Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: zSjtNiD2iZYq02LGbnhjr/YAH4igvTphjAXLAR827dY=
Subject key identifier: C7:38:77:E0:B4:DF:C3:F9:73:77:DE:3A:47:CB:53:2E:CE:A7:8B:89
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 0199FDDA1C57CB5528912C35E00BC048C5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 19:02:33 +0000
Manifest this update: Sun 19 Oct 2025 19:02:33 +0000
Manifest next update: Mon 20 Oct 2025 19:02:33 +0000
Files and hashes: 1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: +ZPXG3yb8Gg8LBj/z++RosJakFMrLbdWeD1hZMCKktw=)
2: opYZOi4k9YDcS_3foMnJJa-4gCI.roa (hash: VbpgC06Lnc7NWswjuIad3/ZduRJ+GtOZh31gorgG7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:1c:57:cb:55:28:91:2c:35:e0:0b:c0:48:c5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Oct 19 19:02:33 2025 GMT
Not After : Oct 20 19:02:33 2025 GMT
Subject: CN=c73877e0b4dfc3f97377de3a47cb532ecea78b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:b6:f8:1c:ad:30:43:18:80:82:8e:4c:1d:
ee:f4:12:ac:fd:b4:ee:4e:1e:34:ae:dd:27:ff:d6:
54:a0:f1:b6:f0:5f:00:ae:45:10:17:15:03:a7:e8:
45:68:65:2c:52:fb:80:67:b4:8b:aa:9e:30:1c:18:
2f:5b:2f:7d:f1:ba:37:cd:46:44:86:ed:1b:d6:c8:
77:14:93:f9:98:3b:ee:48:6c:5b:6a:6b:c1:4a:25:
cb:94:f6:68:e9:a3:cd:5a:5b:ee:e1:45:a1:04:50:
ac:ca:a9:27:f9:56:02:00:1d:bd:50:45:33:e7:aa:
0c:14:03:b2:be:30:f4:b1:1f:73:8b:a8:12:78:08:
6c:da:f5:99:05:2d:00:77:6e:0f:13:aa:7e:c8:5c:
d2:54:5b:49:20:fc:e6:ec:96:b4:07:ef:bd:67:51:
b6:f1:3f:a8:2c:fd:f7:1c:99:04:43:b8:85:e2:57:
50:b7:7b:43:2c:45:94:de:c5:94:54:87:92:54:aa:
ed:71:2c:3d:97:93:4d:8a:b9:71:9e:d2:80:a5:0c:
9b:d9:81:39:0e:0a:91:1c:bc:a2:c4:81:cc:85:9d:
7f:74:d5:98:1f:1e:fa:fa:76:76:c8:35:db:35:a6:
c2:bb:f0:d0:d0:c6:78:08:be:bd:81:bb:7d:49:fa:
29:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:38:77:E0:B4:DF:C3:F9:73:77:DE:3A:47:CB:53:2E:CE:A7:8B:89
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c7:53:35:c6:ed:10:19:40:1e:d1:87:9d:26:a4:13:4b:48:
ff:15:b6:6d:6d:4c:ff:c3:8e:c4:11:0f:b1:e4:0e:05:80:f2:
cc:5c:1a:eb:73:a1:0b:59:1f:e8:2a:7f:3b:03:dc:49:a5:8f:
ec:a5:09:5c:17:8a:73:02:95:fc:37:cf:36:79:eb:c8:6c:c2:
c9:e6:4b:43:27:7d:dd:a6:94:dc:fb:4e:18:60:09:fe:2b:93:
66:44:26:ee:46:b7:13:0c:f7:c7:45:42:3b:89:eb:53:cd:7a:
ca:3b:3b:7d:6e:9e:35:72:8a:d1:99:da:ee:41:1e:81:e7:af:
b4:e8:82:b2:60:cb:31:98:5e:2c:cc:36:68:96:c0:0b:d2:91:
3e:d2:f4:4d:c1:47:60:fa:1e:c7:ae:67:04:76:a3:e0:40:a7:
82:0b:f5:4d:43:49:ca:7a:16:c4:55:23:b8:8e:08:f4:1a:b0:
11:b2:3a:59:ab:49:0a:73:c5:75:b3:bd:c8:40:40:a0:97:f9:
a6:f9:40:da:2b:cd:10:9d:b6:47:a6:d6:d8:76:55:6e:d7:23:
d6:d3:db:76:64:03:dc:05:b5:6a:a3:82:ec:ee:89:1f:f6:ab:
d5:c7:6c:e6:94:71:57:b3:a4:fb:7e:51:1e:df:ec:26:af:6d:
a8:5f:cb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:45 2025 by rpki-client