Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File: S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier: 6k2ZyfiAcmg5hEFksvaYnUSH5IvmX/kEfpXeyJU6an8=
Subject key identifier: 6C:B7:D5:08:71:D5:93:9B:78:AE:64:5D:68:0D:11:E4:C8:5A:8F:69
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer: /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial: 0199FBEB788AE396FCCACAB9EA845A1F256C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number: 0C8F
Signing time: Sun 19 Oct 2025 10:02:16 +0000
Manifest this update: Sun 19 Oct 2025 10:02:16 +0000
Manifest next update: Mon 20 Oct 2025 10:02:16 +0000
Files and hashes: 1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: +y260EyNz19T5ZtLSn/DqCcoso7bOkZN51LPo1aXYX0=)
2: oa49XCli4BnhzjMFZt__xzBFHcY.roa (hash: tJwIQtT+Kk475hshkks2qpfV9lu0TNlB3mE3lLaKnow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:78:8a:e3:96:fc:ca:ca:b9:ea:84:5a:1f:25:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Validity
Not Before: Oct 19 10:02:16 2025 GMT
Not After : Oct 20 10:02:16 2025 GMT
Subject: CN=6cb7d50871d5939b78ae645d680d11e4c85a8f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:8a:bd:4f:d0:da:7b:4b:31:51:bd:7f:ce:
e5:d6:6e:9c:12:b3:6d:89:cd:2a:9d:22:49:79:b9:
76:49:c2:85:c3:54:38:72:80:b8:48:58:d4:18:af:
58:b2:0b:66:c5:ea:36:78:50:e4:b0:e3:37:17:d1:
43:71:1b:62:67:0b:49:f7:6b:22:16:ab:05:44:ed:
b7:80:f2:16:09:ab:2b:95:46:0b:13:4d:a5:49:e5:
0a:27:4e:3e:29:a1:61:18:eb:d3:7f:e3:38:7b:b9:
86:09:61:29:ca:47:a4:cb:4f:5c:1d:85:9c:bd:f6:
8c:62:4b:66:7d:f7:36:78:c0:fc:76:5f:95:aa:65:
1a:e2:15:5d:41:5e:9d:71:b1:12:f5:a8:08:13:55:
cb:b4:00:04:22:8d:e7:b1:21:b7:47:2d:ba:d2:b8:
b1:8f:84:52:8f:b7:63:3f:0d:95:41:83:b1:87:d6:
00:6d:cb:57:57:15:3c:79:8f:6c:b5:58:49:2c:d2:
5d:0d:17:09:17:eb:12:a3:e4:a7:2d:20:29:16:e0:
b2:26:bd:f3:91:8c:fb:56:a2:62:43:54:eb:46:79:
a0:e5:dd:72:b3:3b:38:88:24:83:f2:f2:d2:29:09:
d7:0a:91:c9:20:83:ce:87:1f:23:82:21:30:d7:86:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B7:D5:08:71:D5:93:9B:78:AE:64:5D:68:0D:11:E4:C8:5A:8F:69
X509v3 Authority Key Identifier:
keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9f:1e:57:a2:b8:4e:75:80:7f:07:00:3a:ce:e3:21:e8:94:
b6:07:ec:fe:e2:0f:25:25:36:27:50:f5:0b:60:1f:33:f3:1f:
49:3a:34:d0:9c:f0:75:40:94:09:d1:bc:7f:05:56:39:5a:db:
ed:51:bb:fd:56:7c:5d:dd:3f:7c:0e:53:a4:40:2f:33:86:0a:
44:69:6b:3a:4c:8b:36:af:83:dd:65:dd:5d:23:5f:ac:c8:26:
4e:c6:c3:66:49:7f:62:98:e6:21:cd:47:dc:83:b2:fc:c4:fe:
a7:6b:31:5f:63:30:e2:4d:ab:5d:a9:e9:00:6d:50:10:ab:71:
90:01:73:bc:45:f8:ef:8f:eb:6d:fd:cf:50:92:08:80:2d:ad:
3c:f9:5f:52:59:04:b3:d2:da:3a:9d:90:c6:5e:ee:37:d2:41:
de:73:91:ad:db:fb:b6:33:0e:ba:73:df:63:6e:30:c6:b1:c1:
7c:f3:b7:10:67:9d:d1:59:fa:f8:3d:01:b1:d5:08:5a:10:91:
73:d9:f6:a0:58:24:2c:f0:5c:61:3f:17:74:dd:03:ba:1a:8f:
df:ce:1a:71:7b:ed:4c:5b:a0:b0:d4:ef:c9:0d:8a:0b:e6:8d:
a3:89:45:60:2b:85:cd:e3:e9:a3:36:52:39:32:bd:da:60:f8:
9b:d1:fe:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:17:51 2025 by rpki-client