Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File: 9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier: pdwT2VyJC+t3zAzHRwnZoal9AQT/6mVUbPFGXw/UWJg=
Subject key identifier: E4:44:23:22:86:18:0D:7C:C6:AA:7B:F9:E5:07:A9:12:78:4B:E2:46
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer: /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial: 0199FAD844E2424B296E54392D50E4AD2C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number: 0BC4
Signing time: Sun 19 Oct 2025 05:01:41 +0000
Manifest this update: Sun 19 Oct 2025 05:01:41 +0000
Manifest next update: Mon 20 Oct 2025 05:01:41 +0000
Files and hashes: 1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: 8PKf36ifG1ncXfP+RVh+ODq0o6FfwXhJhoN+rug7jEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:44:e2:42:4b:29:6e:54:39:2d:50:e4:ad:2c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Validity
Not Before: Oct 19 05:01:41 2025 GMT
Not After : Oct 20 05:01:41 2025 GMT
Subject: CN=e444232286180d7cc6aa7bf9e507a912784be246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:9b:df:65:07:14:5c:8a:0d:07:8e:39:63:
15:c0:58:04:50:6f:f1:b5:93:c8:b9:23:f9:ef:08:
2e:64:af:e0:83:6d:98:b0:ed:7e:e2:c3:a2:3a:01:
1d:6b:86:79:52:bb:27:6e:5e:ce:e5:63:f5:a6:8e:
d5:9b:8b:3f:e4:89:de:39:bc:c4:5f:d1:86:72:9e:
11:61:36:3c:2d:2c:18:6f:fa:d0:43:44:a4:e4:84:
2b:7a:bb:d0:09:3c:bc:51:ea:84:8a:6c:32:00:0e:
a9:46:82:06:0a:a3:bf:e2:91:a3:3d:09:f9:3b:22:
21:d0:70:de:d9:ce:a5:80:b1:7b:3d:75:15:ce:5b:
ea:37:e7:e6:72:9f:ef:51:a5:94:1b:2e:73:f3:b7:
f8:5e:5e:52:7b:8f:21:56:d6:21:15:35:3d:33:94:
86:16:49:73:d4:72:9d:6f:29:69:bf:a0:bb:ee:f3:
d1:db:83:e8:0a:4d:ed:39:6f:17:66:1a:20:35:bc:
63:3d:e6:f1:2d:34:dc:13:b6:45:03:ee:df:28:a2:
69:18:0a:12:6e:db:74:ec:c5:15:ad:8a:22:a6:fe:
f3:45:61:2d:78:6d:0f:84:27:f7:30:6f:0e:cd:9b:
86:00:e8:88:77:e8:96:07:2a:0c:30:bc:be:53:39:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:44:23:22:86:18:0D:7C:C6:AA:7B:F9:E5:07:A9:12:78:4B:E2:46
X509v3 Authority Key Identifier:
keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:48:3f:0f:12:c3:86:3d:09:3e:52:18:98:ad:d4:9a:b6:ba:
25:a5:cd:00:be:de:4e:d3:82:cc:28:78:1c:b2:91:80:1e:ea:
2c:1f:e1:ba:17:1c:99:3e:38:17:d9:69:51:08:3d:90:70:1f:
aa:f7:7b:cf:59:1f:0f:f9:ef:83:c8:8e:43:95:12:d1:2b:c5:
32:82:d6:4b:2e:89:55:cd:9b:17:87:34:6f:e3:5c:14:61:6d:
14:94:16:c0:d2:e1:7b:b6:4a:c1:51:cf:0e:44:71:9f:45:a6:
f7:e1:38:e1:0c:fb:10:0b:af:b4:ef:7a:85:11:66:54:5e:50:
93:d3:f0:b4:eb:d5:94:dd:77:d8:37:6c:03:d6:0e:d6:7b:71:
73:ac:11:bb:4c:41:17:0a:d7:b5:47:10:e0:cb:ca:23:37:c3:
b5:4b:d0:17:c7:92:f0:c4:58:45:b1:07:81:1a:62:50:5c:af:
58:69:1e:ae:37:66:1c:ea:07:08:a9:ef:7b:40:88:9a:02:10:
d7:a7:95:37:c4:34:5f:00:47:4c:c0:13:09:9f:c6:97:a1:3b:
59:38:e8:b5:48:e4:35:73:8c:e7:be:0b:a6:88:b3:18:2e:b0:
5a:9a:36:ff:4d:b0:e7:4a:c2:6e:f4:fe:52:a4:f3:3d:0e:27:
52:96:29:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:47 2025 by rpki-client