0:5c:c4:71:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4B:6E:77:01:6D:13:F9:42:28:A3:4F:2E:25:2D:5D:00:2D:78:71
X509v3 Authority Key Identifier:
keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f0:4c:da:78:7a:bf:fe:ec:8f:a0:09:34:2d:81:7a:95:46:
25:4a:cb:ec:6e:ad:3d:68:d2:62:17:28:02:49:90:78:b8:63:
fb:e1:cc:40:50:4a:53:72:40:2a:7c:18:39:b3:88:3a:f1:aa:
9a:19:53:c0:da:e7:ab:2c:88:c3:b7:03:95:76:60:ee:8f:2a:
b8:37:25:f2:21:2d:fe:c9:a7:8a:61:16:9f:cb:91:89:41:d5:
c7:c4:38:3f:51:f7:e2:81:a1:1e:df:2a:88:9f:29:97:75:90:
27:33:5b:86:f9:7e:63:2d:76:da:f0:f7:90:77:2f:d3:78:1f:
54:7c:d9:01:a2:0b:b7:9f:c7:ee:9d:b3:ee:7f:34:ec:35:a5:
e7:af:a6:d3:97:4b:94:a8:c2:d9:76:37:a0:83:a7:d8:37:aa:
1f:e9:21:98:ea:48:36:39:04:5c:29:1d:5e:e5:cc:c0:d5:06:
33:7a:ca:81:d8:e4:29:77:2e:83:07:f7:f5:27:26:06:04:cc:
1b:b7:9e:40:84:98:17:23:33:5d:0a:4a:22:56:3e:00:c7:c6:
98:4b:47:e0:07:e9:08:d4:42:af:c2:e5:1f:72:ab:d7:8d:f0:
58:a6:a5:57:aa:92:7a:35:23:fe:af:ac:2f:b5:ea:b7:a7:b0:
70:00:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:33 2025 by rpki-client