Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: 77Dc2gqYGCnXKif0TTDSmoAL5C1FHw+OUufB+xu8boI=
Subject key identifier: 72:98:F6:1C:73:29:A4:89:17:6A:92:5D:0A:31:8D:6F:3E:2C:87:72
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 0199FD6B22123F8238B49791E7C67118B38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0B5D
Signing time: Sun 19 Oct 2025 17:01:20 +0000
Manifest this update: Sun 19 Oct 2025 17:01:20 +0000
Manifest next update: Mon 20 Oct 2025 17:01:20 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: v+XFmchjaSPTiO0+NCg/qbvYCaU4WbUrHBsAVP2/HMU=)
2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=)
3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:22:12:3f:82:38:b4:97:91:e7:c6:71:18:b3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Oct 19 17:01:20 2025 GMT
Not After : Oct 20 17:01:20 2025 GMT
Subject: CN=7298f61c7329a489176a925d0a318d6f3e2c8772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:a7:57:3c:e4:b8:24:61:f9:7a:13:4f:7b:
7f:5a:0d:95:80:73:b7:ad:63:c0:9f:fc:ff:58:12:
ba:85:bf:3c:e3:3f:df:fd:fb:71:7b:31:5a:21:11:
1c:0e:f3:81:87:21:a6:f0:4b:b4:85:59:13:eb:73:
2b:28:33:2a:cd:6c:1c:53:56:84:bc:8c:b6:ff:93:
f2:cf:eb:b2:89:ed:90:cd:64:de:fe:42:08:02:8d:
22:fd:f5:05:d0:f6:12:5a:9f:e1:9b:be:e5:8b:d0:
00:d9:88:f6:a3:92:f6:a7:3c:33:aa:76:9b:c3:c1:
b3:e8:39:ac:37:90:d8:4c:49:43:a8:bb:d7:2d:98:
9d:85:a9:a7:36:dc:13:14:18:e0:6a:2f:5a:dc:9f:
de:b7:e9:4d:d0:b9:a6:c4:0b:e5:4d:e3:dd:1c:23:
81:44:b1:7c:78:8e:10:57:e7:cc:c0:f9:72:02:6d:
ba:94:36:73:05:34:c7:81:57:5c:b0:9c:b5:1d:b8:
18:ed:09:52:6f:73:67:c4:47:50:34:ff:d1:c3:32:
77:03:a8:7c:01:10:33:84:01:17:a1:47:0e:36:8f:
6b:82:1b:11:f8:4b:fb:7d:b5:bf:38:06:ea:07:14:
3b:1a:48:10:db:28:a7:b5:ad:7d:99:a8:9e:28:c2:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:98:F6:1C:73:29:A4:89:17:6A:92:5D:0A:31:8D:6F:3E:2C:87:72
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:41:77:1b:d6:db:58:8e:ca:9f:4d:8e:3b:61:13:d5:ab:75:
c6:2c:d6:94:4f:71:97:7b:a1:fe:43:a6:9d:b2:c8:6a:bc:f6:
94:bb:89:cb:ff:a2:b3:67:0e:0b:d7:a5:d3:bb:e4:c9:e5:2d:
74:c4:a8:24:ec:f4:21:c8:ad:43:a3:62:18:2c:e0:01:dd:a9:
f3:aa:9b:67:3e:4d:43:d5:58:de:ba:1f:63:9e:6d:60:a3:b2:
37:b8:20:e3:8e:0d:d5:b9:9f:79:db:e7:b2:0f:73:39:db:78:
76:b3:19:d4:85:fa:9a:99:f7:23:6d:28:16:22:a5:32:e6:67:
4b:c7:40:e9:05:db:04:7e:b4:fa:fb:61:f5:28:ac:0a:fc:30:
ce:f8:65:e6:a8:c4:11:9a:39:85:1a:62:9b:27:88:c5:83:a7:
bd:63:4b:5c:2f:f2:3f:d8:e6:38:49:67:ce:eb:74:9b:b8:fd:
9b:12:20:4b:07:67:a2:57:90:03:ac:35:e7:a8:0d:0f:36:c4:
4a:b1:83:e0:8b:49:1e:e1:e9:2c:06:78:13:9f:33:1b:61:10:
9c:2e:0d:74:7f:79:ee:b7:43:ad:4f:5a:6f:cd:6d:fc:74:6f:
68:ee:02:21:6d:06:ae:09:df:41:32:2f:ea:ef:af:64:dd:c8:
8b:5a:c5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:48 2025 by rpki-client