Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
File: 9fDwfKCmtMssFZ6QRZdFA64ohYE.mft (raw, json)
Hash identifier: COexcPN9Qb34uMzS6XBRQfPFWBCKmEr+YeAgdd9nw5M=
Subject key identifier: 40:A9:3D:FE:82:9A:30:67:B3:CA:5D:29:72:3C:25:88:0C:42:99:AF
Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
Certificate issuer: /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Certificate serial: 0199FC21A16660B6C65D4CDB4E32ACABB272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
Manifest number: 49
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: 9fDwfKCmtMssFZ6QRZdFA64ohYE.crl (hash: 3VrQCnQ+ep/b2PVGVE/QdXKkPmMwbaSrf88TMJ9vvKM=)
2: _TKV-DpdXmei2SR3rrnjoUIFNqQ.roa (hash: R5raBHMEiNG8zclHwaLQB17jXPqQeZzFe9QNn7MrSYM=)
3: c25XUVb4Bk3AvdWuVyNrTQybFGc.roa (hash: j4cV2DVaLOTZm+S8euSjn/Ih9FV1aHPND9PujtBd3s0=)
4: q764NZ2C5xrpkP8LBsmdVe7f1dw.roa (hash: sLViIw17i8ukMTeK1rHQJp904qo/JWVcyaL9gru+PTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a1:66:60:b6:c6:5d:4c:db:4e:32:ac:ab:b2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=40a93dfe829a3067b3ca5d29723c25880c4299af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:c6:ae:0c:28:82:18:07:02:ab:21:4c:93:
36:03:d7:76:a2:b6:5e:e5:99:27:8b:12:ad:fa:4e:
ae:67:53:cd:93:40:4c:6e:45:be:16:ac:da:5b:0a:
b3:0d:dc:ee:a6:d8:63:9a:fc:81:8f:c6:b3:29:da:
7d:2b:82:5e:74:c7:cd:98:77:a4:a2:9f:d0:62:ee:
f4:8c:8c:a9:59:b0:de:9e:3b:98:27:d6:7b:5b:58:
ff:f4:32:93:a1:ba:16:48:e5:db:f5:40:55:49:ad:
0b:b6:e9:80:4b:ea:95:08:ae:99:25:0f:7b:e3:46:
b3:c9:66:d9:66:a8:de:36:66:e8:a5:08:84:e6:71:
3a:6e:89:90:cf:fc:5d:98:eb:3a:c2:6a:20:14:51:
91:98:49:b2:ca:b8:91:f8:f0:7e:d9:84:a8:f6:f7:
6b:1f:fc:98:86:d2:99:7a:71:83:89:5a:15:ee:37:
e8:0d:40:6b:aa:54:02:b5:0c:d3:14:28:35:f0:d2:
94:c3:83:77:07:a4:1b:92:ca:15:f5:2c:0b:24:28:
99:f2:6b:a2:e6:c1:b5:6a:a9:b4:91:23:79:91:f2:
29:8c:73:7a:ea:55:3b:75:7a:e8:56:07:69:23:41:
7e:0f:13:f8:d1:c1:78:7f:05:4c:d8:7a:8a:99:38:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A9:3D:FE:82:9A:30:67:B3:CA:5D:29:72:3C:25:88:0C:42:99:AF
X509v3 Authority Key Identifier:
keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:03:40:78:4b:72:40:9d:e6:8a:1c:30:6a:11:e1:e8:75:bc:
7a:ed:d0:e6:70:41:da:a6:2f:1c:63:ef:72:a6:51:00:7b:92:
25:11:77:68:9d:2a:3c:78:5d:50:5d:ab:23:36:c0:96:1a:80:
95:36:f2:04:2e:df:f2:05:b4:75:4d:37:74:d7:9a:1c:c8:cb:
67:59:36:63:0b:46:ad:75:2c:ab:ba:15:8d:b7:43:74:e5:17:
2d:63:15:e9:d2:4d:cc:e8:2d:db:0a:92:c5:0c:df:70:09:d4:
5e:8d:4c:23:d4:15:b2:43:bd:21:27:09:5a:15:19:c5:86:86:
61:36:17:77:f1:fb:63:f2:3e:cc:3f:55:e6:4f:ea:c2:68:03:
1e:0c:a0:5c:27:27:3b:ae:1f:ad:66:78:40:62:81:30:1f:7c:
2d:4a:56:8e:ab:5d:25:aa:31:18:e6:5e:4f:4a:47:2e:b4:6b:
3d:e0:74:86:e3:0c:8c:29:9e:88:5d:94:7c:95:7a:92:e3:45:
c7:fc:85:4e:cf:5b:29:e3:6c:d7:68:60:f3:c6:fd:2d:8a:ac:
fe:57:50:d7:0f:a9:60:41:30:e1:64:46:8b:c0:5f:07:1d:fe:
01:04:20:e8:30:1b:91:b4:52:48:59:2d:77:91:c5:65:3e:c5:
90:c4:74:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:47 2025 by rpki-client