Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
File: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft (raw, json)
Hash identifier: T3GrW4LsKnTBjnbgy3H/NCOJMt651YVycJ5Kx65lT0U=
Subject key identifier: 92:1F:2B:E9:BC:09:CD:FF:B4:C6:4B:96:CD:FC:2C:F1:FA:A1:34:3B
Authority key identifier: F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
Certificate issuer: /CN=f89e882276f80e6750490eef006de943dacb6e0f
Certificate serial: 019A006BF0786261E429F18DC66FB3214FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
Manifest number: 0995
Signing time: Mon 20 Oct 2025 07:01:05 +0000
Manifest this update: Mon 20 Oct 2025 07:01:05 +0000
Manifest next update: Tue 21 Oct 2025 07:01:05 +0000
Files and hashes: 1: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl (hash: ng+NG9i5JFdDLG6HVlbjCJ9s4OGpl3N5sq1BfxmJTjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:f0:78:62:61:e4:29:f1:8d:c6:6f:b3:21:4f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e882276f80e6750490eef006de943dacb6e0f
Validity
Not Before: Oct 20 07:01:05 2025 GMT
Not After : Oct 21 07:01:05 2025 GMT
Subject: CN=921f2be9bc09cdffb4c64b96cdfc2cf1faa1343b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:5e:b6:0d:9e:b6:29:32:31:58:dc:9a:18:
a2:f1:ce:d9:3d:16:07:3e:e7:d9:83:c6:a6:b9:e8:
cc:45:5d:67:26:08:eb:cc:05:32:67:b0:6a:37:a2:
27:b8:65:24:d9:33:cd:be:2c:17:2a:6b:d2:5b:ea:
0f:84:ca:57:bb:64:30:4a:1d:5e:b5:7a:66:5d:bd:
d8:c1:06:69:a0:97:bf:c2:44:05:42:fd:cd:23:08:
29:fe:55:cf:a2:f4:e3:44:d5:43:2c:8d:0d:a1:d0:
32:b6:fd:9e:62:ab:fa:b9:8d:2e:fb:de:27:6d:5d:
42:87:5c:39:86:a9:bb:5f:97:d9:c4:fc:a7:be:93:
21:43:0a:b4:28:79:2d:e4:1b:78:81:3a:55:70:8f:
0b:e1:f7:cf:a7:94:35:1a:b6:7d:26:ac:e1:87:6f:
f2:27:b9:1b:ad:6a:fb:92:10:d5:a5:36:13:7b:7b:
fd:5a:4c:cf:d1:3b:22:1f:11:bf:67:35:38:4d:da:
1d:be:cd:1c:b0:e3:19:38:66:d5:53:69:21:c9:23:
86:99:c7:62:39:09:14:e6:69:41:de:0c:6f:69:49:
66:b7:b9:a0:9b:79:c0:8c:4c:9c:f5:8d:70:bd:1f:
72:3f:55:95:d3:54:ca:a2:3c:01:de:25:d7:22:1b:
26:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1F:2B:E9:BC:09:CD:FF:B4:C6:4B:96:CD:FC:2C:F1:FA:A1:34:3B
X509v3 Authority Key Identifier:
keyid:F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bb:1c:d4:28:06:1d:54:94:c2:bd:fd:87:19:3a:20:4d:c9:
44:21:cc:85:80:3c:84:61:f6:1c:61:6d:4a:6c:04:9e:21:b3:
3a:ca:58:b2:fd:49:73:51:d8:a0:5e:9e:72:3d:e1:ca:08:2c:
11:c4:eb:bc:26:6b:86:37:a8:28:77:fd:cc:c7:02:93:b7:d3:
44:d1:07:35:ff:ee:d9:ba:c7:96:09:28:8a:81:aa:dc:17:f0:
42:67:c1:72:7c:bb:c8:55:6c:4c:1b:dd:dd:9d:a9:6f:f9:ef:
d1:8e:22:19:55:d5:9b:f2:65:7d:a2:a4:b8:c2:bf:9d:04:c9:
ed:7c:df:f5:5b:9a:55:cb:44:f5:3a:55:ff:de:4f:68:3a:10:
c9:bc:d1:6f:eb:d3:44:1b:5a:8e:6a:e3:08:54:5b:d5:4a:f1:
8a:75:60:bd:cf:f6:bb:3f:70:53:28:6b:fe:94:96:5f:bf:92:
0f:3a:c7:0e:ad:eb:07:79:9a:d3:7d:f2:27:07:7a:fd:ef:df:
74:a1:1e:1c:69:a3:15:81:12:13:68:f8:b5:ca:31:22:26:eb:
84:8d:cf:9d:96:6b:53:04:51:fa:8f:4c:0e:2e:9d:44:8a:38:
47:59:7c:f4:4b:95:61:f1:16:a6:c3:3b:c3:de:1a:d0:2e:72:
3b:92:f4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:44 2025 by rpki-client