Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
File: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json)
Hash identifier: mdNX3QqaW3vEQvZDZ9rzDt6p/7bYZ6JVJS7L0Q/91JU=
Subject key identifier: 9C:0D:A0:30:58:D5:F2:EF:B6:06:CA:06:DC:32:5D:CD:2D:83:C0:C8
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 0199C4C51018E94E15F538B45DCB7EC1E8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
Manifest number: 0319
Signing time: Wed 08 Oct 2025 17:01:13 +0000
Manifest this update: Wed 08 Oct 2025 17:01:13 +0000
Manifest next update: Thu 09 Oct 2025 17:01:13 +0000
Files and hashes: 1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: 6ECVZKF8/HFhtiN0iPB/6Ed4od6f5+IRFWSE/uwLMY8=)
2: QYL-bJP18_uE1vIYufetQA8LNBw.roa (hash: 5iykeFNsIB7WkpEwkyxi6tSK6cOuYKMgbt5OfyYFMpc=)
3: mfDwEiGRmiWMmFDQIE-xmSECzg8.roa (hash: iS/PokmAhVq2sVGbLhXCo+Ur9JIXXT1eTOi1veSDLr4=)
4: mfVSR44fIY6bkhiOSueC1ITxv6w.roa (hash: xZqOi81DoSglCV29EBbiUSqFQDxJr7C1mJvYXhv2Pug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c5:10:18:e9:4e:15:f5:38:b4:5d:cb:7e:c1:e8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: Oct 8 17:01:13 2025 GMT
Not After : Oct 9 17:01:13 2025 GMT
Subject: CN=9c0da03058d5f2efb606ca06dc325dcd2d83c0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:df:cd:65:f2:46:b4:6e:d3:f4:ab:b9:84:
ff:ed:27:b3:f2:f4:4a:0c:25:f9:6d:92:e3:a3:cb:
23:79:a1:61:0f:93:5f:04:cc:e7:75:74:e2:70:8e:
5c:38:c1:c5:94:fe:a8:6c:d0:28:a6:55:cc:9f:95:
5f:ee:a0:ae:cb:d3:e7:a9:ac:1e:c5:67:6c:bb:43:
17:27:b9:33:41:9a:d4:cd:e6:52:99:0d:65:e1:35:
14:5a:38:4e:62:d6:b8:cd:e9:25:0c:b2:4f:12:36:
7f:45:cb:07:02:38:d7:43:a8:37:29:69:5b:82:c5:
8f:7c:05:61:1f:92:20:dd:1d:07:78:84:f6:25:33:
49:46:7e:9c:18:cf:78:10:0e:fb:fc:35:cd:15:30:
36:0b:0a:86:90:23:b5:79:56:24:0f:25:69:9f:bd:
e6:33:95:61:19:6a:6f:4d:ae:8f:c3:1e:a0:77:4a:
73:63:26:f5:6a:73:c8:e5:87:3c:af:ab:6a:a3:77:
38:32:6f:c1:01:27:b1:61:7a:6d:69:4f:e5:c8:68:
9f:60:35:68:f0:f2:d8:00:5c:0a:38:af:fd:f3:7a:
28:57:6e:82:17:9a:43:fe:34:65:be:53:01:9e:b1:
20:a5:2e:35:ab:f8:d2:cc:f0:07:27:22:6f:96:e0:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0D:A0:30:58:D5:F2:EF:B6:06:CA:06:DC:32:5D:CD:2D:83:C0:C8
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ea:53:dc:02:72:a0:5c:67:f9:20:54:fe:0b:8e:b6:cf:b1:
44:7b:9c:86:ca:68:1c:fe:22:ab:86:4e:f0:e2:85:7a:eb:ae:
94:23:fb:86:75:ce:55:43:e5:07:9a:2a:71:45:ac:72:f2:93:
e8:85:89:7a:0f:55:67:3f:c4:31:ff:bb:4d:78:e7:96:1a:ee:
e2:a6:0b:86:82:7e:34:b0:c0:81:d3:86:49:5c:b0:41:c4:84:
b7:bf:09:4e:3a:d3:9d:78:1d:3b:de:36:81:c5:a1:36:7b:ba:
90:82:a0:39:fe:a1:c6:dd:c8:86:06:14:5c:0e:44:35:73:50:
79:b9:c9:f4:3a:b0:fe:b8:96:25:b7:9a:b1:ab:9d:ed:9c:5b:
97:11:8f:cf:71:77:06:f5:a9:3e:ac:d1:08:ff:3f:c1:4f:f0:
9c:72:21:68:7c:cc:7e:a6:46:6a:c9:c3:ef:42:5b:f9:fe:b1:
db:59:df:7a:6d:8f:4c:ef:2d:27:47:1e:11:5f:c4:d1:35:f9:
0a:e3:51:8b:43:bc:79:97:8c:42:0f:47:e1:e1:b7:4c:b6:26:
46:5d:4f:33:0e:fc:f0:b4:b5:97:87:55:04:45:bc:20:f9:4e:
28:67:b8:ad:a0:6a:be:85:1f:b5:41:c0:b4:ae:a3:48:0a:71:
ea:09:b5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 00:41:26 2025 by rpki-client