Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
File: 9px-uGIkrbOECIR97kz8TEADrV0.mft (raw, json)
Hash identifier: uOyvMKCCDAmDRht3Tkl1Ew2a1OvelQZgUSpZyacxIUg=
Subject key identifier: 3C:06:A4:AC:B4:EA:BE:00:A0:91:43:A6:12:EC:4C:79:5F:51:A0:11
Authority key identifier: F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
Certificate issuer: /CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Certificate serial: 0199FD348C955B6A0FAEA510C37F2E4FCF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
Manifest number: 0F41
Signing time: Sun 19 Oct 2025 16:01:43 +0000
Manifest this update: Sun 19 Oct 2025 16:01:43 +0000
Manifest next update: Mon 20 Oct 2025 16:01:43 +0000
Files and hashes: 1: 9px-uGIkrbOECIR97kz8TEADrV0.crl (hash: s7ZPS51825vBokkxWr6ZiWW7QQeVz2Wrwe2LPO7YXho=)
2: YdnfzNQU6p17HNy9eA1Hw53deFE.roa (hash: 2Yw8oKr6x9VyLBdNC/o5JNz+v9yyH0gMbVBwfTOD/GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8c:95:5b:6a:0f:ae:a5:10:c3:7f:2e:4f:cf:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Validity
Not Before: Oct 19 16:01:43 2025 GMT
Not After : Oct 20 16:01:43 2025 GMT
Subject: CN=3c06a4acb4eabe00a09143a612ec4c795f51a011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:da:17:31:5b:c8:fa:42:b5:63:fd:c0:80:
2c:df:36:8f:dc:82:3c:ac:03:85:17:8c:48:86:b8:
f8:98:fb:17:48:08:de:bb:dc:6e:2e:5d:05:3b:09:
59:4e:e5:85:00:c8:7f:ce:55:8c:ff:bf:5c:72:5b:
e4:dd:05:68:bd:10:09:da:b8:b3:3b:cb:9c:69:5d:
77:97:90:3d:8b:8c:37:5c:8b:04:97:35:6d:e6:4f:
77:4c:3a:05:08:40:e7:29:0e:46:78:0f:af:ad:1e:
71:0f:76:64:33:77:ea:73:20:33:fc:3e:80:2b:09:
9b:a3:6f:b1:be:a6:3c:c9:d7:52:da:ea:b5:b7:6c:
92:e2:49:8f:e1:2c:98:c6:11:dc:55:96:94:14:df:
34:c7:6f:74:eb:85:09:fb:ce:ab:53:66:f6:cd:3e:
4b:43:81:18:b3:c9:29:e0:d0:55:d4:c2:f2:fe:c7:
fd:4e:0a:46:03:bf:50:f1:e5:8b:fc:91:a0:8d:52:
a6:b0:df:10:b1:15:cf:b4:53:5a:38:72:4e:0c:b9:
c2:11:5c:3b:04:2e:a0:29:07:3c:72:33:0f:1b:ac:
7a:75:ee:c4:67:e1:86:85:1c:bb:35:66:b6:a8:e1:
da:99:d0:36:ac:ec:e0:e5:19:90:86:4f:24:ee:78:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:06:A4:AC:B4:EA:BE:00:A0:91:43:A6:12:EC:4C:79:5F:51:A0:11
X509v3 Authority Key Identifier:
keyid:F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c7:19:1e:cc:d7:71:b6:44:6e:a2:87:23:08:59:bc:b2:36:
bf:85:fc:0a:be:78:2d:37:1e:b1:5e:c1:4c:3d:3b:a8:03:6a:
b6:79:63:52:bd:75:88:5b:b4:8b:75:99:71:93:76:08:01:08:
10:70:62:95:f4:fd:87:8d:33:ad:7d:fc:89:ce:ad:f1:ba:e9:
18:94:51:82:46:f0:e9:bc:c4:06:3b:5b:6d:9d:15:04:ca:09:
8f:1e:50:b0:9f:ea:af:b3:59:cb:eb:7a:40:2d:b1:6d:53:3e:
85:5f:98:0b:dc:88:ab:79:3f:b5:2e:7b:93:5d:16:c6:b7:95:
cc:de:cc:86:6e:8f:b7:84:c3:04:83:23:5e:b0:68:fe:84:09:
80:5f:fd:a0:5c:6e:ce:d4:5a:01:4e:f7:ee:9f:57:df:0b:6b:
eb:50:5c:b7:3e:b8:1c:bd:47:2f:f0:83:cf:aa:f1:bd:59:bc:
44:19:40:ca:6a:5f:8c:24:26:e2:1d:50:62:67:c5:48:78:45:
4c:16:b3:ca:ca:9e:17:ac:48:66:83:2e:c0:f4:5a:91:ea:79:
70:d2:64:4d:49:d8:a3:39:4e:91:34:b5:46:5e:79:db:2c:77:
75:0a:c0:27:7d:03:97:83:72:6b:80:29:9a:b6:2b:30:4e:b5:
82:2e:82:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:33 2025 by rpki-client