Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: ctsDi/u/5kQ7Oq8cau0W8WLXfZGkNyw9wW5kO+PmH4s=
Subject key identifier: 84:14:3B:DF:26:BB:8A:2B:98:48:69:80:B4:A2:6F:82:96:B4:41:63
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 019A2D44556F48D7B911B59EF8A2324E4D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0B25
Signing time: Wed 29 Oct 2025 00:00:44 +0000
Manifest this update: Wed 29 Oct 2025 00:00:44 +0000
Manifest next update: Thu 30 Oct 2025 00:00:44 +0000
Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=)
2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: t8OaG+CFWsf87swHtm1StQXopYzdKSE9pTA/Unqneso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:44:55:6f:48:d7:b9:11:b5:9e:f8:a2:32:4e:4d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Oct 29 00:00:44 2025 GMT
Not After : Oct 30 00:00:44 2025 GMT
Subject: CN=84143bdf26bb8a2b98486980b4a26f8296b44163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:ac:b6:b8:6c:74:08:c3:5d:41:5f:2d:9f:
b4:66:4b:22:96:f3:ef:44:b4:17:dd:8d:94:d0:7a:
a3:23:55:5e:7d:aa:49:6b:1c:47:f1:30:9c:34:c4:
5f:15:b8:95:88:72:f2:af:10:a8:eb:d0:df:2b:95:
66:2b:c6:46:15:dd:7f:e2:5c:5b:50:1a:8d:02:f7:
2a:0d:4d:86:3d:3c:83:75:54:26:0c:87:3a:1b:60:
ff:67:97:b7:30:b4:14:75:53:d5:23:98:e9:25:f7:
c2:e2:c5:ce:11:d9:a7:02:cf:cc:49:20:59:6e:27:
a6:3c:13:86:f9:aa:3e:cc:28:13:e2:76:40:a7:65:
7e:41:87:c6:a3:70:88:d9:9e:c5:42:f7:85:d8:fe:
b9:c5:92:07:96:1c:47:f6:40:f1:26:56:64:b6:84:
18:ce:54:de:6e:c9:41:79:11:10:15:2b:2b:ca:3b:
10:bf:8a:75:03:c6:23:5e:f0:ab:d1:72:a8:b6:03:
43:6f:91:7f:c7:95:51:df:ec:7c:f9:ad:b1:05:9d:
0c:5b:67:e6:b1:0b:ff:11:5f:94:be:41:bc:da:40:
20:6f:4a:e6:78:2c:eb:bc:6a:9c:4c:8c:b9:70:f8:
6e:a4:55:7d:e2:8d:d3:70:60:6c:34:e7:20:79:a6:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:14:3B:DF:26:BB:8A:2B:98:48:69:80:B4:A2:6F:82:96:B4:41:63
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:6f:c7:54:da:51:05:2b:db:e5:d1:8d:d4:bd:a4:df:f1:06:
44:3b:ee:aa:8a:52:ec:26:b6:9e:54:f0:46:dd:6a:97:12:7f:
04:69:da:10:5c:32:24:04:bb:54:25:2a:dc:8d:24:ee:1a:fa:
40:a5:a0:f4:b2:9e:aa:9c:fa:db:08:22:3a:62:6e:b7:0c:dc:
b6:d7:bc:59:a4:28:e9:bb:22:9b:c0:80:d8:de:a8:34:b8:81:
72:c1:e0:a1:e9:73:3b:c0:af:aa:57:0e:d0:13:62:09:2a:32:
4d:7d:ba:24:08:9a:04:cb:b8:9b:66:59:59:3a:fe:3a:c1:cf:
e7:e7:0e:fd:70:92:83:d6:0c:69:86:a5:83:67:5d:75:26:84:
43:d4:98:c2:f3:67:d1:74:c1:4d:be:df:01:aa:a0:81:5a:5c:
40:ee:45:6a:22:96:68:08:a6:3d:ef:c9:89:88:50:9b:4d:3e:
c8:0a:d7:6b:2b:b7:c4:73:32:c4:cf:08:c2:35:2d:f6:a9:00:
46:39:64:04:e1:2c:b2:31:fa:0c:e1:f0:9f:60:5c:ff:c5:98:
7b:be:f9:a7:33:36:81:f0:fa:e1:5d:43:4f:cf:4a:fe:e7:b7:
b7:c9:de:84:00:4e:0d:8a:3b:a1:3e:4b:9d:63:b5:88:64:cc:
1e:e3:2c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:05:01 2025 by rpki-client