Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File: 9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier: LOBQq9Ymz1JtCbavi1xMVClbwKMOxq1JOnXmqzi4spE=
Subject key identifier: 5A:AF:43:6E:D1:F6:43:E5:D4:41:AA:CA:1D:DD:67:85:61:55:C3:01
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer: /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial: 0199FCFDA4E26AC952CC64349760F155BEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number: 0664
Signing time: Sun 19 Oct 2025 15:01:45 +0000
Manifest this update: Sun 19 Oct 2025 15:01:45 +0000
Manifest next update: Mon 20 Oct 2025 15:01:45 +0000
Files and hashes: 1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: d/WxK6pqvqvWA8bDEyYq4prO/MOAelJqC4SZUstqGps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a4:e2:6a:c9:52:cc:64:34:97:60:f1:55:be:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Validity
Not Before: Oct 19 15:01:45 2025 GMT
Not After : Oct 20 15:01:45 2025 GMT
Subject: CN=5aaf436ed1f643e5d441aaca1ddd67856155c301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:fd:6a:0f:65:88:f4:d8:c1:d7:fc:d5:7c:
f7:db:a3:20:05:28:b4:8a:c5:9c:24:18:5f:5d:96:
eb:b9:13:b2:a3:46:bc:87:25:78:dc:09:02:b3:ea:
41:f6:22:eb:ce:32:71:a6:83:40:f9:0a:49:7d:3d:
ed:90:75:50:f3:92:5e:30:d6:c1:e6:95:ae:d1:0d:
b9:1c:99:c9:1f:5b:65:37:9c:1c:1a:6b:79:53:d5:
a1:21:49:ba:94:e2:71:ae:bd:4c:5b:22:59:b3:cf:
a1:b8:73:54:5a:d5:c9:3a:74:d5:ae:c8:b5:9a:f3:
fd:19:5b:0f:bf:ac:b6:c2:5a:f8:d2:4c:e6:5f:f5:
89:21:b2:a7:7a:db:e9:7d:8f:a5:04:75:49:c8:56:
44:ed:b8:d7:08:b0:81:9f:f6:20:50:65:ca:f8:dd:
af:52:5a:89:27:ee:91:5a:5c:0b:cb:90:5f:9e:a1:
ed:68:7c:b8:e8:35:af:c8:a8:67:eb:38:e2:c1:56:
9f:2c:20:39:ba:d6:03:54:4e:c2:ca:ec:d9:1a:d6:
fb:2a:62:16:db:45:7f:d6:a4:c0:8b:38:d2:3b:5c:
06:54:3c:c9:ae:76:c2:79:bb:b1:e0:3c:cf:e1:4a:
12:ca:d1:15:9c:be:b0:05:0f:0f:0f:19:42:6e:1e:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AF:43:6E:D1:F6:43:E5:D4:41:AA:CA:1D:DD:67:85:61:55:C3:01
X509v3 Authority Key Identifier:
keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:14:53:09:4a:56:1e:b6:4d:32:ec:0f:f1:7c:c7:0a:aa:47:
48:61:fa:18:17:f2:b6:a2:cb:f5:c9:0a:18:0e:84:4c:5d:17:
54:99:a6:7b:81:32:87:fb:e4:5c:24:14:d2:ab:3f:90:ff:f4:
50:7d:40:1c:6b:4b:df:13:df:ec:76:0f:bd:c3:9c:35:82:bc:
54:63:b1:80:ea:c1:67:d4:d4:0d:82:56:2f:98:5e:1f:dd:a1:
67:00:06:02:b6:19:8f:9e:15:6c:5c:79:1e:54:ef:0b:6c:f7:
c0:56:e0:b1:6e:2d:ef:c8:4b:1a:fd:55:09:62:6e:54:1b:25:
e3:5d:f9:6e:af:10:e2:a4:c9:e2:d7:95:7d:eb:db:14:c2:53:
03:d3:a0:62:93:46:2a:7f:64:bb:64:67:a2:ca:54:56:a9:ad:
5b:47:1c:73:0b:32:4c:4f:f5:8f:60:32:99:74:b7:db:47:c1:
ca:99:83:04:77:b8:de:1b:e0:3e:71:52:15:50:fe:ac:d9:95:
58:e0:c2:d8:01:fd:df:4f:45:38:e4:89:2f:95:fc:da:22:4a:
35:bd:7f:ca:a4:26:68:64:2d:c7:e3:8d:b2:ed:e5:ee:2a:be:
d0:44:b4:b4:d3:fc:5d:30:da:2b:a7:f8:e6:ad:b9:64:a6:af:
5f:fa:81:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:21 2025 by rpki-client