Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: 8KFoJhCGIZGuW+FaMmxDaKqPYIladj6nrnsboYCbbWA=
Subject key identifier: 4A:C3:BB:EA:97:99:56:B1:26:C0:E7:9D:0B:A8:96:DF:D9:AC:A4:05
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 019A2AE81BD7871A58374417A670F57A18B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 09F1
Signing time: Tue 28 Oct 2025 13:00:45 +0000
Manifest this update: Tue 28 Oct 2025 13:00:45 +0000
Manifest next update: Wed 29 Oct 2025 13:00:45 +0000
Files and hashes: 1: 84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa (hash: UeaLHRP7oFc/d7B28fPSHAmNwBiXwzZTNmEOfITVZrU=)
2: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: wluQ1n7N2RgWC3gJnDxiwjAmxNvTfBdLBLv5asgGp1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e8:1b:d7:87:1a:58:37:44:17:a6:70:f5:7a:18:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Oct 28 13:00:45 2025 GMT
Not After : Oct 29 13:00:45 2025 GMT
Subject: CN=4ac3bbea979956b126c0e79d0ba896dfd9aca405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:01:44:fc:45:a6:c2:f0:36:3a:c0:9a:47:
8f:74:08:5a:23:0f:c8:9e:29:02:5d:41:40:8a:94:
ec:dd:46:07:44:63:b2:68:be:a8:8a:dc:f4:54:00:
ee:c0:59:93:2f:bf:e8:3a:86:9e:1c:01:58:13:2d:
22:47:b8:b8:3a:02:69:63:01:22:5d:a9:a6:21:20:
03:41:b4:c1:a7:55:a9:e5:f1:48:cd:dd:14:ae:8d:
95:e1:b9:68:8a:f2:d3:00:2e:ac:2e:21:a3:b0:f5:
90:16:e4:52:a4:41:ce:bb:4a:18:cb:c0:9d:e6:1f:
ce:1a:65:59:1f:e3:bc:23:c7:df:4f:f3:46:2f:82:
85:2a:d0:0e:27:e8:03:bf:d6:de:42:e7:47:5c:1f:
bd:e6:ee:58:b2:2c:9b:20:8e:73:ca:29:87:f2:2e:
d4:d0:fb:b1:2e:ea:e4:35:de:9e:c1:75:e5:d8:29:
99:5f:f7:8b:a8:9b:55:b0:b2:28:b8:45:f7:c8:ae:
8f:65:9f:bc:a1:6b:8c:9d:d3:00:68:f7:d5:40:db:
5d:2e:48:2d:7a:64:6b:26:c9:24:9b:77:37:e8:73:
b9:75:75:96:1a:32:2b:f0:8e:5c:e7:06:f5:70:8a:
b1:63:57:ea:55:b2:58:4c:c0:d9:5a:c9:2b:f2:25:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C3:BB:EA:97:99:56:B1:26:C0:E7:9D:0B:A8:96:DF:D9:AC:A4:05
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c7:ef:d4:ef:c9:ff:13:48:b9:0c:79:31:26:63:fd:fe:3e:
64:dc:ff:45:8c:12:9a:c9:ba:18:b2:07:bc:50:8c:69:f6:0c:
22:6a:37:23:4d:07:41:cb:e3:f8:7f:93:b4:1c:ac:45:8c:cd:
07:a2:85:00:8e:6e:0a:bd:d5:d3:19:91:97:31:cf:c1:07:e0:
b6:50:50:8f:60:dc:ec:a0:7c:f5:0e:60:07:f0:61:a9:e4:01:
64:f7:74:56:f9:4a:15:90:3a:dd:54:ec:3a:af:e3:f4:66:5a:
5c:17:32:59:f0:d0:e4:73:1f:f5:9a:fa:7d:11:78:09:30:4b:
0d:35:27:ca:5f:d1:75:08:35:8a:c3:45:98:91:b8:97:14:64:
05:fb:8b:47:01:9a:84:96:9a:ce:a8:cf:a6:f1:ba:c3:da:25:
04:3e:68:ff:66:c6:99:28:97:e4:e7:be:02:67:dd:13:ba:e6:
a8:65:14:2b:3b:00:75:cf:a7:0b:04:46:be:fe:76:5a:48:99:
a7:ce:75:83:13:5e:a8:6b:b9:83:c9:bb:bb:ac:61:4b:e1:70:
42:91:46:94:e1:12:d4:96:71:eb:c6:35:82:d4:3e:05:ea:bd:
c0:8d:4e:23:79:75:e6:fa:a0:e7:95:6f:89:94:25:fb:d3:d3:
9b:23:a4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:18:07 2025 by rpki-client