Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
File: 9i4OVeXFow7AS9bcRtFUs-S3tfU.mft (raw, json)
Hash identifier: Pa0LQofHrwpCheG4/xPrhgTd2gX/oRp3APvNF14V4pk=
Subject key identifier: 09:9B:CB:50:97:BE:D1:6B:5F:80:50:F7:6F:4C:1E:FA:A7:86:34:C7
Authority key identifier: F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
Certificate issuer: /CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Certificate serial: 0199FEEBDEC2B0955FFAE4DABE786B36D3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
Manifest number: 0B20
Signing time: Mon 20 Oct 2025 00:01:34 +0000
Manifest this update: Mon 20 Oct 2025 00:01:34 +0000
Manifest next update: Tue 21 Oct 2025 00:01:34 +0000
Files and hashes: 1: 9i4OVeXFow7AS9bcRtFUs-S3tfU.crl (hash: fEcBEgZHrMZQApyH9l20T3vCTI2isHp88dTe0tFNW78=)
2: t-NTnv2Ro8nWywZwXpvfbvg95_c.roa (hash: nKK6UB3Rz/fAFcSsBek32u+mXGAo3Dx3MPDp3oR/j+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:de:c2:b0:95:5f:fa:e4:da:be:78:6b:36:d3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Validity
Not Before: Oct 20 00:01:34 2025 GMT
Not After : Oct 21 00:01:34 2025 GMT
Subject: CN=099bcb5097bed16b5f8050f76f4c1efaa78634c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:91:69:cb:18:61:fe:dd:bd:ff:a3:dc:70:
a9:91:51:45:67:2a:9c:d4:8a:e3:59:42:36:46:e8:
90:dd:9e:f0:01:a9:5d:4b:64:75:c1:95:fb:25:40:
42:10:3e:37:ef:21:7b:02:76:cc:ca:ee:ad:4b:ff:
d2:96:6b:a5:33:37:02:37:ef:39:be:95:c3:68:2e:
77:7c:c8:6c:6b:15:55:9b:3f:81:bd:b2:b7:3a:ed:
e0:d0:b8:14:92:f4:d3:bc:18:96:46:44:e1:7c:cd:
77:51:fe:d9:c9:45:62:07:58:68:65:9b:bb:1e:4d:
e7:7b:89:a5:62:14:28:02:cc:ca:83:43:79:68:b9:
11:cf:90:2f:73:73:d0:86:2e:03:33:6f:ae:45:b4:
a5:61:e8:5e:b4:1d:16:c0:8f:a8:c2:e6:43:75:f1:
f9:03:a2:c5:dd:a6:db:2c:0d:fa:82:44:0d:a1:39:
b4:d6:6d:07:41:cd:68:43:65:80:ef:34:60:66:1e:
cc:c4:95:3f:51:f4:d1:52:4c:78:42:c0:ef:25:7e:
47:b6:50:72:b7:9a:ce:1d:59:ed:f9:5d:2b:5d:a6:
59:dd:98:6d:04:b0:00:4f:84:7b:b8:a7:a6:03:c1:
48:f8:a2:a5:2f:d2:dc:43:1b:1e:09:4a:01:57:bd:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9B:CB:50:97:BE:D1:6B:5F:80:50:F7:6F:4C:1E:FA:A7:86:34:C7
X509v3 Authority Key Identifier:
keyid:F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8f:34:c6:65:3c:7a:94:bb:e7:e2:a7:5c:a8:2d:ed:16:66:
51:a1:0c:05:29:0c:09:64:5c:e6:10:b4:8c:60:e9:24:1f:f1:
18:89:c0:df:0b:7f:01:d1:9e:71:5e:dc:32:fc:8f:70:67:d5:
29:36:a7:4f:73:2b:89:44:55:14:17:7a:77:a5:96:b6:fa:a9:
b2:10:82:40:32:0e:ec:a3:f3:b2:55:ed:8d:49:46:95:3b:c9:
14:58:77:58:2a:96:c7:22:8c:57:a1:fe:3e:85:e5:41:28:9f:
49:ac:ea:ea:3e:9f:47:24:60:9c:22:d6:3e:a9:72:f6:08:fd:
43:de:45:a9:94:17:70:cd:d9:7f:a7:1a:a6:0c:45:7b:af:d9:
10:7b:c1:85:b7:86:69:57:21:94:8e:ed:90:af:40:1b:9a:65:
cb:55:b4:20:99:b5:b5:73:c7:19:36:04:b6:27:5f:47:a5:48:
35:e1:5a:9e:7f:ee:32:44:13:f4:eb:87:16:06:1b:51:14:26:
d5:6c:3c:06:64:e4:6d:fc:ad:1e:99:4e:13:b5:0c:9e:f3:c8:
45:b5:23:13:e5:76:89:90:09:4b:fd:64:99:70:61:e1:c4:e3:
4c:fc:52:a4:bd:a7:9f:aa:ec:13:8f:e0:8a:f7:ab:b5:58:40:
8d:f6:f3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:03:07 2025 by rpki-client