Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json)
Hash identifier: vkxJ1UCyHI/ch+TpHUPIr0xwE2VUpOaRUW98ShXQk2w=
Subject key identifier: BC:A5:81:B1:39:F7:D1:42:D9:13:38:B4:C1:E7:FB:5D:5F:D8:E3:B1
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 0199FD6AFDC13A33AA0B8D45A89A290D5558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
Manifest number: 065A
Signing time: Sun 19 Oct 2025 17:01:11 +0000
Manifest this update: Sun 19 Oct 2025 17:01:11 +0000
Manifest next update: Mon 20 Oct 2025 17:01:11 +0000
Files and hashes: 1: 7DAxFJT5VyzcSgHTnJmDdUKxQNw.roa (hash: 37ijJqs68GCjjpypVGN9wvpiuMLosaLv3KKoBIsmUtU=)
2: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: IYQDbAHYoi13IH2QG56UVEwPQej/CFvJLjeJ5uBmjqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:fd:c1:3a:33:aa:0b:8d:45:a8:9a:29:0d:55:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Oct 19 17:01:11 2025 GMT
Not After : Oct 20 17:01:11 2025 GMT
Subject: CN=bca581b139f7d142d91338b4c1e7fb5d5fd8e3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:45:64:d3:bf:b1:64:45:0b:2b:9a:e8:6b:
1c:41:ef:b6:c7:bc:69:0d:b1:f2:6d:4e:65:86:3c:
cc:b4:d5:a7:d1:0c:ec:bf:17:a5:23:91:29:5b:38:
bf:9f:8c:c9:b9:29:72:fc:bc:f6:f8:80:6d:55:b1:
44:62:76:48:7c:f7:b0:41:07:07:c6:6d:92:f7:f4:
ae:9f:5d:29:93:df:e3:a6:b8:3d:8e:06:67:55:d4:
26:ff:70:63:c1:47:a0:b5:1f:70:5c:3f:e1:96:e0:
40:c9:f0:b8:fd:83:4a:b9:39:ae:46:18:be:d0:c2:
67:dc:82:a8:80:03:0d:82:ae:00:1a:8a:c3:13:bb:
48:7c:c0:51:d7:a4:54:8a:15:61:61:2e:68:57:47:
ff:28:c2:ab:b4:3f:b5:21:f3:68:23:a6:87:23:84:
c9:61:d4:19:0c:28:14:b0:4a:b0:76:39:6e:dc:c7:
12:08:94:37:5d:58:13:63:ef:09:25:73:0f:91:74:
a4:04:71:0d:bd:4f:d4:c3:f6:3a:8f:dc:de:a5:07:
1f:21:75:d2:2f:eb:d0:67:77:2e:a6:95:7a:28:84:
86:90:52:c0:f6:b0:9c:0a:7e:19:66:f4:b2:f9:11:
ba:57:e3:43:fd:8d:a2:8d:d1:42:4f:65:4b:3e:50:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A5:81:B1:39:F7:D1:42:D9:13:38:B4:C1:E7:FB:5D:5F:D8:E3:B1
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:56:06:db:42:8c:5a:d7:d9:11:eb:1d:f2:0f:21:31:d3:30:
20:46:58:13:d2:d2:f4:4c:e5:be:d1:57:72:e9:5f:38:8c:b2:
ad:e3:ee:e1:23:5b:d3:ce:91:96:f9:29:a9:75:3f:5c:a0:6c:
37:37:bd:28:61:73:d1:7c:52:07:b9:98:a4:02:74:77:67:40:
81:14:21:d5:f2:c0:98:f1:6e:55:af:4d:29:62:44:8d:f7:c0:
e1:cb:33:2b:22:ea:9d:7a:e4:46:a9:70:dd:11:d6:72:31:a2:
76:22:7d:fd:70:de:78:7d:a4:e0:3e:3d:2a:05:64:7b:b5:c3:
65:04:b5:5c:72:8e:8a:7c:18:4f:db:c3:3f:af:71:a4:fe:41:
5a:f8:12:1d:8a:2c:76:11:e6:72:29:59:20:b1:9a:3e:c7:6c:
aa:6d:cb:5c:b5:fa:89:f1:23:aa:0a:cb:ba:6c:e1:9e:2f:b4:
fe:78:05:bf:31:fc:63:08:bb:32:fd:0f:ed:72:e7:73:05:ea:
4d:b4:06:a8:27:9a:b2:08:85:5e:29:bf:ac:f2:3d:be:9e:91:
0a:49:96:58:25:79:e9:64:7f:aa:2d:fd:c2:9c:17:74:17:bd:
b8:16:9a:13:b4:68:66:58:d1:06:10:75:63:8e:a1:e0:43:56:
d3:fe:a4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:32 2025 by rpki-client