Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
File: 9wC7WRwCd4gZrqH1uPZEFns9fC4.mft (raw, json)
Hash identifier: FCQY+RIU94jF5D1wL4BgB0AlM7pBepE0gshDfkFI3dI=
Subject key identifier: 99:F3:0C:C8:81:73:39:6F:96:D6:99:25:9E:E9:AE:B4:A4:01:AA:42
Authority key identifier: F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
Certificate issuer: /CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Certificate serial: 0199FC8F19C70D9E28862B5813A69FD3007B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
Manifest number: 0FE2
Signing time: Sun 19 Oct 2025 13:01:00 +0000
Manifest this update: Sun 19 Oct 2025 13:01:00 +0000
Manifest next update: Mon 20 Oct 2025 13:01:00 +0000
Files and hashes: 1: 9wC7WRwCd4gZrqH1uPZEFns9fC4.crl (hash: YzsH1OVqOcjwWbT2WwrlEoknJi0G2yeTqw6J+L6moDg=)
2: K4Gb3AwaGq3gzkyO-1MyxTIk3gg.roa (hash: DCLfidqg0r72HrTsNGYvW13eljCKxYuCqdsXQsy2ahc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:19:c7:0d:9e:28:86:2b:58:13:a6:9f:d3:00:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f700bb591c02778819aea1f5b8f644167b3d7c2e
Validity
Not Before: Oct 19 13:01:00 2025 GMT
Not After : Oct 20 13:01:00 2025 GMT
Subject: CN=99f30cc88173396f96d699259ee9aeb4a401aa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:fd:73:26:8b:c6:d6:c8:58:19:7a:78:f5:
7d:80:c9:52:bf:5d:86:1a:f3:55:c9:dd:8a:92:31:
83:9f:61:84:a9:99:fd:4e:33:8d:e8:52:0e:ca:01:
36:27:52:30:4a:4b:5d:04:e9:91:ba:99:3f:56:af:
9f:d0:75:97:79:51:c6:8f:68:f8:52:4a:ef:67:df:
6a:70:50:a0:98:af:46:b2:d9:77:39:f8:e8:83:b6:
e9:e3:6f:96:5c:3f:30:ab:88:9c:16:57:b5:4b:fe:
81:2d:53:9f:06:b0:c2:58:f2:92:19:2a:c4:e0:ec:
74:a4:eb:67:09:04:29:6d:bd:7c:7e:10:43:f1:63:
65:12:dc:50:99:49:c9:59:c0:18:64:e7:27:0d:17:
d0:5a:19:3b:56:df:de:f5:2d:ef:c5:ea:ff:6f:19:
f4:1a:f7:21:9a:79:13:6f:d9:be:42:43:30:67:44:
63:f3:fa:ac:cc:b2:f4:09:b2:8f:15:13:1a:19:3a:
4c:cd:10:e1:21:89:4a:9a:e3:eb:f1:79:a0:10:31:
41:94:10:24:60:44:62:8c:c0:09:af:83:c4:d6:6d:
ad:b4:fe:b3:91:ec:e9:de:2b:2c:f6:10:28:0d:9b:
0a:d7:78:16:dc:33:d6:64:71:dc:0c:c6:29:c3:9d:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F3:0C:C8:81:73:39:6F:96:D6:99:25:9E:E9:AE:B4:A4:01:AA:42
X509v3 Authority Key Identifier:
keyid:F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:58:e8:91:6e:38:aa:84:ed:f4:bd:03:46:78:70:91:bc:dc:
0e:a4:ee:09:57:99:45:00:7d:5f:7c:a8:b6:79:b4:c7:94:20:
4c:70:ae:b4:d1:89:62:5f:7c:a4:34:bc:9f:21:80:d8:55:0f:
8e:27:29:a6:f7:b3:17:04:16:5d:b2:64:56:dc:bf:e6:44:21:
ac:81:2c:88:44:d2:1a:43:be:72:68:fe:2c:f2:d1:d7:b1:cb:
e4:54:b2:00:07:d7:6e:44:2b:43:8a:7e:aa:38:e0:43:11:19:
f7:96:1d:8a:93:6c:08:74:4e:67:a8:71:c4:e2:8c:08:d4:59:
22:b7:25:d1:63:8d:d1:ae:c4:79:8e:73:99:91:7e:44:27:98:
64:4f:f0:d0:f2:08:e8:a9:a6:0d:8e:a1:82:65:75:99:a5:5e:
71:0e:29:e9:38:bf:83:94:a2:01:09:3f:68:7a:56:b3:fa:ef:
39:f8:83:36:06:87:9c:48:06:f8:9a:5b:b3:16:1f:0f:fb:66:
d2:b8:35:75:03:12:73:75:c7:49:38:90:34:f3:fb:86:dd:d8:
70:e8:a3:92:e7:5c:18:de:8c:ad:14:47:5e:2e:f5:5e:05:48:
08:bd:45:41:f4:c8:20:77:4b:51:4a:bc:9f:78:57:1a:a4:01:
5f:e8:8b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:44 2025 by rpki-client