Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier: vk9/MjOPRYO1I/dhO1sXN4EJpO+eFwFm45//pnymm50=
Subject key identifier: CA:9D:A5:F6:12:EE:06:EF:28:39:AA:8B:74:26:16:E0:38:F0:36:04
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 0199FB7CBB673001A94DBE75DD3C1A6E000B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number: 0AC3
Signing time: Sun 19 Oct 2025 08:01:19 +0000
Manifest this update: Sun 19 Oct 2025 08:01:19 +0000
Manifest next update: Mon 20 Oct 2025 08:01:19 +0000
Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: E6kbJw9GLk0gQplYOzMpxaJxPSeTn2v5vJDXZaQvu14=)
2: rVvEPxI-l2KV5RW4qoRYscyYDw4.roa (hash: 0O6ssmxEK7LDtpVncPYWugPc3GeZirxznz/PZThAqb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:bb:67:30:01:a9:4d:be:75:dd:3c:1a:6e:00:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: Oct 19 08:01:19 2025 GMT
Not After : Oct 20 08:01:19 2025 GMT
Subject: CN=ca9da5f612ee06ef2839aa8b742616e038f03604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:b1:30:e7:84:34:e4:36:19:d8:11:4a:85:
03:6c:4e:d3:94:9b:e5:b7:12:6c:91:88:4a:89:1d:
8a:6c:bb:f0:16:49:96:e0:f8:4b:bb:78:3c:d5:9b:
4f:d2:c8:f8:27:da:fc:41:bc:f4:2d:d8:50:9f:b2:
5b:79:67:82:82:b7:19:00:28:ba:81:15:2c:f6:18:
ac:8e:3f:84:09:23:96:25:9b:c6:6c:5b:ff:3e:5d:
8d:0c:b2:09:57:67:82:bc:87:8d:a2:b6:99:9d:10:
0d:2c:7c:76:ef:dd:a4:ad:e7:81:54:5e:65:1c:72:
3d:fc:b8:01:be:cd:39:6b:39:0c:ca:33:5e:f5:ff:
b1:32:42:ee:01:4b:27:e2:c5:eb:03:d8:c8:0f:50:
93:02:cf:04:d8:03:2a:48:8f:11:6c:b4:cd:4c:5b:
e7:e2:68:67:3b:ba:b4:5d:4e:b0:6b:f5:1d:f7:af:
a3:78:35:73:ab:77:88:e0:d2:33:95:48:47:89:20:
54:91:75:e2:fd:7e:4b:cd:cc:70:f1:ff:44:54:f7:
37:f3:63:eb:23:fe:55:bf:35:56:d1:60:8e:ef:59:
3d:0b:3a:01:88:a8:3d:53:59:1b:a2:6b:2c:b8:6b:
67:d4:12:9b:a2:9c:62:c1:d7:04:5a:de:20:13:fd:
0c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9D:A5:F6:12:EE:06:EF:28:39:AA:8B:74:26:16:E0:38:F0:36:04
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cb:17:31:d9:9b:e4:b3:46:1c:fb:21:de:e6:5c:0b:a8:1f:
92:75:82:be:52:b2:66:69:c0:41:c2:6d:06:13:9c:b0:0e:f5:
17:97:75:91:03:8f:4a:4b:58:b4:15:0e:c8:26:93:b7:14:8e:
f2:36:41:30:ce:26:19:a8:43:ea:6c:e3:f3:87:00:6f:65:83:
5f:e1:d8:26:3e:ce:00:f7:ee:05:ed:37:7b:bd:bf:24:5a:d1:
25:74:df:4e:dd:cb:63:dc:28:1a:18:45:4f:3c:55:1c:45:f5:
48:8f:28:28:d5:82:ee:43:79:c8:2d:f0:65:fa:fd:3c:37:f3:
22:2a:72:90:c1:9b:a4:d3:0b:5c:2b:ff:01:2f:a9:ca:51:41:
32:4c:5b:c8:b0:f7:49:3f:80:77:01:ab:82:12:d9:32:51:be:
fc:5d:1f:a0:07:2f:00:bb:43:82:8c:37:0d:d7:97:b2:14:01:
5a:14:a3:33:54:66:a2:26:75:75:71:fe:b2:f7:c7:79:de:6e:
5c:75:8a:e0:9b:89:57:a2:ed:e4:16:a5:33:c3:32:b9:cd:0f:
ec:80:8a:b1:c1:c2:22:f5:a5:7b:a6:99:bf:d7:90:ee:91:49:
e0:1e:fa:f2:58:3e:7e:bc:8c:24:5b:ea:72:8e:7a:8f:a9:93:
9f:90:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:25 2025 by rpki-client