Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: DRC+MwEs7fOwV+kWvZbcXIdb8aA0QdDTlA4Osp4833U=
Subject key identifier: 78:52:56:9D:B0:D4:B5:CD:76:4D:8C:AB:D3:48:68:98:67:91:FE:6E
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 0199FBEAE4D6C50E47009DFACE2B7469FB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 0746
Signing time: Sun 19 Oct 2025 10:01:39 +0000
Manifest this update: Sun 19 Oct 2025 10:01:39 +0000
Manifest next update: Mon 20 Oct 2025 10:01:39 +0000
Files and hashes: 1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: 4otEjgeAeJroBACZCl5kMjZWvvYgWHFHCToiDRc2w84=)
2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e4:d6:c5:0e:47:00:9d:fa:ce:2b:74:69:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Oct 19 10:01:39 2025 GMT
Not After : Oct 20 10:01:39 2025 GMT
Subject: CN=7852569db0d4b5cd764d8cabd34868986791fe6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:f5:63:92:13:c9:80:5d:e5:b5:01:a5:97:
0e:4f:25:87:76:c1:43:9e:00:ee:37:4b:03:5e:b0:
ac:7b:60:64:26:80:51:db:fa:42:b5:e8:5d:ac:36:
07:87:b7:35:ce:ba:69:44:1a:fd:bb:5c:08:6b:fe:
8a:45:01:d5:17:28:a3:62:0d:32:16:11:dd:7e:64:
db:3e:01:81:cb:cc:a2:d1:22:f5:9e:d4:d1:7a:c0:
7f:4a:2c:f8:29:a0:e6:b7:81:85:17:ae:79:e8:7a:
41:94:41:85:26:34:0f:ff:a0:d0:fc:32:7c:6b:f7:
cc:91:8c:ee:b4:ed:e6:66:b0:c4:61:e3:e2:16:72:
b7:1e:fb:9e:c1:b3:69:34:36:46:31:5b:96:c3:22:
62:da:2f:ec:7a:02:63:8c:52:ba:ee:f8:66:42:9a:
38:02:06:bf:81:9b:61:1e:da:48:04:25:df:55:d2:
25:09:7e:9c:df:14:c2:aa:4b:e2:e2:d6:62:96:a3:
7e:56:55:53:66:bb:ce:66:89:23:b1:5d:0d:22:bf:
b5:95:f6:f2:e4:39:66:48:e0:4f:7a:04:0b:ea:8d:
e5:ab:ad:ef:45:e9:c7:2f:1d:13:2c:4a:eb:99:4c:
4c:0e:68:0a:2d:99:05:0d:dc:40:a2:45:da:42:e1:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:52:56:9D:B0:D4:B5:CD:76:4D:8C:AB:D3:48:68:98:67:91:FE:6E
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:20:be:0b:8e:29:20:8b:b3:8d:0b:9e:18:29:c5:23:a8:c7:
96:69:14:d6:0f:11:e7:f7:b0:bf:45:9b:55:03:8c:9a:f6:2c:
88:32:0d:ac:6e:b8:b6:8b:ba:9a:25:3e:4f:02:d7:a3:8b:f6:
64:d7:54:27:f1:a6:7b:53:41:69:2a:f8:ca:42:78:9b:d3:96:
4f:50:c3:76:f5:dc:3e:6d:83:90:fd:c9:7f:e4:a9:c1:96:f2:
32:01:03:fe:64:48:b6:0c:a0:77:76:de:86:c2:ba:52:64:f2:
9d:e7:8a:3b:96:c7:5f:71:9d:5c:a1:d2:59:b6:cd:e6:9f:2a:
43:65:56:2e:75:18:5a:b6:8a:0c:23:18:65:29:b5:3d:d2:e5:
b4:d8:46:54:51:ce:18:be:9a:6d:3a:d8:00:25:4f:6b:f8:89:
3e:49:ea:2e:3a:21:ae:8a:bf:8c:15:30:ff:9a:9d:d8:35:fe:
cd:b2:38:35:4b:24:24:c5:e5:e1:f0:99:fd:f5:8b:df:a2:d0:
f6:eb:19:c4:0d:6c:10:96:42:7b:de:16:62:83:d9:c2:d4:a8:
1b:6c:d1:07:ad:01:a8:71:9c:f4:68:cf:44:ec:3f:ab:37:d0:
c5:47:30:18:e7:fa:16:34:12:81:27:70:dc:4e:9b:22:a1:3e:
be:77:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:15 2025 by rpki-client