Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier: pmjZTmxoo/3ZYdwfs+Qgt+jkNUTIv9Cs8/LxAuPtQzE=
Subject key identifier: F5:E8:2C:C8:05:F7:97:08:C8:6B:FE:B1:DA:52:61:E5:1E:DE:80:B1
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 0199FE46CB89765BF364627F730AFCE0971A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number: 0FCE
Signing time: Sun 19 Oct 2025 21:01:16 +0000
Manifest this update: Sun 19 Oct 2025 21:01:16 +0000
Manifest next update: Mon 20 Oct 2025 21:01:16 +0000
Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: VwFyMvTCMifbLVIVbzD0owvqkMkWZ8bIObyN1cCpdS0=)
2: Wwn9-ZCeqmzjX68bfgDgANWQIBU.roa (hash: SXq1+cMpW/SHgqnUXdFiB1yUFLsr835szRqOWcz8MK8=)
3: uiAj7bl-SXv7JRxYm2NXVOyGIhs.roa (hash: a//eeH8sFnN4/flxUlmU/77Maqj7B9717/MAcvQSTcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:cb:89:76:5b:f3:64:62:7f:73:0a:fc:e0:97:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Oct 19 21:01:16 2025 GMT
Not After : Oct 20 21:01:16 2025 GMT
Subject: CN=f5e82cc805f79708c86bfeb1da5261e51ede80b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:c4:52:e9:93:63:ae:87:33:4c:d5:8c:2a:
61:e7:9d:5b:72:c8:be:17:20:8f:3f:db:51:81:1c:
07:ae:f5:5b:17:76:a4:a8:cf:ac:06:5e:fd:c9:c7:
67:92:82:eb:00:49:55:9c:1a:4a:34:38:ae:0f:e1:
bb:d4:ec:08:76:fb:bc:7a:59:92:0e:e1:91:00:b4:
b6:47:22:0b:c4:1d:80:6a:da:f7:f7:b0:e0:2b:9f:
41:20:60:6e:e4:fc:80:e8:40:79:80:60:72:4b:11:
68:0d:f9:1f:e3:6e:4b:65:0e:3b:1b:52:86:bb:51:
a9:81:ae:da:8d:dd:cd:a3:a5:c3:08:94:2d:13:f0:
0c:f4:e5:14:f8:e1:55:dd:63:f0:83:97:5e:c2:c8:
ab:f7:c3:74:1b:25:44:27:03:2d:5e:c4:06:31:1f:
ac:56:4c:8e:27:49:51:3c:01:8c:0a:bd:bf:ad:40:
bb:e1:05:f1:cb:1b:92:22:2f:38:91:25:d2:47:4c:
e2:b1:21:df:01:ed:d8:4c:fe:0c:45:e4:5f:e8:94:
b5:82:bc:96:a2:37:72:20:8e:ca:69:39:c2:81:61:
f7:20:a0:fa:0a:3a:55:2a:df:58:f4:32:f3:76:1a:
2c:d1:b6:71:d8:ea:36:26:6a:ee:2c:90:31:5f:90:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E8:2C:C8:05:F7:97:08:C8:6B:FE:B1:DA:52:61:E5:1E:DE:80:B1
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0b:b4:0c:0b:76:f5:fb:20:63:67:09:20:90:a9:52:ef:1c:
17:c8:26:d8:1a:76:8c:25:f9:c5:ce:ee:ce:54:f9:fb:a6:20:
bd:bb:12:7b:a2:eb:ba:55:d2:53:f0:4f:af:e9:c5:44:82:72:
46:50:de:a9:04:d8:f4:94:2f:1f:2e:2b:3f:de:a3:89:42:f0:
0f:96:47:c4:57:fe:1f:5a:12:84:7e:54:99:65:d0:e8:38:a9:
51:fc:52:ac:a1:49:fe:aa:c5:16:86:27:f6:66:f3:da:22:a5:
9d:af:6e:91:14:18:0b:c8:19:e4:5d:5e:c5:a5:53:6e:c6:a6:
a7:f0:a4:5a:13:9e:df:e1:a4:ac:69:b5:69:6e:d4:c5:66:83:
80:a4:88:79:00:6a:8d:13:c0:ba:79:60:c2:c9:ca:2f:bd:1a:
14:d2:cc:87:08:f9:05:4b:20:5f:7c:74:c7:54:9f:28:05:fd:
0e:ee:29:ca:2f:bd:dd:f4:7a:d1:53:60:78:3b:32:1d:27:f1:
55:33:5f:9b:58:a4:71:0d:b1:f5:ff:f7:0c:a8:3b:58:2b:0a:
1a:a6:1c:9a:a6:fb:91:d7:cc:73:fe:4f:2e:29:0a:22:cd:c6:
ae:f4:d2:76:ef:5c:85:6f:cc:88:54:8a:d9:15:b6:a2:8b:d6:
0e:45:29:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:20:37 2025 by rpki-client