
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: M3fNIkRiMurwMQvL6i/w9nqMIQZTIXlvnSnB5d+OKAU=
Subject key identifier: A9:7D:3A:AB:E4:CF:DF:07:61:EE:27:E3:11:45:D5:E6:96:F0:56:72
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 0199FA69C5C9B469046FCECDFA0F96294859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0DAD
Signing time: Sun 19 Oct 2025 03:00:59 +0000
Manifest this update: Sun 19 Oct 2025 03:00:59 +0000
Manifest next update: Mon 20 Oct 2025 03:00:59 +0000
Files and hashes: 1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: K8Jr3ubOvsY5/zayjaWJJPpbj9850CVVwDo22MvlAog=)
2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:c5:c9:b4:69:04:6f:ce:cd:fa:0f:96:29:48:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Oct 19 03:00:59 2025 GMT
Not After : Oct 20 03:00:59 2025 GMT
Subject: CN=a97d3aabe4cfdf0761ee27e31145d5e696f05672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:9a:d3:6e:a4:7a:2f:b5:a2:05:c1:30:93:
1e:98:65:3c:b2:06:20:0c:27:e9:f9:cd:40:6c:a0:
93:b9:6e:51:39:64:b3:00:bd:d4:52:fe:5e:e4:7b:
8e:a5:53:3e:98:76:13:a4:71:88:8d:65:a4:2d:bc:
eb:91:04:79:ec:13:8f:a4:d2:bd:28:22:ab:ef:82:
25:e5:b6:7a:ca:b2:26:70:a1:91:a9:18:86:eb:96:
8d:30:42:00:77:61:60:28:16:28:10:f2:b2:bb:0c:
e7:64:fa:f5:79:ae:23:8b:e3:33:11:d7:0b:ff:4d:
1a:ca:d7:00:0c:17:b2:9c:23:99:71:c2:a9:9f:04:
a8:bd:7a:a4:28:9b:55:da:8c:93:87:30:d6:54:db:
41:c0:6f:65:c2:9c:c3:f8:ee:99:ad:4b:ca:2f:ca:
b9:6f:f1:a7:89:40:13:b4:41:a6:2f:83:62:a8:71:
69:b1:2f:02:c6:e6:7c:ce:31:40:3a:4e:31:61:4c:
1d:0a:44:1b:83:42:26:3f:1a:b6:f6:48:10:d6:da:
03:27:7f:f8:e8:ef:b3:d1:d2:ff:aa:f0:75:18:01:
1f:06:0b:92:34:47:f5:88:f0:7d:fb:72:3d:46:7f:
bb:d5:d3:fb:13:25:a5:19:d4:89:b4:dd:a5:a6:0e:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7D:3A:AB:E4:CF:DF:07:61:EE:27:E3:11:45:D5:E6:96:F0:56:72
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:cb:6e:df:ff:6d:fb:5d:b1:07:ea:a8:a6:be:57:9a:b0:df:
2f:b5:6a:66:a4:78:5e:e5:e7:1a:03:3d:8b:6d:ec:73:f6:09:
e0:13:8f:90:37:7a:a4:0b:e6:5d:0a:58:80:6f:47:19:f6:38:
77:c6:ce:1a:17:a5:00:4c:2b:d1:32:e0:44:f5:0b:15:90:6a:
d0:3b:00:14:61:0e:9c:57:80:5d:25:96:49:88:9b:31:a4:e1:
d5:05:06:54:e8:db:53:65:1e:c6:4c:28:3c:c2:73:88:54:a7:
79:88:57:79:8a:eb:80:6d:7d:8e:80:51:e0:91:4d:44:b7:c2:
9d:59:b7:1d:df:e8:e1:dc:4f:9b:95:63:fd:02:48:c9:93:8d:
03:bd:8e:c1:ff:0e:ba:ff:2d:47:f9:9b:84:f3:17:a5:4f:d6:
fa:8b:c2:be:cf:e8:ff:60:5f:1c:bc:a5:77:4f:74:e5:e6:59:
56:16:66:ac:1c:9b:66:01:c8:bc:c5:dd:17:10:81:ee:06:b3:
6e:64:1d:9f:30:ca:5e:c2:76:f7:a3:99:f3:47:e7:e3:38:ab:
a8:da:2f:d6:d5:20:57:f9:bc:d1:3e:19:6d:80:2b:cd:84:78:
70:5a:90:bc:50:4c:b5:bc:21:22:9c:71:ed:26:d7:df:2e:da:
c1:3f:91:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:57 2025 by rpki-client