
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier: l7IzaoZqIx6qfnYOm5AQJ6yiHUYMzB+xc3lYXzOHpGw=
Subject key identifier: B1:20:69:4B:C7:0F:68:F4:92:D6:AE:DC:04:0B:A6:60:02:EF:E7:B7
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 0199FDA1CBC700D361F940DC0A550A595550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number: 1592
Signing time: Sun 19 Oct 2025 18:01:03 +0000
Manifest this update: Sun 19 Oct 2025 18:01:03 +0000
Manifest next update: Mon 20 Oct 2025 18:01:03 +0000
Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: Z2AGKeLyxRvHOpxvqfXe5ZbPbR7INnQAhUgTzFUj4r4=)
2: mgSfpYYXhzx-YzhWkHnATXB2kdM.roa (hash: jRZKuHYyv7qD4dtktC7M7U3X1Ig58/uIyWzJPwsvUJw=)
3: rNfq-FdDmBkThN1vTMRNxR08DZE.roa (hash: W7X3TtRWNC36QWPCWtaayZ46NgLlqWMrgmB/Yk/phsc=)
4: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (hash: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:cb:c7:00:d3:61:f9:40:dc:0a:55:0a:59:55:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Oct 19 18:01:03 2025 GMT
Not After : Oct 20 18:01:03 2025 GMT
Subject: CN=b120694bc70f68f492d6aedc040ba66002efe7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:76:89:91:79:31:2d:25:48:93:c8:6e:78:
99:42:24:ae:29:01:f1:3f:1a:ef:55:e9:b4:23:7d:
15:2a:f0:82:b9:35:3d:d5:86:1e:88:af:82:b8:cd:
0c:98:70:0d:bb:72:ac:eb:8e:bf:80:0c:0d:96:b6:
8c:df:a1:3e:6c:97:d2:ab:75:5c:02:4c:27:5e:37:
85:a0:70:87:ad:ef:94:fc:95:69:fc:de:3d:10:17:
b4:07:58:62:6b:7a:24:25:d2:9b:c1:52:f3:f7:a9:
29:e4:53:20:04:4b:23:37:36:72:0e:e0:33:26:ba:
57:d7:dd:1e:91:c1:8e:4f:47:09:17:2a:4a:4f:d9:
12:09:5d:7a:88:53:ca:ef:65:9b:48:60:b0:ff:13:
86:60:a3:96:22:c1:ce:c1:34:5b:71:45:16:2d:01:
97:7c:ea:54:c6:13:32:be:40:94:1b:9f:9a:ae:8f:
70:79:bf:17:34:01:8a:5d:ed:9f:e7:5f:d9:6c:59:
89:4f:f8:10:bc:92:d3:f3:9d:f8:45:0f:99:3f:e4:
01:df:03:0e:3f:1e:6f:12:a1:04:16:bc:24:a3:7b:
a8:b1:99:ca:77:d1:a5:cf:57:1e:12:ed:c3:b1:57:
c6:3e:b9:0f:cb:96:2b:26:44:b8:d2:52:b6:3e:2e:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:20:69:4B:C7:0F:68:F4:92:D6:AE:DC:04:0B:A6:60:02:EF:E7:B7
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e6:c3:2e:8b:9a:9c:f7:da:cb:b4:fb:5f:3e:f8:44:66:a5:
09:be:8b:42:43:d7:80:dd:f1:f8:96:be:7c:4e:c6:18:84:38:
2d:5f:1d:9a:bf:58:32:51:0c:03:51:e7:57:72:cc:16:15:f3:
99:05:70:6f:6f:ba:c5:c1:d0:bd:26:98:f0:d9:dd:da:87:f8:
fd:43:f4:44:7b:a5:11:cf:1e:6d:99:3e:1e:dd:7d:14:4d:8c:
74:3d:5b:a8:e7:38:bd:13:bb:10:2e:f0:97:fd:ca:1c:d2:a9:
0c:1b:9b:22:fe:ba:c4:1a:63:a2:e1:ff:07:b2:05:90:45:ea:
78:b5:1b:d3:9f:06:24:1d:a1:e4:e9:0d:3f:c9:19:6c:ed:e3:
34:99:3c:44:6f:ee:d9:63:23:b3:d5:44:cc:3a:7b:12:7c:e0:
05:d2:fe:bc:c5:6b:96:8e:d4:3c:67:be:5c:9d:b5:26:d0:74:
1e:c7:c9:e5:8f:9f:3a:9d:f6:41:32:90:ac:50:b0:8f:1e:4b:
69:8f:9c:df:54:72:9f:28:74:1e:d2:0b:ee:93:6f:6c:c8:b0:
06:a7:3d:b1:60:f5:d8:b8:a7:aa:7b:62:1c:4e:72:c2:a8:61:
ec:f3:f1:d6:97:91:66:f3:17:bf:e4:84:10:8b:bd:37:11:29:
81:f7:2a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:56 2025 by rpki-client