Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
File: 9g8GwTqb9lKcSmvQ3uBVggVgz78.mft (raw, json)
Hash identifier: 9sfCyJvZj8Lpm4DQfsNrxaw2Srn/amxLDeBf925WsGU=
Subject key identifier: D3:27:D7:04:EF:35:E0:13:01:95:E6:16:CF:FA:02:22:69:28:D6:A6
Authority key identifier: F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF
Certificate issuer: /CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf
Certificate serial: 0199FDDA5305A2C72210CAB9E0E3C2916838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
Manifest number: 01BC
Signing time: Sun 19 Oct 2025 19:02:47 +0000
Manifest this update: Sun 19 Oct 2025 19:02:47 +0000
Manifest next update: Mon 20 Oct 2025 19:02:47 +0000
Files and hashes: 1: 9g8GwTqb9lKcSmvQ3uBVggVgz78.crl (hash: 5TmNuMtkDck3N/d2G8FrKzI+eI9cjrZM3iNiGbChVa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:53:05:a2:c7:22:10:ca:b9:e0:e3:c2:91:68:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf
Validity
Not Before: Oct 19 19:02:47 2025 GMT
Not After : Oct 20 19:02:47 2025 GMT
Subject: CN=d327d704ef35e0130195e616cffa02226928d6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:df:36:92:b4:f4:7f:f5:77:c9:ce:71:4e:
4a:fc:e9:2a:98:0d:df:50:ee:64:b1:1b:50:f5:c1:
28:fc:89:e0:bb:c8:00:80:a1:5a:8e:39:fc:de:aa:
d8:4b:bc:5f:e8:71:48:0d:60:f5:75:4a:2d:b0:72:
9b:fd:8c:5b:e9:d6:2d:33:12:97:16:2e:5f:0f:c9:
fb:de:af:86:44:01:be:b3:d2:fd:48:ec:18:fb:9e:
11:69:e3:1d:8c:02:15:d2:7b:22:5f:23:0b:8c:df:
5a:08:91:22:46:34:a2:08:ba:72:d5:23:2d:1e:c2:
1e:e2:92:d6:cd:ed:fd:df:1e:88:b1:4e:84:31:b9:
05:ef:ec:b0:7a:45:02:61:9b:9f:de:33:a6:d1:1a:
7d:00:c2:94:d8:10:1e:bd:b9:56:e1:36:63:f7:3d:
5e:9a:1b:4c:07:9e:10:61:1b:e1:6d:64:3c:0d:d8:
4f:51:08:e6:89:25:7a:4a:ea:f0:07:8d:24:30:e5:
14:af:29:48:61:c3:7a:0e:d2:27:54:c0:74:85:52:
8b:25:66:19:e9:11:fb:4f:c2:4d:cb:fd:f3:05:4a:
a2:2f:84:7e:24:f9:80:8d:11:93:36:0c:03:cf:64:
15:9a:4d:e1:3f:ca:de:2a:fb:a4:36:5a:03:58:48:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:27:D7:04:EF:35:E0:13:01:95:E6:16:CF:FA:02:22:69:28:D6:A6
X509v3 Authority Key Identifier:
keyid:F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fe:2b:26:36:5d:70:8a:f3:60:6a:6a:02:87:05:5e:72:de:
45:4e:bb:f3:9a:52:4b:cf:62:11:f4:e2:8b:9d:e4:8f:54:d1:
8d:c8:4f:8c:c8:7d:53:67:a4:d6:e8:df:1d:77:b6:56:3c:ed:
4f:f0:1a:14:d0:f6:06:6f:bb:71:0b:d3:77:24:fc:8d:e5:d9:
37:71:a9:55:2c:f8:05:b3:46:a5:4a:d2:2f:c2:61:91:03:95:
68:76:4d:e9:fc:b2:89:ad:a6:ff:93:b0:fd:b8:aa:5e:97:9b:
a1:27:e5:b6:13:6a:7a:ea:11:a9:db:a1:a4:61:b9:f2:0b:04:
50:75:42:5a:9b:c6:6b:a9:b0:ff:0f:3a:47:7d:02:89:05:d5:
b7:4a:21:b5:a5:20:e6:89:a8:02:81:29:bf:46:e8:50:6d:cc:
64:c1:23:22:bb:ce:c2:71:96:41:ba:55:48:a6:93:d9:8a:4f:
ac:57:4f:1d:d3:9e:90:5b:1d:78:f8:bb:e5:31:86:c9:f6:b0:
02:22:21:57:d4:1c:d6:b6:d4:0a:e3:87:2b:eb:6a:f1:0f:fc:
09:2b:62:05:34:4c:c1:bf:13:57:8f:b2:41:93:d7:81:57:93:
96:69:33:52:a7:5a:8c:16:3a:98:d4:ef:a7:59:d4:e9:5c:42:
a4:3b:2e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:16 2025 by rpki-client