Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
File: n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft (raw, json)
Hash identifier: FRcZwq+f/lgY6MXZskYd6k4lF4dDd+KJRu+MqfvMGFE=
Subject key identifier: B1:F5:F5:17:DC:55:49:D9:8C:51:E7:27:34:D1:31:02:3E:51:DE:32
Authority key identifier: 9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4
Certificate issuer: /CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
Certificate serial: 0199FD3419765EB9017AF7100447F1A841A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
Manifest number: 047A
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl (hash: HRjFXEPp27WRgJhW6tmjStm5gnfCOJSEgJAsTg/0aUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:19:76:5e:b9:01:7a:f7:10:04:47:f1:a8:41:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=b1f5f517dc5549d98c51e72734d131023e51de32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:25:e7:c7:b1:7c:09:25:2c:fa:6d:44:fd:20:
7d:ef:9c:ac:3c:75:6a:52:95:0a:77:b4:ad:be:8a:
fe:91:f9:a2:2f:64:90:7d:c6:7d:b1:5f:0b:96:16:
6c:75:61:b9:ac:f7:e3:af:7d:ec:67:da:90:72:f5:
78:7b:4c:1c:2b:86:d6:78:1e:b6:1d:12:20:3b:27:
33:26:a9:5b:fd:c5:b5:39:fc:ba:54:0a:d4:98:3e:
f6:dd:84:1b:26:92:eb:40:81:25:b3:0a:61:9f:5f:
a9:98:93:39:d0:a8:b1:c8:9c:d0:b2:4c:98:56:9c:
de:f7:d7:69:b4:51:67:b2:04:53:20:28:70:bf:bd:
2d:a4:f6:a7:33:b2:36:1d:ef:b9:0a:2b:1d:8c:21:
fb:ca:24:75:7a:4f:7d:c3:e2:f9:b6:cb:4b:87:fc:
5f:9b:d1:35:92:a0:6d:5f:7b:e5:31:69:6b:7f:71:
d4:a3:8d:7b:d6:2c:97:e3:7c:01:b1:d2:70:40:0f:
d1:18:11:f1:d0:5c:7f:c2:7d:ff:8d:36:b7:eb:d6:
8a:06:8e:f0:25:45:7a:85:a5:81:13:ba:51:4e:c8:
94:37:86:29:7e:76:75:cd:f7:77:8c:23:0d:79:cb:
c8:fd:08:99:38:c7:8c:71:d5:bf:52:40:b0:0a:5f:
47:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F5:F5:17:DC:55:49:D9:8C:51:E7:27:34:D1:31:02:3E:51:DE:32
X509v3 Authority Key Identifier:
keyid:9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7d:7f:88:e6:57:c4:55:36:ef:85:bc:1f:db:4b:ba:13:78:
2d:e8:0c:af:e8:79:f2:0c:15:00:3c:01:b3:59:57:2a:23:f9:
4f:28:1e:be:44:e7:d0:48:00:11:40:ef:07:b2:c2:81:51:d7:
48:c5:0b:19:1a:3d:ec:a3:0e:d1:13:a6:e4:fb:91:f0:35:8b:
b3:81:2c:96:3f:c2:d4:7c:28:4f:69:06:60:db:71:10:a3:fb:
7b:32:c2:71:ae:1d:6a:56:85:8c:92:44:4b:60:92:32:5f:14:
a2:a1:18:1f:6f:ba:c6:7a:df:3a:85:2f:ec:50:ec:e8:8e:18:
29:4e:da:11:13:98:ce:ea:bb:47:e0:e4:13:b5:20:27:17:c8:
48:fc:ff:1b:d4:56:72:4e:18:51:e9:8c:da:47:0c:64:54:bc:
1c:7d:63:ff:9e:f7:84:f0:18:b1:c7:9b:18:5f:7d:d7:97:37:
73:b3:2a:37:0e:61:f3:2a:78:74:34:f9:4c:9e:52:fc:ac:28:
03:b5:70:d3:ad:06:36:91:2c:28:47:69:97:f8:9f:cc:69:c6:
5f:7f:8e:cf:04:2a:90:54:99:df:57:ce:68:24:2d:ba:45:0c:
26:aa:03:20:d6:aa:5d:32:cc:ff:33:4e:63:57:6f:8f:36:77:
ea:6a:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:12 2025 by rpki-client