Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: AJ/wQzT1aIN60sYlSyqONGfRF8NM1TmjQYIkENRPaKg=
Subject key identifier: CF:69:BB:83:30:B6:0D:2F:15:FD:FF:EE:4E:10:40:DF:A4:8B:DD:B2
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 0199FE46D45AF3342B19CBF79DC98F03F6B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 0DC4
Signing time: Sun 19 Oct 2025 21:01:18 +0000
Manifest this update: Sun 19 Oct 2025 21:01:18 +0000
Manifest next update: Mon 20 Oct 2025 21:01:18 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: PxlYhCGKwtcJWaIUKW/CNhClFIY5VldaHFV6soocyIc=)
2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:d4:5a:f3:34:2b:19:cb:f7:9d:c9:8f:03:f6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Oct 19 21:01:18 2025 GMT
Not After : Oct 20 21:01:18 2025 GMT
Subject: CN=cf69bb8330b60d2f15fdffee4e1040dfa48bddb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:37:ba:5a:73:57:ae:49:5e:55:a2:04:60:
e4:c5:49:53:e5:7a:f7:0a:6d:74:dd:56:bf:d6:64:
a7:4a:0b:43:a4:15:5a:16:f9:0c:33:c3:d7:05:d8:
31:c6:e9:0e:75:d4:f9:73:69:ed:27:2f:13:31:ab:
bc:4b:3d:f2:bb:a2:96:99:7e:a2:cf:55:96:71:f1:
3b:e6:ec:c6:74:fa:ec:44:ac:49:da:e2:20:e9:40:
bc:94:3c:e2:be:12:67:6d:ca:43:93:01:1d:35:9a:
ed:9e:a4:68:85:ca:f9:52:2f:bf:c5:bc:48:7a:59:
51:79:6d:03:c7:54:cd:d0:65:c5:04:40:b3:56:d2:
9c:f3:24:cb:52:f5:fa:a8:67:70:38:4e:c7:5e:fe:
02:e9:d4:00:31:a3:be:38:84:bd:33:a4:7d:84:12:
8c:9e:e4:ce:39:cc:f5:04:fe:6b:e3:e6:c7:40:62:
4e:11:86:11:31:94:d3:3f:e4:16:03:73:ee:5e:cb:
da:18:25:db:52:16:a5:39:5d:fd:a8:99:61:35:32:
e8:38:67:ea:29:eb:51:b5:5f:cd:60:37:5c:b8:20:
e6:1e:9c:4f:95:9e:1e:b6:d4:22:e6:42:0c:c8:b3:
18:af:b1:e1:d8:b2:f1:39:75:c9:af:9b:a7:8d:5b:
e9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:69:BB:83:30:B6:0D:2F:15:FD:FF:EE:4E:10:40:DF:A4:8B:DD:B2
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f8:7a:3b:19:91:e4:4b:b4:1c:6b:f7:9f:e3:58:d0:d3:4e:
bd:07:53:43:08:c8:f2:5e:bf:4f:27:fe:96:c3:29:63:53:c0:
be:9d:cc:8e:0c:51:ee:a2:4c:e8:15:c8:10:f0:57:64:0b:38:
71:91:d0:ef:85:19:44:cc:53:73:53:6b:fe:d1:27:f8:a2:f1:
8f:ca:13:85:78:8b:8f:df:9a:5f:40:65:dd:38:04:6d:f8:30:
c7:d8:ae:44:04:35:fa:58:d2:24:be:2f:68:cc:ef:c5:ae:8e:
5b:f7:98:ce:ac:3b:64:8a:38:f3:29:d3:39:6b:1e:28:d5:b8:
73:25:73:ab:13:eb:a2:74:02:33:5e:65:dd:4e:f1:d7:76:86:
e8:aa:3c:62:bb:83:81:4e:a9:10:b9:e7:c7:ef:30:8f:ac:30:
91:8b:03:1c:82:fd:49:ab:36:93:02:65:43:d8:85:24:bc:0f:
71:b1:76:f5:7f:aa:f4:7e:cb:4e:7b:3f:64:a8:bf:3c:a2:1a:
d3:b3:70:31:6d:f8:16:eb:c4:73:93:b6:05:8e:2a:e2:49:3e:
8e:be:20:11:68:91:ce:e8:ac:e8:6b:7e:ba:69:11:32:11:53:
17:04:c9:e5:9f:c7:0b:e1:0d:80:21:a0:4f:06:0d:5d:19:b3:
58:1b:41:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:54:52 2025 by rpki-client