Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier: pDd9/ED7xQsSMvdYjVWMtBHM1pZvFZkX8ebbwk1TZ2s=
Subject key identifier: 4F:42:5D:8F:96:EB:87:6D:CE:0C:FF:BB:5E:03:BC:6E:76:55:F6:06
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 019A2930AFD437B9B721ABDAEB3C56A77BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number: 105D
Signing time: Tue 28 Oct 2025 05:00:47 +0000
Manifest this update: Tue 28 Oct 2025 05:00:47 +0000
Manifest next update: Wed 29 Oct 2025 05:00:47 +0000
Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: LM6AySrdm2TQu+pY7Chs6FZJGMWgLyWs2hlTZQaLcmw=)
2: JKDoGMCZzjSndX7Ct7p3CxyKJR4.roa (hash: bo2ZyeRjzsKv0IsXJYurWXlAoWDOMikTk02MIFIPMnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:af:d4:37:b9:b7:21:ab:da:eb:3c:56:a7:7b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Oct 28 05:00:47 2025 GMT
Not After : Oct 29 05:00:47 2025 GMT
Subject: CN=4f425d8f96eb876dce0cffbb5e03bc6e7655f606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:56:91:d1:f3:30:4b:f3:1f:48:35:cb:c8:
32:92:10:e5:64:cd:ad:b3:29:62:65:74:68:0b:1e:
6b:2d:18:45:b1:87:dc:88:c7:91:c7:d7:d3:fd:4f:
7a:1a:59:f7:a0:31:36:ca:a6:f3:61:ee:03:1a:b5:
b5:88:51:e9:09:d1:5b:bc:81:9a:75:ef:0a:b7:2f:
36:8e:42:ee:08:9b:2b:4f:9a:dd:2f:16:93:88:43:
34:a5:68:d9:68:82:f9:34:67:ca:38:4d:55:0d:22:
18:63:6a:c1:f2:7f:73:a2:02:b4:3d:10:b0:23:c4:
42:04:94:24:a3:5c:64:66:7c:27:48:81:08:94:0d:
78:57:86:12:ec:25:cc:47:c4:4e:3e:a8:47:03:51:
ec:08:ac:dd:59:a2:0c:60:d9:62:c6:3e:5a:ed:fb:
bb:82:c5:fc:a9:bd:ba:a7:db:c4:5f:2c:10:d7:a6:
7c:36:2a:2c:f6:14:7f:a0:01:e1:bb:44:5b:29:3c:
3c:1c:fd:60:d1:52:5c:57:97:98:ac:8b:5a:4e:1d:
c1:06:9d:76:9c:3e:66:ee:7f:dd:6d:16:69:a8:6f:
a3:7f:6e:a8:a9:6c:0b:cd:e9:db:3a:a7:cc:4f:af:
5d:03:fe:68:56:f0:63:d5:cd:82:e4:4c:8e:28:02:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:42:5D:8F:96:EB:87:6D:CE:0C:FF:BB:5E:03:BC:6E:76:55:F6:06
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cc:ef:4b:4f:6f:4a:93:91:2a:3c:f9:04:6f:96:50:db:85:
37:c2:40:4c:d7:cf:ba:e7:76:be:77:b9:7d:15:c9:69:ac:af:
ff:83:c3:dc:80:ee:25:7f:40:66:c4:2d:49:55:20:49:6e:b2:
f7:41:7e:d9:c9:dd:7c:83:1b:1a:19:ca:97:d1:4f:b0:af:e6:
27:35:74:a0:8f:d9:62:0a:dc:dc:2d:88:fe:18:f1:5c:84:f2:
75:b8:90:b7:1d:84:3c:e3:05:33:c9:1d:23:f5:82:be:02:4f:
76:d7:12:ac:aa:69:e2:8e:ef:2e:22:bd:48:bb:86:02:ff:7a:
61:49:02:6a:1d:78:c4:9c:15:5d:78:55:62:00:a3:cd:33:d8:
b8:b7:fc:7a:f5:16:07:87:e3:74:5d:8c:e8:1f:2f:c4:fe:15:
db:a8:34:8d:8c:ba:b1:23:ce:67:1f:7a:95:58:7e:7a:18:69:
bc:23:73:a9:13:86:a7:8e:06:08:af:fe:8e:a6:9e:29:81:ab:
12:fd:88:49:4c:92:09:8a:95:41:9d:07:fd:a1:07:e0:d5:5c:
4b:c0:ee:37:ae:f1:df:c4:e3:e9:ac:85:61:90:58:d2:a9:10:
d5:00:f6:fc:4b:ad:16:36:dc:a2:b0:a7:63:b4:e1:07:36:9b:
8d:a3:07:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:31:24 2025 by rpki-client