Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
File: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json)
Hash identifier: bMsWlxZDgDiY6QlNnu8u8aos1RtgTJAntsd03rXZya4=
Subject key identifier: CE:A1:EC:45:C1:B7:55:C8:88:BE:BF:B8:7B:3C:5B:37:A8:8E:BA:17
Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
Certificate issuer: /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Certificate serial: 0199FC591615E7E77060EB403E21B0DB9AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
Manifest number: 1670
Signing time: Sun 19 Oct 2025 12:02:00 +0000
Manifest this update: Sun 19 Oct 2025 12:02:00 +0000
Manifest next update: Mon 20 Oct 2025 12:02:00 +0000
Files and hashes: 1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: 8t/ocW4FwcsEHckV5DFfiqfjXLpc6dJaywNEAfFjsxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:16:15:e7:e7:70:60:eb:40:3e:21:b0:db:9a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Validity
Not Before: Oct 19 12:02:00 2025 GMT
Not After : Oct 20 12:02:00 2025 GMT
Subject: CN=cea1ec45c1b755c888bebfb87b3c5b37a88eba17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:0f:73:27:6a:ec:7b:36:cd:57:26:d3:39:
bc:92:69:4c:e4:3a:23:36:dd:4e:7c:50:36:ea:ee:
4e:38:13:fa:8c:22:27:cd:75:c9:7b:a1:5f:8e:cb:
79:e8:04:1a:97:b7:66:1f:fe:54:da:89:f1:85:14:
79:98:ae:51:2b:a1:15:f2:a0:62:41:aa:17:54:1c:
a6:c4:7d:91:49:4c:67:a0:b5:2a:e6:81:70:df:47:
87:99:0e:b5:79:2d:bc:f0:0e:49:54:18:6b:61:84:
38:5e:5b:4e:41:7a:75:6f:b6:ff:98:81:fe:bf:7f:
fc:ca:79:86:5f:7a:9e:2b:dd:ea:9f:bb:87:31:05:
6e:e5:97:89:f8:82:3b:bf:d8:8d:6d:14:80:11:47:
8b:e2:6c:aa:55:b8:af:e4:45:36:c8:8a:93:d6:d5:
b6:b4:e0:8f:76:cc:b1:ea:6b:45:2c:da:fe:42:cf:
cf:b1:e1:30:87:a7:cb:a9:5b:bc:c1:8b:45:43:d7:
d1:e3:1f:3e:31:a3:49:55:4f:8e:fa:e0:e6:64:b1:
c2:c1:28:e4:72:b5:f4:22:be:95:cf:bd:ee:43:11:
14:17:68:88:9f:7d:71:e9:b3:35:6e:c9:95:29:78:
4f:7b:fa:65:9f:fa:fc:ee:e9:47:bc:bf:55:df:2a:
4b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A1:EC:45:C1:B7:55:C8:88:BE:BF:B8:7B:3C:5B:37:A8:8E:BA:17
X509v3 Authority Key Identifier:
keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:43:0e:69:86:0b:f2:06:d2:82:87:01:0d:44:d2:88:94:06:
34:f4:ec:d1:d7:89:5e:e5:76:f2:af:15:85:45:5a:1d:64:af:
e3:15:66:63:8d:4c:c1:33:0a:49:f6:d2:c8:c8:93:06:d3:e7:
2b:94:4a:69:85:a1:b9:45:1f:98:e0:2f:9f:11:ca:b5:f0:32:
7e:6a:bf:55:b4:bb:ba:27:6c:4f:f4:8c:48:e9:10:9c:47:49:
27:2b:24:54:ce:36:77:25:53:26:b7:62:97:9c:c7:31:6e:26:
40:46:78:02:d9:49:d1:8e:34:ff:30:d5:4a:76:56:7c:39:e3:
c0:5c:b9:e5:f1:b3:34:c3:14:69:8b:5f:af:81:af:5e:5e:63:
6e:dd:52:29:e0:a3:c0:50:c9:ca:e0:66:7c:b6:ba:52:35:3d:
31:f8:7d:bf:cc:28:03:be:63:fd:db:3b:8f:cf:5e:20:cf:4b:
04:44:d7:e4:51:b3:54:56:81:6c:42:0c:b6:a5:b1:87:b8:04:
bd:09:61:82:56:e5:e4:bd:0e:92:67:7b:76:22:d9:77:18:56:
3e:f9:47:e7:50:10:f4:fb:cf:5b:8b:eb:13:49:2e:b9:75:70:
c3:82:31:e5:1a:30:20:58:22:df:8b:94:ae:cd:2e:52:7b:68:
ba:22:2f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:34 2025 by rpki-client