Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: aJzHe1o0dhUK6HwpzXun0OSUz8i+x9ZPWuK5YN/nAM0=
Subject key identifier: 04:D9:2B:E1:BE:53:A3:9B:EF:B2:04:1E:29:DB:34:7F:CC:5B:57:AC
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 0199FFC7C861EAD8E1C8F0F7E6C32988B73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 074B
Signing time: Mon 20 Oct 2025 04:01:46 +0000
Manifest this update: Mon 20 Oct 2025 04:01:46 +0000
Manifest next update: Tue 21 Oct 2025 04:01:46 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: G1PPXGi38j0nP9Fp2AvxV31DKBNExsIGdee8rgJcCJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:c8:61:ea:d8:e1:c8:f0:f7:e6:c3:29:88:b7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Oct 20 04:01:46 2025 GMT
Not After : Oct 21 04:01:46 2025 GMT
Subject: CN=04d92be1be53a39befb2041e29db347fcc5b57ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:f1:f8:c4:67:0f:77:63:97:bc:45:56:df:
95:9c:c3:bb:5e:07:4f:a1:f4:f3:f8:3a:4b:cc:7f:
3a:60:32:7b:5d:c4:04:37:72:dc:dc:62:91:43:26:
fb:29:26:97:b0:29:8f:7d:25:53:9e:ae:4c:9a:ec:
fb:02:96:32:60:e9:4f:c5:b9:01:f3:8b:8d:2e:f6:
e6:01:bd:a6:c8:19:2e:e1:fe:1a:09:46:7f:95:63:
cc:04:8e:44:17:a7:54:e1:de:16:b9:fa:d9:f7:af:
be:e0:1b:a8:4e:9a:35:9d:df:29:b0:3d:17:c5:dd:
a2:65:18:fd:ef:07:21:48:37:72:45:d4:17:42:e4:
a8:05:c3:f0:a5:8e:e7:b9:ec:a1:71:71:32:07:0b:
be:58:06:32:2b:d2:2f:ed:a0:51:5e:78:85:85:51:
13:57:1f:1b:1a:6b:50:87:3f:bf:27:5a:92:36:02:
c4:24:14:31:7e:c3:d4:0e:7e:db:9e:87:ee:9b:41:
76:7d:0f:7c:d4:90:c9:d8:bd:de:38:8b:86:3f:ba:
90:c6:aa:05:f0:58:0f:81:31:a3:33:bb:0e:1c:3c:
57:47:15:4d:3e:a7:94:b3:b3:bf:d6:7d:64:33:69:
0a:3e:04:8e:ad:fa:d3:68:36:44:d1:63:2e:62:65:
87:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D9:2B:E1:BE:53:A3:9B:EF:B2:04:1E:29:DB:34:7F:CC:5B:57:AC
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:fe:b2:90:8e:2e:a8:4d:ef:67:77:7b:d6:42:25:c3:c3:9a:
e9:22:4f:c2:d3:27:1c:5e:32:4a:e7:08:fa:c9:28:fb:4e:12:
c4:c8:7e:fe:b0:d6:6a:33:68:32:39:da:d9:e9:e6:ee:19:74:
78:8f:72:af:62:5a:dd:48:d3:e5:cc:40:72:ea:3f:10:36:17:
28:ab:04:06:ea:2f:93:54:f7:10:aa:53:f7:0d:0c:29:39:d8:
14:ad:ef:2b:a3:a4:2f:e5:33:9d:47:24:fc:d2:91:50:16:b5:
a6:56:e1:e1:25:36:40:7b:72:7a:e3:3d:47:f9:9b:8f:e4:e0:
db:4e:b5:68:ac:a6:e8:17:0e:78:9d:4c:80:f1:11:2a:b3:e1:
f9:f2:b8:46:6c:7c:b3:7d:f8:be:a8:e5:de:b7:dc:a0:2e:c7:
57:e0:21:05:a8:54:72:4a:a2:02:14:52:ce:25:24:ac:b8:ff:
0c:53:5f:77:8e:61:ee:2a:5b:bb:39:de:2d:66:4e:44:c1:79:
1a:25:f0:86:68:7c:55:e1:23:4d:ef:ce:6b:30:2e:c3:f2:39:
75:8b:0e:29:fc:1e:ce:b5:ac:00:7b:aa:b5:55:24:62:54:bb:
c8:16:ba:0e:1a:6d:95:9c:e6:ef:6e:35:aa:e6:03:b9:6e:ff:
13:a1:9f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:49 2025 by rpki-client