Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: WT44qvZdAJxvFuFuG3jjppKxHz6IIj+erYG7FORJ6AU=
Subject key identifier: 4F:AF:63:DD:B5:34:32:27:17:D6:BC:D4:0A:A8:FA:D5:98:A1:CF:F6
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 0199FCFD5642176B9D52DC920C2CB65FC9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 12CE
Signing time: Sun 19 Oct 2025 15:01:25 +0000
Manifest this update: Sun 19 Oct 2025 15:01:25 +0000
Manifest next update: Mon 20 Oct 2025 15:01:25 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: mnQYAJWDwGVlcYgaT2lGhbU9ysWaMmRpEXBqQTTg/eQ=)
2: jFj_wAVFaMa6v6BwAOU_Uc1FIto.roa (hash: OCl5X/o2fl4tL/vj2OOu1PZNEi03ZxIx2lIN6Tnh8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:56:42:17:6b:9d:52:dc:92:0c:2c:b6:5f:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Oct 19 15:01:25 2025 GMT
Not After : Oct 20 15:01:25 2025 GMT
Subject: CN=4faf63ddb534322717d6bcd40aa8fad598a1cff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:59:65:90:ca:2a:0b:41:b3:2e:a7:44:35:
c0:b9:dd:e8:44:5a:60:a8:12:cd:cf:44:e3:ed:88:
07:43:35:f3:97:ec:e4:47:22:ac:9f:de:61:4f:66:
2b:e1:98:cd:d1:c7:fe:cd:b8:9c:29:1a:39:d2:3b:
d4:ca:ae:5a:d2:f1:09:ca:5b:f9:9c:c6:b3:57:91:
6d:2e:47:3d:7a:8e:9a:6f:35:96:c4:54:ab:4c:e4:
bd:17:26:dd:0b:53:ff:67:a7:47:53:3d:1c:37:ed:
bf:42:62:1b:2f:6b:d6:3f:07:8a:d2:fd:b4:bb:f5:
a5:3f:6c:b7:5f:d1:b8:ef:20:96:08:91:6b:fa:54:
9b:c4:47:20:7b:84:a3:19:54:ed:3c:ec:09:a3:c0:
d5:59:b5:ca:d1:a0:b5:bf:1e:3e:6f:6d:2f:70:7d:
0f:df:bf:12:8b:b4:ae:9e:07:91:d6:7b:49:f2:53:
86:61:8e:35:00:d3:22:cc:4f:c4:fe:7f:0e:40:3f:
93:b3:df:73:16:ee:c3:4f:84:5d:b7:8e:24:a7:79:
8c:9d:44:81:3a:6d:b7:4c:c0:91:52:36:5e:39:38:
51:98:d9:99:b8:69:90:f7:bf:cf:69:48:80:bc:e4:
a3:74:c5:dd:6b:ff:f1:6d:28:56:bc:03:a2:c6:15:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AF:63:DD:B5:34:32:27:17:D6:BC:D4:0A:A8:FA:D5:98:A1:CF:F6
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:89:f6:46:6b:f3:33:cf:ba:1c:a6:2e:33:d8:10:1e:69:26:
2e:bd:4d:3e:90:7b:e1:a2:52:ba:f2:56:a5:4f:6c:a3:4d:35:
af:c3:ff:90:a0:b5:fe:a0:3b:89:85:78:0d:8a:85:f1:8a:11:
5e:ee:50:5b:c3:89:77:8c:30:bf:90:4a:c7:58:07:4d:41:7f:
78:bf:7a:35:db:f4:99:26:43:53:17:a3:16:85:69:e9:9b:69:
a0:a5:e8:70:fd:33:c3:d1:92:c7:24:4a:3f:8f:a7:44:30:b0:
11:e9:d3:c7:40:eb:60:db:03:bd:eb:08:8e:d4:ac:30:df:34:
e4:7d:c2:55:1e:0e:fc:c6:b3:f2:dc:bc:9b:1e:6f:87:f1:f3:
41:fa:7e:61:f2:2a:a1:20:23:60:9e:5c:84:e9:ce:87:68:ad:
8f:d2:3e:59:a4:11:72:17:fc:18:83:2f:59:a2:1f:21:cd:e9:
a1:fb:2a:25:d2:45:85:77:70:97:22:ea:74:d5:54:24:fc:fc:
9d:39:be:84:2e:5a:8e:73:52:5c:8c:c0:97:9e:cf:06:de:db:
20:91:03:eb:45:ad:27:b0:16:68:e9:ff:ab:8c:e4:89:f7:7e:
74:07:c4:e1:d3:b5:54:38:65:66:66:34:76:c5:7c:08:84:dd:
63:5e:89:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:33 2025 by rpki-client