Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: N8yBo8C/FA/QDoNTHpbZqbSYdE/fiz64C02aGx8zFZA=
Subject key identifier: DC:91:69:C4:7C:13:79:47:AC:F1:A6:90:14:A0:67:CF:A2:FB:C4:38
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 0199FC58D54B70A3BD122FFA76B5326DF765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 059C
Signing time: Sun 19 Oct 2025 12:01:44 +0000
Manifest this update: Sun 19 Oct 2025 12:01:44 +0000
Manifest next update: Mon 20 Oct 2025 12:01:44 +0000
Files and hashes: 1: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: /1lK6OvQV4KcSBy4ZgkqfGMuWKjLo3k12fNCEo1EuZw=)
2: ovmdpHkmxMF66EEddKGFlc2H0gg.roa (hash: EUcHFqazaZZxE+4WNuY1RVtJshsow0Yiv/MTq1HtYWE=)
3: r-plRi1ZpgmWnu-urPIdYNrFFFU.roa (hash: DxecFcu5t+xZ0qqmbJOm2zril/rb62HI5wbo3Djm3yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d5:4b:70:a3:bd:12:2f:fa:76:b5:32:6d:f7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Oct 19 12:01:44 2025 GMT
Not After : Oct 20 12:01:44 2025 GMT
Subject: CN=dc9169c47c137947acf1a69014a067cfa2fbc438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:b3:8f:68:c2:48:7b:8c:c3:9a:ce:10:cf:
27:a9:69:94:6a:74:75:bf:64:a7:68:17:24:93:94:
75:0b:f5:b5:fc:3f:0d:4d:71:a0:82:d2:b5:2b:43:
5d:ae:43:a5:1c:f3:de:9f:53:ab:07:ab:34:d3:17:
4e:5e:c1:82:46:ab:1d:21:ec:e5:fd:4e:8b:a5:77:
3a:db:e7:ef:15:b1:63:5b:3c:16:06:b8:4b:23:dd:
6c:54:cc:45:d0:b9:e3:24:af:6b:ba:f6:4e:64:b5:
ed:8a:2d:85:e7:86:89:ad:51:c3:4d:14:ca:1d:59:
1a:56:1c:c7:db:e7:29:ed:d2:de:2b:26:82:10:e4:
65:f0:5b:67:d9:b0:46:ac:6b:c3:d3:3e:b3:91:fb:
da:07:30:d9:c5:10:40:2c:18:da:ba:62:34:09:da:
83:ed:18:c6:d8:cf:4b:5a:ea:b1:49:56:6c:a4:de:
ab:c6:3f:67:c4:1e:10:e6:a4:17:36:8a:69:3b:8c:
42:cf:39:c0:9d:84:fa:df:b4:f3:57:85:06:3e:7c:
17:b1:92:0a:1e:55:e3:d3:39:cd:85:7b:3a:a5:76:
a8:6e:00:ba:ec:6b:75:a9:8b:38:e1:a4:95:c5:16:
03:05:3d:01:96:6a:43:05:54:e4:7e:2f:a2:ef:d8:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:91:69:C4:7C:13:79:47:AC:F1:A6:90:14:A0:67:CF:A2:FB:C4:38
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:16:69:69:ee:45:6e:d5:e7:f7:19:42:63:48:51:a6:75:34:
d7:78:04:3f:66:47:c6:21:11:6f:96:6c:72:dd:a7:97:5e:75:
2f:27:89:f4:10:9f:96:c2:cc:3e:ab:55:16:93:1c:03:0f:3d:
dc:2e:d7:68:56:7c:ca:ef:56:14:c2:1d:c4:75:d0:4c:e3:8a:
db:e8:08:34:18:c8:32:5a:44:bf:7d:a9:ba:24:59:ab:f8:a0:
f7:f2:d2:3d:85:fa:67:9d:df:f6:56:0e:3f:97:a7:3e:8e:de:
79:9e:fd:1c:81:ff:14:71:de:6f:8a:bf:9e:a2:07:fb:28:a6:
fc:f3:15:d0:06:a5:4c:f1:c8:d0:e8:30:2a:0d:34:fa:19:a8:
0a:ce:7d:31:41:95:97:d2:99:13:98:b0:9c:a0:a2:65:d6:45:
6b:53:c3:5b:85:f9:ad:87:a9:20:4e:9b:15:09:d8:b9:b3:85:
25:db:f9:23:38:1b:1f:91:16:76:a7:ad:62:dc:4e:2a:e7:b3:
81:4a:54:73:56:6e:4c:0a:cc:19:03:99:70:7c:53:e5:6c:bd:
a8:65:cf:e1:86:36:33:d1:45:bf:58:c2:d9:81:fa:88:4c:2e:
df:ad:db:b5:1b:a9:88:58:a7:5b:b8:e2:c6:0a:86:aa:90:8d:
da:63:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:40 2025 by rpki-client