Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
File: 9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json)
Hash identifier: feb8e1I/fk+tMxX9bYCnM4a39qXRxz5LbG1EVOydqwc=
Subject key identifier: 2C:52:C9:63:FE:8C:48:6A:D2:D7:5A:B9:E1:14:1A:16:79:E0:1E:57
Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Certificate serial: 0199FEB4C01EF5283325A7AC182711C70D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
Manifest number: 0502
Signing time: Sun 19 Oct 2025 23:01:22 +0000
Manifest this update: Sun 19 Oct 2025 23:01:22 +0000
Manifest next update: Mon 20 Oct 2025 23:01:22 +0000
Files and hashes: 1: 6vjl9U2iQ2PU377HYgeQNGNavVA.roa (hash: 9lo8xMTqnMTjqGzAvxVHUfsjdWxdily2JUl3SHSBWVE=)
2: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: cyNbpXPcxfXwieKtO0ueSc6TiN2qEPqDq+g19fAh3R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:c0:1e:f5:28:33:25:a7:ac:18:27:11:c7:0d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76
Validity
Not Before: Oct 19 23:01:22 2025 GMT
Not After : Oct 20 23:01:22 2025 GMT
Subject: CN=2c52c963fe8c486ad2d75ab9e1141a1679e01e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:ac:de:c2:13:73:48:88:ee:b2:fe:1d:c7:
96:03:a4:7b:51:56:df:2c:ed:cf:11:69:1b:28:ec:
dd:8d:0f:10:5d:7b:ca:cf:f9:62:91:06:e1:6b:46:
22:94:1b:91:fe:16:ef:70:6c:3c:ba:20:cf:14:63:
32:b7:38:f0:12:72:06:6c:02:d4:de:8b:66:22:55:
3e:f2:40:8e:2b:af:0c:16:25:8c:c5:00:82:69:3d:
71:3b:b9:0a:bd:be:44:bb:95:00:65:be:fb:43:c1:
52:f2:c0:da:c1:9b:d0:aa:ab:0a:e2:a7:d1:08:3d:
a7:8d:85:07:b2:38:a2:3b:5e:02:82:a6:e9:1f:46:
eb:aa:a7:28:2e:d1:ec:0e:26:d9:ec:04:17:2b:0e:
e1:c2:2b:5a:42:db:6f:35:7b:20:34:5c:90:36:08:
e7:04:02:db:61:0d:5d:05:7f:c3:25:ff:cc:c2:30:
f4:a3:d3:31:ba:90:75:ce:96:e7:94:2f:02:62:82:
b9:2f:d5:70:81:03:ad:fb:35:12:6c:98:03:3e:ab:
d9:a8:e9:20:69:66:21:6c:45:41:91:de:09:66:5e:
e3:2c:d6:9a:0e:59:8c:80:a8:93:c4:86:d3:4e:9f:
33:7a:ed:22:29:58:8b:5c:c4:db:63:fb:3a:67:64:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:52:C9:63:FE:8C:48:6A:D2:D7:5A:B9:E1:14:1A:16:79:E0:1E:57
X509v3 Authority Key Identifier:
keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7c:b2:81:22:f4:87:66:0d:04:6f:46:8e:d5:5f:24:f8:90:
24:4b:12:9e:ef:cb:be:b5:37:7e:2b:39:50:0c:5d:1c:74:f5:
06:8c:a9:73:77:10:61:3c:f2:cb:08:fa:c2:d2:fb:b5:1d:3f:
5b:94:69:84:fa:7d:4f:9a:45:3d:01:66:4e:7b:3f:f3:1f:42:
24:48:02:3e:76:bd:3a:07:5c:45:3b:91:ca:15:2a:01:66:13:
a9:68:bf:dd:57:5e:f2:f8:07:2b:de:52:cf:bd:1b:c8:a9:9c:
e4:c3:d7:33:e9:58:ea:0c:0e:bc:24:9a:8f:94:98:20:d4:d7:
04:dd:6f:60:8d:0b:4f:86:6b:6b:71:69:c2:a6:5a:95:89:53:
b7:be:5b:f1:db:9f:2e:3c:b5:38:e7:d5:f0:ce:41:29:1e:92:
e3:f3:6e:b0:50:13:8b:87:48:92:8e:24:55:da:b8:ea:55:1d:
ec:37:b0:52:0e:0f:07:e3:12:ef:01:a2:2b:75:de:2b:1d:54:
d1:e1:f6:4b:fb:71:42:b3:dd:8c:3d:65:e4:70:94:91:bf:90:
93:74:a1:17:5c:7d:ff:35:40:76:d1:4f:bd:dc:7c:b5:39:54:
a9:65:0f:8b:ac:e3:9f:fa:77:e1:2a:1e:36:75:50:79:f7:11:
54:20:d7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:26 2025 by rpki-client