Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
File: 9B_-fSl-5OHU0jM1qatKAIjAJdc.mft (raw, json)
Hash identifier: 5xU8fVvPvt+AuKPpaR3UwIsXLGRO9ddltAldyKisw0Q=
Subject key identifier: F6:40:AA:52:01:1F:EF:56:88:34:57:C1:2F:42:AC:61:89:70:F7:CD
Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
Certificate issuer: /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Certificate serial: 0199FBEBB87715582AB3AA2AD93E9976EB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
Manifest number: 0CB6
Signing time: Sun 19 Oct 2025 10:02:33 +0000
Manifest this update: Sun 19 Oct 2025 10:02:33 +0000
Manifest next update: Mon 20 Oct 2025 10:02:33 +0000
Files and hashes: 1: 9B_-fSl-5OHU0jM1qatKAIjAJdc.crl (hash: 7F69T0mMN8NVBO7U8IzPKiUdqhjbhpQOa4ereiArBXQ=)
2: PRDF7uUUDEgvhpybsRj704dqk1M.roa (hash: 1hJ8QC4+sDAxjl4A67W+QBueyb9hgkEoDhfUwnkhNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b8:77:15:58:2a:b3:aa:2a:d9:3e:99:76:eb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Validity
Not Before: Oct 19 10:02:33 2025 GMT
Not After : Oct 20 10:02:33 2025 GMT
Subject: CN=f640aa52011fef56883457c12f42ac618970f7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ad:4a:9c:c8:2d:36:8c:49:da:fe:61:cc:e6:
0e:68:5e:30:d1:3c:95:a1:28:93:04:53:ef:1c:47:
a7:4b:44:ef:37:d2:28:b2:72:e3:7d:b8:fd:04:62:
d9:d2:32:07:2a:da:e7:d9:0f:42:90:5a:31:af:ea:
23:e9:dd:4c:58:9a:8f:73:52:d7:a0:7b:ad:9d:32:
69:1c:51:73:86:29:18:39:05:92:26:41:7a:13:61:
78:bb:b2:50:7a:83:4d:64:69:23:65:ca:47:26:9b:
91:81:d2:92:1b:bb:51:92:cf:75:e8:29:07:e1:c6:
57:07:a3:fa:d0:5c:53:1f:21:1b:c8:02:29:dc:7a:
18:1d:5b:da:a2:55:b7:72:71:87:11:31:de:4b:fd:
7a:39:c6:71:f5:49:1d:84:79:fc:9e:f5:d7:e6:03:
97:33:c5:8c:f2:58:3a:63:38:b6:cc:13:41:06:47:
d8:88:38:6c:1e:19:4c:4a:81:de:ef:c0:fa:60:fc:
02:54:e7:85:54:ce:5b:e8:4a:39:29:aa:56:a4:7e:
35:db:22:df:7b:12:77:a6:0c:1b:93:cd:86:22:5a:
52:56:e9:93:54:3c:0a:37:04:c7:3f:78:af:1a:0d:
7f:5c:cf:2d:ee:26:1b:ba:ae:42:b5:6a:f5:a3:a9:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:40:AA:52:01:1F:EF:56:88:34:57:C1:2F:42:AC:61:89:70:F7:CD
X509v3 Authority Key Identifier:
keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:11:43:3f:ed:1f:83:96:72:d8:0f:63:c0:3f:55:56:dd:31:
f4:fc:20:38:25:9b:81:da:ce:56:eb:6d:8c:e8:17:5e:c8:78:
5f:b4:b3:93:bd:8a:5e:63:7b:48:86:cf:71:47:08:0c:e1:5c:
71:7b:27:57:7e:d8:e3:f6:de:0b:c0:f8:7f:bb:b1:8d:62:c9:
f5:53:cd:cb:81:97:27:7e:df:f3:58:fc:d6:36:36:bd:0e:34:
f9:c2:fe:49:d9:0a:01:e4:58:4b:96:5a:7b:8e:a4:29:ab:e5:
4b:c1:38:a3:04:1d:7b:8e:7a:e7:2a:1b:8e:ad:74:5c:7f:ec:
c2:4f:be:76:e6:1d:ed:bf:d2:1d:1e:7f:44:b5:9c:c0:47:f7:
d1:c0:22:20:8c:0c:ce:93:aa:3d:00:c6:e0:87:e0:e0:16:6e:
8d:1f:31:80:39:38:6c:97:d3:09:40:a7:69:c0:ee:87:d9:25:
f8:bc:09:af:cb:b8:bd:41:79:3b:37:40:65:36:60:cc:7b:d7:
1a:aa:38:6f:44:24:88:0a:d1:61:ee:da:0f:9f:d6:3d:0e:47:
dc:41:e0:83:10:2b:99:86:c8:94:eb:fc:e8:6e:1e:7b:74:0c:
7d:0d:84:e1:f0:5a:be:69:e8:bf:25:47:7a:67:7b:14:31:e7:
a2:ab:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:47 2025 by rpki-client