Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: A0dakpOD1zLqZjIKu9D5XHgS2XdlS5mpBQaHvgHtHsA=
Subject key identifier: 3F:DF:17:C3:85:6C:97:58:F8:3B:9C:B6:3D:10:35:C7:4C:8D:CC:65
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 0199FDD950AD631C91BA1CD062D47A6DBA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 19:01:41 +0000
Manifest this update: Sun 19 Oct 2025 19:01:41 +0000
Manifest next update: Mon 20 Oct 2025 19:01:41 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: r6/wXrMv4axcIRG42kiZKp3mjmiunkYSMxnW6yB7Hq0=)
2: DSwyNAuAz2bJdfrLonxlYBob04I.roa (hash: 3+/CvQ/0iqsF5SqvqkyipksHlcWBh/rqDJFf0zM3tC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:50:ad:63:1c:91:ba:1c:d0:62:d4:7a:6d:ba:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Oct 19 19:01:41 2025 GMT
Not After : Oct 20 19:01:41 2025 GMT
Subject: CN=3fdf17c3856c9758f83b9cb63d1035c74c8dcc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:b0:57:91:bb:e8:b2:78:bf:f9:12:78:49:
de:ee:51:bc:6f:0c:1e:1f:ac:ac:35:30:7d:f9:66:
8b:c5:44:50:e8:04:64:c3:6d:7f:cf:50:43:97:ef:
bf:27:eb:18:f4:66:26:d2:17:a8:a3:1b:0d:d2:d0:
26:02:79:f6:48:97:c4:cd:e0:d6:d8:59:d6:44:cb:
d7:18:41:ff:97:25:50:88:0e:5c:fa:17:7a:fe:ae:
d6:c8:98:fe:e7:3b:59:33:a7:22:ab:95:5e:16:13:
5c:67:df:a7:77:4f:90:cd:7a:92:09:bf:1a:ad:63:
f4:84:f4:89:72:06:7c:d2:3c:aa:7a:7e:c3:11:47:
4b:1a:ad:97:6a:5d:20:96:62:40:1d:66:c6:c5:95:
67:8c:0b:81:fb:03:d4:14:bf:39:31:c4:ce:bd:06:
0d:8d:bd:12:33:de:33:c4:39:62:d6:0a:89:27:29:
a0:36:00:50:64:ce:3b:05:86:01:a3:1f:8f:1a:cf:
25:4d:6a:5d:e0:bf:b6:c5:50:74:64:80:c5:05:d7:
bb:32:59:ba:32:10:70:57:bb:de:88:06:b5:a6:54:
de:9e:ca:58:bf:ce:c0:02:74:c5:97:71:b9:18:4b:
56:43:c4:2d:53:85:7b:84:62:a3:f7:b1:7b:cf:e4:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:17:C3:85:6C:97:58:F8:3B:9C:B6:3D:10:35:C7:4C:8D:CC:65
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:27:a5:1b:84:af:b4:2d:6f:d4:2f:0a:17:4d:2b:08:2a:44:
54:d6:d2:77:11:74:e2:18:57:c9:86:73:be:e9:a9:96:12:91:
5d:86:b9:24:04:91:f7:42:f4:8d:36:2e:c5:1a:27:7b:9e:0b:
28:93:52:8d:62:7a:a8:aa:ef:27:07:86:3c:05:b6:f6:2d:99:
b4:11:59:40:60:47:72:a6:f0:77:e2:17:f8:8e:a8:5a:28:89:
40:4a:90:3b:81:34:c1:b5:56:0b:fc:b7:74:5d:a8:86:e4:0b:
5d:6f:a7:eb:dd:bf:f1:54:cd:30:04:fd:da:21:32:b4:f4:69:
46:01:ac:ea:ad:58:37:1a:f0:30:9e:85:da:69:a2:da:a7:1c:
fb:76:3d:f3:14:d1:0b:b0:b9:18:c7:8c:02:a4:71:d9:91:21:
a1:aa:fe:ce:bd:af:b3:58:7c:bc:04:bd:ac:35:1b:50:6b:3d:
52:10:ff:e1:00:d6:8e:bb:e8:14:e8:ab:71:80:ee:c2:84:6c:
07:0e:45:0e:c2:c8:44:14:07:6d:99:8f:d1:5f:9a:3a:dd:01:
a5:cd:07:e5:cc:e0:11:e5:53:7b:58:aa:d2:7c:98:b5:19:52:
63:85:a1:31:8d:7f:53:d1:6c:e0:18:ce:55:f3:03:2e:10:f7:
c1:e7:23:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:42 2025 by rpki-client