Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: ZUaF3kh0muDTiraXG8umFSoW7ZhyHLWWtZakAdCNsnc=
Subject key identifier: FA:97:A7:6F:B9:7B:38:76:BF:FF:DD:61:4E:8B:39:C2:7B:60:EB:4C
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 0199FD348A8D634ECA3A74FC5B2FE84B2166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 0317
Signing time: Sun 19 Oct 2025 16:01:42 +0000
Manifest this update: Sun 19 Oct 2025 16:01:42 +0000
Manifest next update: Mon 20 Oct 2025 16:01:42 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: nR1SW+nRKfB0gg95pmxP46CmjnMhIU95Kc1Sd14pV/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8a:8d:63:4e:ca:3a:74:fc:5b:2f:e8:4b:21:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: Oct 19 16:01:42 2025 GMT
Not After : Oct 20 16:01:42 2025 GMT
Subject: CN=fa97a76fb97b3876bfffdd614e8b39c27b60eb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8e:3d:46:7b:ed:f7:d3:06:19:68:73:13:3d:
9c:f4:18:60:20:88:56:67:8f:ec:c9:c1:cf:ad:c7:
d6:10:5d:0b:cb:90:c0:37:c5:61:0c:04:7d:57:cd:
5e:d8:01:1a:62:a3:7c:fb:4e:90:68:39:6e:7b:5b:
a0:37:fb:e6:08:38:83:b8:a8:ce:5b:fc:bd:be:32:
a9:60:12:35:7a:c2:36:7b:3a:4a:1a:7c:14:9e:e2:
99:d0:94:6b:da:42:ae:a6:67:7f:0f:ce:17:07:66:
54:df:1c:e4:f3:0a:4e:89:be:9f:65:e6:da:6f:1d:
48:f6:43:b2:48:b6:c5:e0:43:81:1a:39:be:b3:bc:
e3:15:af:bf:49:02:f3:8d:3b:d5:84:ad:11:87:55:
4d:7d:72:91:07:35:00:bc:7d:d2:9b:1f:b8:ac:f7:
16:05:05:ae:54:23:7a:58:7b:9c:b4:92:0a:8b:78:
f9:6b:5c:b2:23:5a:dc:39:b4:af:41:6d:4b:0e:f8:
26:d9:52:a6:42:dc:90:51:2f:8e:e7:72:2d:a8:f9:
c2:7c:4c:d5:34:96:e4:46:b1:04:ca:c8:d7:ae:82:
65:d7:88:6c:8e:09:13:a3:ac:ad:25:19:31:37:dd:
de:96:30:aa:4e:18:61:ac:7e:29:19:34:3f:b7:6f:
ca:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:97:A7:6F:B9:7B:38:76:BF:FF:DD:61:4E:8B:39:C2:7B:60:EB:4C
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fe:48:cc:bb:00:58:ee:62:fd:0f:de:08:e6:6d:d4:6c:e7:
9b:28:ab:ce:b5:64:01:d1:f7:7a:73:75:fe:b8:8b:a7:84:7b:
d9:67:ca:ac:1a:74:73:41:41:08:91:35:bd:53:49:aa:bf:4e:
d3:a2:c2:88:8b:78:82:a7:ac:64:9f:ac:f6:d0:0b:95:06:86:
dd:f7:6b:5d:6e:0a:e7:d4:a0:77:99:0b:fd:df:e0:bc:cb:3e:
45:55:6b:ab:5f:6a:b6:75:37:a4:94:56:d2:9a:3c:8a:f9:59:
4e:1e:95:83:69:cf:cd:bf:08:ab:54:1e:5f:e1:a3:bb:db:27:
e8:e8:86:b6:d3:e0:32:46:f4:08:6e:38:40:47:71:a3:c4:5a:
f9:8f:b0:70:57:a6:63:e3:6b:a3:fc:fd:c6:71:c9:15:d1:23:
7c:38:8f:29:75:48:93:06:d9:c2:08:3f:19:f6:24:cb:ce:ab:
e4:ba:cc:f8:75:c9:81:51:00:3f:08:53:e2:58:bf:6c:53:fb:
f7:c0:91:82:05:a5:8e:a5:3c:e9:32:ea:ca:f1:1a:5c:6e:99:
cd:c6:d4:02:cc:5c:ed:70:21:af:05:00:d4:4c:bc:d9:92:7d:
ed:78:10:53:d6:c4:52:75:ad:ba:60:0f:a0:3d:bc:b4:28:7a:
b8:65:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:52:35 2025 by rpki-client