Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: oieMcs09l2Fw41YxS83MmWUhspzGNBsDS+CvtIVeXUs=
Subject key identifier: 71:D6:0A:94:DC:D4:19:9E:E7:A6:90:70:3F:C3:AE:F8:23:9F:E2:DF
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 0199FDD98A8ADEA2DBEFF9D09A422F45486B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 0AAE
Signing time: Sun 19 Oct 2025 19:01:56 +0000
Manifest this update: Sun 19 Oct 2025 19:01:56 +0000
Manifest next update: Mon 20 Oct 2025 19:01:56 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: dYzsIL0BScVK0S0xQaw3gH5Fic/qG09u7SL1vAyIpCw=)
2: VwdOphY_UgRaqYf3Kg3b6kzwRf0.roa (hash: RncMvUV6R6LkD/qjU1iWGPE4PHApbhUX2ZP/1640Hn8=)
3: mlu6XIXNKNHqGWfvXZrW1IO6Mng.roa (hash: q1iBqwACk42VM5awfXg78+LQaSKbxFwEqGdC0JqAxjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:8a:8a:de:a2:db:ef:f9:d0:9a:42:2f:45:48:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: Oct 19 19:01:56 2025 GMT
Not After : Oct 20 19:01:56 2025 GMT
Subject: CN=71d60a94dcd4199ee7a690703fc3aef8239fe2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:fa:71:76:b5:cb:1d:a2:b9:e8:93:02:0e:
f2:d4:0d:1f:9c:47:f4:cd:d1:be:ae:59:bf:68:9c:
3c:5d:ed:8b:88:be:7a:26:20:da:ed:bb:b5:45:e9:
41:de:52:d6:02:bc:27:78:ff:75:6a:7b:48:4f:be:
56:9d:9d:b9:29:6d:2b:16:42:ed:10:d0:1e:bc:a2:
78:1d:b5:21:c3:50:7f:eb:53:16:cc:69:53:f5:3f:
dd:d9:75:51:9c:31:49:be:ad:dd:84:19:83:9a:cc:
18:b5:1a:29:9d:fb:27:28:42:43:cf:4c:71:b3:c7:
b4:33:93:1f:3f:fd:17:92:c1:8d:68:7a:1e:ab:2c:
8c:ff:d2:b9:22:aa:8f:02:aa:ed:4f:70:43:f8:e2:
a4:bc:f0:16:4e:97:15:3e:9c:66:7d:4c:b1:d0:aa:
3f:1f:7c:36:40:70:6d:34:27:51:12:7a:27:1a:8d:
5e:2f:63:e8:72:d8:79:51:c2:80:76:c1:97:cd:4f:
e0:52:34:a3:f5:d4:47:f5:e4:45:f5:d0:f6:9c:1d:
f5:83:1c:36:d8:0d:41:1c:7e:47:83:ad:16:18:5d:
39:92:9e:25:50:27:4b:da:ad:ac:f5:fc:f6:87:d6:
78:3d:d6:c1:60:a3:98:3a:db:43:6d:75:b7:df:68:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D6:0A:94:DC:D4:19:9E:E7:A6:90:70:3F:C3:AE:F8:23:9F:E2:DF
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fc:35:7d:62:d2:d5:3a:ec:be:42:75:35:33:cc:ef:1d:62:
75:47:b8:9d:6a:83:e8:d0:87:8f:ec:48:34:e3:f8:ae:d7:55:
ba:2e:b8:18:93:43:dd:aa:67:23:86:f5:3c:1b:36:d7:8f:91:
99:5f:32:53:ae:70:32:a4:16:6a:3e:f7:5d:31:89:52:5d:26:
17:7a:e9:64:77:8e:b8:fc:a5:11:c4:3f:ed:b6:a4:3b:72:4d:
c6:26:f3:56:7b:67:2c:05:85:d5:59:9d:2e:30:18:79:3c:a0:
46:ff:52:a5:9b:bb:7e:2c:8c:f7:6d:bf:b6:67:97:e9:fb:dd:
50:6f:91:a1:95:e5:93:59:01:7e:6b:e2:56:3c:ff:a2:76:da:
25:0a:5f:40:30:6c:12:46:cf:f6:fd:70:f6:9a:42:9c:70:4b:
2b:15:5a:2d:91:ac:27:6e:1e:8d:99:c0:d0:ff:a7:d6:6e:aa:
42:4a:50:d4:cc:2d:00:3c:b6:74:cf:fa:d4:32:38:50:c1:6f:
13:28:1c:75:ef:e3:0b:04:84:a7:9c:8c:e7:75:a3:6f:ce:f5:
6b:bf:a4:05:84:05:99:e3:87:ee:51:75:0f:c7:f1:b4:f6:7a:
3b:f6:89:1c:93:92:89:9d:39:f6:5c:47:4e:c5:50:31:0c:78:
f6:ec:c0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:13:01 2025 by rpki-client