Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: xtGEtCAEls/VXlt9yA7HpHiUI1eh02GzDVPDEhfS7Ac=
Subject key identifier: FF:78:41:92:F0:06:42:08:D1:AE:75:15:62:02:1E:40:5D:42:F5:DD
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 0199FDDA0BAB1392042A54C40B7B52EAC001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0CAB
Signing time: Sun 19 Oct 2025 19:02:29 +0000
Manifest this update: Sun 19 Oct 2025 19:02:29 +0000
Manifest next update: Mon 20 Oct 2025 19:02:29 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: qJ2aCzKxKzN/+7v2wtz99TCAbAns+p7yMAM59bHpgto=)
2: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (hash: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:0b:ab:13:92:04:2a:54:c4:0b:7b:52:ea:c0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Oct 19 19:02:29 2025 GMT
Not After : Oct 20 19:02:29 2025 GMT
Subject: CN=ff784192f0064208d1ae751562021e405d42f5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:27:b1:5a:d3:99:fe:87:a3:74:57:77:ce:
8b:3c:57:99:56:dc:9d:5c:3d:e1:e4:de:13:70:d0:
7f:4f:1f:44:27:10:67:ba:89:2b:69:af:f5:f4:c9:
0e:a4:06:4d:90:bc:01:b6:08:55:06:fc:d7:18:cd:
94:63:ea:b7:05:be:fe:c4:ab:3e:2a:00:73:48:60:
fd:5e:3f:10:f8:a4:79:6e:9c:20:ee:17:13:4f:37:
31:51:5d:69:a2:6e:5a:10:08:7f:c9:4a:84:b0:38:
fc:0b:33:3e:48:5b:42:c2:77:f4:f8:9b:8a:e9:36:
aa:19:c5:b3:53:ff:7f:6a:65:5b:1f:bd:ec:22:0c:
3d:cf:45:d8:ca:f1:66:e6:ba:1f:31:5d:9c:6b:21:
6d:10:fa:a3:c5:ab:54:08:7b:bb:d2:b2:22:12:e4:
79:91:2c:5e:66:ff:d4:60:15:f8:38:40:11:95:6e:
3e:b5:97:e3:42:ee:1c:dd:13:18:7b:a0:db:87:e8:
47:d7:87:c0:dc:9b:47:dc:67:ad:13:8a:72:b6:60:
b8:c9:f0:0b:14:5a:35:8a:4b:9d:3a:6a:da:34:13:
4c:1c:41:70:d4:47:ba:53:2c:1e:3a:60:93:7b:ec:
8e:50:56:dd:f1:67:bb:1b:0f:51:17:c1:cd:fb:bf:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:78:41:92:F0:06:42:08:D1:AE:75:15:62:02:1E:40:5D:42:F5:DD
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fe:c9:9d:bb:51:77:bd:c0:44:7e:2d:b4:3e:a8:c6:86:8a:
4b:3f:b9:9b:85:1d:9e:6b:d8:fa:b6:9e:38:76:98:61:da:f3:
d4:53:4b:42:4a:05:a5:3a:6a:50:4e:0c:dd:93:af:24:27:e9:
d2:30:db:9d:7d:60:e9:32:ab:e6:c6:75:8b:4f:05:a6:47:da:
16:3a:fb:52:8a:fc:89:f0:54:8c:91:5e:bb:43:f6:a7:45:1c:
75:1a:33:7e:23:fe:1d:b4:06:2b:e1:8a:60:0b:4e:fc:4a:c3:
54:6e:c0:f2:51:9b:8b:4f:33:6a:56:c5:aa:17:78:ab:ce:ed:
8f:25:21:a6:95:14:1f:d9:16:4b:b2:aa:be:8e:f8:48:7c:d6:
c2:32:1c:76:9d:5e:60:18:d3:a1:53:b9:8e:3f:2a:0a:94:b2:
1a:a8:38:c7:d0:32:bd:14:ea:9e:d2:7a:e6:10:d2:5c:5a:e4:
56:11:ad:3e:40:12:81:91:df:c7:98:93:df:ce:a3:39:33:a8:
80:1b:99:9f:0f:96:fa:b4:6e:77:17:38:7c:48:d3:ab:03:30:
36:f6:9b:da:76:c7:93:1e:39:fd:9e:b5:69:aa:01:59:33:c9:
e8:70:4e:cf:5e:8e:82:83:d5:44:74:38:7d:d9:f9:59:54:72:
37:76:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:24 2025 by rpki-client