Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier: oHthVE6wePxCxiqFwVLZ5OPqIkUD6aZfXFtXG6D5AgU=
Subject key identifier: 05:E6:EE:F1:C3:18:5F:69:DF:A2:35:20:47:14:6D:27:2A:8B:4C:3F
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial: 0199FD6AF12C222C2BD5B260364F0E2553E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number: 1427
Signing time: Sun 19 Oct 2025 17:01:08 +0000
Manifest this update: Sun 19 Oct 2025 17:01:08 +0000
Manifest next update: Mon 20 Oct 2025 17:01:08 +0000
Files and hashes: 1: 4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa (hash: sDrnXJKsdAbmdaesDlUsR31uPE7GfMdA3txIVC37ks4=)
2: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: QsbM+Uc3JhYt82FyQquwr7REi2jWMSbsNCuxsV2Izpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f1:2c:22:2c:2b:d5:b2:60:36:4f:0e:25:53:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Validity
Not Before: Oct 19 17:01:08 2025 GMT
Not After : Oct 20 17:01:08 2025 GMT
Subject: CN=05e6eef1c3185f69dfa2352047146d272a8b4c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:4a:04:eb:53:5e:05:da:43:f7:b3:90:fc:
63:4c:da:49:be:fe:15:88:03:03:8a:28:69:d6:2b:
05:d3:58:90:c6:4a:b0:2c:ac:cb:1b:fc:09:20:26:
55:b8:51:cb:6a:1b:c2:d2:08:94:ad:fa:84:a2:42:
d7:24:c5:69:2f:01:93:6f:ee:9c:db:04:67:40:9e:
cc:57:36:2d:a8:2c:4a:89:26:1b:75:57:81:b2:0c:
e7:6a:8a:a7:8a:c6:61:c3:a0:4d:6e:04:78:0d:c8:
d0:ee:0d:f7:68:c3:87:9e:f7:c3:41:dc:1f:86:20:
08:2e:9d:0e:05:d8:58:7c:07:c2:67:84:99:2a:f7:
26:2c:dc:19:df:a1:72:d6:1d:3b:d3:7c:04:23:1d:
23:cd:ea:28:3a:94:f9:7b:23:1a:5a:92:16:78:ea:
10:96:7c:0a:9f:9a:3f:87:b7:13:66:8e:b5:5b:e2:
56:74:8a:7d:e2:d1:dc:e7:52:2e:5b:ee:dc:c2:4f:
f6:f6:b1:69:d6:dc:e1:c2:29:bd:bc:2d:25:40:fc:
ab:fc:c2:67:de:00:5f:33:e9:c0:da:9a:7c:02:36:
cc:66:18:49:44:7c:c5:9a:6d:f8:12:2a:52:87:77:
6a:93:38:dd:b3:b9:7a:73:aa:fd:09:b7:9d:29:fb:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E6:EE:F1:C3:18:5F:69:DF:A2:35:20:47:14:6D:27:2A:8B:4C:3F
X509v3 Authority Key Identifier:
keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:75:ce:b8:88:5d:24:af:d4:d5:1b:fb:19:50:17:75:b5:48:
4a:e9:c8:9c:6e:7a:47:6f:46:86:bd:d3:2e:2c:13:85:f7:15:
95:c5:be:d9:9c:83:a1:9e:38:1d:f8:ee:83:5a:5d:5a:ca:31:
ae:19:d5:7e:b0:f2:78:1f:48:ec:7d:e6:0e:54:48:ff:a6:8c:
90:70:7b:58:4c:0a:20:65:3f:71:75:13:f4:99:00:90:e7:f4:
7e:1a:ed:6c:33:7f:c6:23:c6:1c:0a:c0:7e:ab:34:cd:5d:91:
00:53:0a:c0:cc:d8:9b:cf:2b:b9:a6:99:3a:66:52:e8:fb:75:
0a:85:6c:8e:98:1c:ce:5f:63:68:4c:28:7c:0e:ba:16:79:5f:
a0:96:6f:ea:50:86:17:ad:55:3e:5d:d9:cf:1a:a2:6d:4d:c8:
55:51:02:f1:f3:46:bf:7a:89:3c:42:59:64:c5:98:2e:1f:33:
36:86:d0:af:55:cc:e4:33:64:66:df:a5:4c:d8:48:da:7a:ff:
df:a5:d1:d6:18:f9:19:61:3a:44:bb:70:e7:a4:0b:22:94:0e:
4e:68:57:d1:33:96:2c:e0:7d:bc:4a:8f:d7:a6:a3:09:6e:aa:
be:30:29:d4:57:11:a3:8c:cd:a9:67:61:75:4f:4b:a7:72:fa:
3a:fd:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:50 2025 by rpki-client