Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json)
Hash identifier: pejkTrtdi1kyum1hxXiWWFqX193BJl9Nh35i2ulPwXI=
Subject key identifier: A5:A6:BA:C8:30:17:B3:8E:18:DD:27:CE:A7:8E:65:E3:17:94:0B:6E
Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140
Certificate serial: 019A1986D0F30D2252564C65B02583153740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
Manifest number: 035D
Signing time: Sat 25 Oct 2025 04:00:57 +0000
Manifest this update: Sat 25 Oct 2025 04:00:57 +0000
Manifest next update: Sun 26 Oct 2025 04:00:57 +0000
Files and hashes: 1: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: iGdpxEGWEYLSyM/6tM80t87wbfe9+N/BfbnHP2rUHD4=)
2: T3T0ZkFQFPUc2BEd0op7sYAz8XA.roa (hash: WuXt/ChkvGDFgO8WDo1RKpja79/oAcXrCCkvEETR+EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:86:d0:f3:0d:22:52:56:4c:65:b0:25:83:15:37:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140
Validity
Not Before: Oct 25 04:00:57 2025 GMT
Not After : Oct 26 04:00:57 2025 GMT
Subject: CN=a5a6bac83017b38e18dd27cea78e65e317940b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:61:b8:71:45:1c:9a:04:5c:1e:3d:3a:8a:
d5:68:3c:b5:7f:6a:84:53:f3:cd:08:5b:db:06:f9:
24:a6:56:89:f1:7a:ce:4a:2f:74:2e:64:18:d3:ff:
61:97:14:05:c1:33:32:5f:a3:0e:b7:4a:38:09:ef:
03:2e:95:65:14:14:c1:00:8f:f7:30:36:e4:cf:db:
75:24:19:d2:19:15:e1:65:0a:83:df:c7:94:d5:0e:
e0:b0:3b:35:54:7d:82:29:3d:42:0e:47:ab:a1:5b:
cd:a6:a2:c4:04:4c:7e:9e:05:2c:df:5e:43:65:e3:
1a:e6:37:96:b7:37:28:4a:d5:42:76:83:06:ee:71:
f9:13:2f:9b:7f:1d:e1:49:5e:d6:47:d5:a3:5c:69:
93:f7:52:62:a7:71:17:24:15:ca:88:07:ce:3f:00:
b7:71:d2:6e:61:c6:3d:03:14:aa:ef:00:4d:6b:22:
45:63:7e:31:8a:d9:8b:12:93:5a:ea:0a:f0:91:aa:
97:d7:0b:79:07:40:7f:23:34:6a:23:4c:57:c4:5f:
75:70:bb:2c:9d:e7:55:18:4e:85:0a:93:93:41:9e:
7e:cd:b3:57:9a:8e:56:05:c4:96:2d:32:2b:17:81:
a6:32:8e:b5:c7:c4:ec:ea:b5:8f:45:9f:95:c5:81:
29:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:BA:C8:30:17:B3:8E:18:DD:27:CE:A7:8E:65:E3:17:94:0B:6E
X509v3 Authority Key Identifier:
keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d5:69:6d:d2:1a:78:91:7e:e1:da:43:4e:f0:7f:86:b1:cf:
fb:70:b7:82:60:cc:70:c1:17:de:14:7c:bb:65:3b:6a:d0:e2:
a4:72:7d:95:42:e3:e7:d3:bd:e0:08:f1:46:8a:bd:eb:b3:57:
7e:f4:80:dc:fc:f4:74:2a:62:1e:51:16:a0:e3:62:cb:f5:76:
03:41:ae:d2:49:89:d7:25:25:70:7a:56:b2:17:79:a1:e5:b5:
7d:c7:9b:8d:a9:b2:9a:da:88:e2:da:d8:d9:20:ad:f6:14:a4:
84:00:bc:9c:2a:62:5a:af:12:f5:e9:92:3b:f6:f3:d8:ba:b3:
c8:0c:36:45:2a:86:f4:af:fe:1f:ee:14:f4:9b:e9:99:27:e2:
42:25:2b:f7:0c:e5:a4:c9:4d:7e:14:8d:fc:05:6c:48:81:a2:
bd:e6:3e:2e:1c:55:36:fe:58:b5:a2:b0:0b:31:8d:2b:78:59:
48:83:d3:7d:11:40:a5:00:7c:e9:ed:d1:68:da:6f:f4:aa:01:
32:86:57:99:05:69:36:3f:1f:e9:5a:3b:b7:6d:89:a1:0e:ec:
7f:76:74:fa:d3:0f:a3:76:d3:df:3d:f4:25:37:51:d2:f2:61:
d2:b9:9c:d8:c6:ed:1e:dc:cc:51:cd:9c:01:45:1c:7c:41:49:
06:51:26:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 12:18:28 2025 by rpki-client