Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File: g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier: wm31GWwko5n5vfIy+11h/2B8MX3GnLQtBJny0594KlM=
Subject key identifier: 62:86:1A:A7:A1:1D:E0:84:82:E3:A0:BB:D8:0F:98:34:AA:2E:7F:F4
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 0199FCC63C8A247F4FC265D67F94446504E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number: 0BCF
Signing time: Sun 19 Oct 2025 14:01:14 +0000
Manifest this update: Sun 19 Oct 2025 14:01:14 +0000
Manifest next update: Mon 20 Oct 2025 14:01:14 +0000
Files and hashes: 1: Ep6x42DXRSqizolUteEfvKxUcLA.roa (hash: R7QtcNnXyeV8OJfFTG/3xT0jdYWPM+BRX6IIEmRZyXk=)
2: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: 6WrXdugcbPc5ZmcbwWaCGSL9hPxZuH4NBVTHsI2gaoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3c:8a:24:7f:4f:c2:65:d6:7f:94:44:65:04:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Oct 19 14:01:14 2025 GMT
Not After : Oct 20 14:01:14 2025 GMT
Subject: CN=62861aa7a11de08482e3a0bbd80f9834aa2e7ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:c2:c5:ab:37:c5:59:51:81:aa:e4:37:92:
ab:bf:79:ec:4b:07:39:57:99:f0:7f:50:ff:34:11:
39:0f:c8:e2:94:5c:b4:35:47:b7:52:47:4c:59:5f:
14:62:e9:e2:bc:c1:02:a3:16:c6:59:ef:07:dc:67:
31:d1:dc:a4:23:f1:46:2b:cb:c6:8c:47:5d:c1:69:
59:26:5b:aa:4e:43:f3:50:9f:88:8e:76:71:e9:c7:
48:84:99:fa:19:6c:19:a7:38:e7:0b:2c:0e:3d:59:
8d:f0:05:b0:d3:25:73:36:aa:db:9d:32:5f:62:f1:
e3:51:6c:17:5e:c1:65:7e:de:ac:90:06:60:73:48:
85:c7:1e:7a:4b:8f:b8:3f:a3:92:16:34:5c:9d:43:
3c:c6:bc:fd:c2:62:af:e4:87:2c:9b:9e:a7:28:5e:
a4:dd:ae:96:a6:93:93:c4:67:80:a9:94:f3:8c:63:
4c:b0:9c:86:0f:f7:0e:04:70:97:98:36:28:37:ac:
31:a6:50:54:c7:2e:7f:a6:2a:11:eb:7b:21:a9:98:
f7:b4:af:3b:6a:7e:45:82:e7:bc:d0:60:25:f4:f7:
7d:9b:b3:ea:f2:0f:32:b0:c6:4d:21:15:81:29:89:
58:cf:e8:57:ce:84:d9:91:4a:76:b5:55:e4:21:2b:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:86:1A:A7:A1:1D:E0:84:82:E3:A0:BB:D8:0F:98:34:AA:2E:7F:F4
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:69:5c:53:b2:17:73:e0:7f:bd:1b:ea:30:ab:d7:c7:de:e0:
46:d0:42:4c:57:69:1d:8e:df:e2:c8:b6:ef:e2:da:f7:77:4c:
c7:ea:ca:f0:16:76:a9:ef:4f:8c:1c:97:ef:93:10:0a:58:6b:
1d:11:7a:ff:8d:58:78:a6:26:58:2e:03:06:42:52:4c:dc:9f:
fb:25:65:d9:25:01:68:eb:07:73:3c:72:f4:47:aa:44:96:0b:
17:b6:db:bf:6e:98:1e:23:15:a2:18:9d:fa:ce:84:a7:5b:e2:
26:cf:5d:00:69:78:5c:8b:20:cc:fc:93:d3:cf:21:62:21:43:
89:98:35:a7:0b:14:7b:a6:ad:59:8b:ab:4c:e0:e8:0e:f5:7c:
94:b3:43:df:8d:7b:11:5e:0a:11:3b:9b:31:72:5c:e9:e8:a2:
63:32:21:72:66:a8:37:6e:26:16:d4:ba:7b:bb:a1:ee:ea:d4:
5b:3e:92:fa:ce:f2:87:29:52:6c:53:49:6f:7f:8c:93:6f:b1:
b5:ed:f4:87:4e:79:a0:1d:a4:04:ac:5c:7f:d8:26:db:33:da:
40:80:8d:04:08:3b:03:af:f2:41:cb:4a:6e:94:5f:1c:3d:d6:
bd:17:50:5a:3f:ef:10:b1:0b:00:57:b4:15:15:d1:73:63:3f:
cf:a4:b4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:20 2025 by rpki-client