Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: sWF3hc4QUOEcDBeJ2qktZwKF42/ny+lR7ivwYd23VCA=
Subject key identifier: C9:02:31:8A:21:96:B3:AD:37:E2:D4:3D:0D:F2:01:FA:63:9C:CF:1C
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 0199FB7CC6E67F7181030E75060CFB90917E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 1048
Signing time: Sun 19 Oct 2025 08:01:22 +0000
Manifest this update: Sun 19 Oct 2025 08:01:22 +0000
Manifest next update: Mon 20 Oct 2025 08:01:22 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: Rp9Qi0nCb8YQH58l+oTp7TKLea0d7dwzyE3sfzJjY6M=)
2: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (hash: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c6:e6:7f:71:81:03:0e:75:06:0c:fb:90:91:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Oct 19 08:01:22 2025 GMT
Not After : Oct 20 08:01:22 2025 GMT
Subject: CN=c902318a2196b3ad37e2d43d0df201fa639ccf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:70:71:5f:43:de:29:39:4e:e7:9f:02:88:
9c:b9:10:7a:3d:08:0f:ba:1f:a6:77:c2:13:fb:f9:
12:e9:09:70:f3:84:d0:f5:1a:c8:c3:88:38:83:52:
f2:4c:e2:9c:ba:75:33:7e:c6:ff:fb:90:ed:86:e5:
a1:05:bc:a2:3d:a2:7f:8e:e8:c8:49:64:e5:72:5a:
4b:a7:d6:60:ba:4f:ae:6a:fc:53:68:22:2b:65:3d:
db:53:bb:2c:ae:78:22:16:24:1e:65:02:55:46:bc:
bd:a9:83:bf:b6:83:34:a0:79:a6:cb:ed:c1:2d:79:
25:44:54:c2:87:57:78:8b:fc:43:5a:0e:fe:61:2f:
74:7d:ac:57:40:8f:54:19:2c:0e:bd:45:36:0d:06:
68:d0:5c:92:5f:f2:48:9d:6e:ed:71:63:6f:6b:f9:
70:3b:0a:3c:39:b6:c8:06:8c:70:68:0e:2e:96:29:
c3:8e:7b:8b:a7:db:38:2a:b5:61:be:e1:8a:f2:15:
0f:b8:62:55:db:e2:74:2e:5e:5f:e3:52:3f:36:0f:
15:e6:f2:9f:64:85:a8:ad:80:5b:13:46:37:8a:82:
f1:81:8d:81:f4:b5:5f:38:7f:38:cf:76:24:84:f4:
70:19:04:59:89:f0:3c:f0:7a:87:db:53:fc:da:13:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:02:31:8A:21:96:B3:AD:37:E2:D4:3D:0D:F2:01:FA:63:9C:CF:1C
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4d:1f:04:6b:ad:c2:20:d2:22:a7:bd:15:2d:53:e9:cb:5a:
3d:5f:d2:c6:17:ac:c1:17:c2:ab:35:2b:e4:da:c4:6c:0e:61:
3b:06:65:c3:47:e5:0e:60:20:d9:d1:e0:1a:3e:89:e8:e8:e0:
a6:c3:b3:78:fa:49:03:cb:7b:29:cd:19:2f:c4:d1:42:66:04:
9d:bf:46:b2:f0:c6:74:24:d4:59:77:c6:54:c2:3a:a7:b6:82:
4a:d6:24:cd:e2:f1:7a:5b:68:94:21:a8:c1:2f:45:c5:41:eb:
2f:0a:2b:a2:04:5a:4d:0c:64:46:36:27:5f:b3:99:04:4e:6f:
fe:40:4a:37:e5:ce:a5:03:ac:dd:99:9c:40:b1:32:61:9c:6f:
41:3e:03:0a:fd:a0:44:52:e5:e1:4b:18:db:a7:38:ad:c1:a4:
2b:93:3f:4d:0b:d1:83:60:c0:4a:3c:92:33:27:7e:5d:ca:89:
cb:6d:5d:67:9b:b4:21:f6:cc:33:c9:6f:21:86:d3:6c:df:83:
00:09:51:c7:5b:e8:1b:90:b2:03:fc:7b:c3:e4:99:f8:ff:5f:
11:59:30:4c:64:cc:b9:35:9f:1b:ed:1b:22:9c:9b:0e:8c:5f:
bd:fa:9f:a0:15:ec:82:65:f8:df:69:16:7c:08:32:c4:e5:26:
14:76:05:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:36 2025 by rpki-client