Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: WKxJZ1QNjqjo1rxb9wN+4bcfZ802m9kCG9konmQdwt0=
Subject key identifier: 69:7D:C2:5C:CB:5B:0E:13:96:25:46:D5:82:F3:D2:23:23:8F:86:BA
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 019A0F39AC2A89ECF3887F8666158921FA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 0EE1
Signing time: Thu 23 Oct 2025 04:00:28 +0000
Manifest this update: Thu 23 Oct 2025 04:00:28 +0000
Manifest next update: Fri 24 Oct 2025 04:00:28 +0000
Files and hashes: 1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: Gg1KmaObfATA4mCKaureioEr2GOEFf4mzJNyKpeSXsE=)
2: _0wH1BRcgc6tfF99TwNnC3iQ1pU.roa (hash: O+Zelc4oaCgFlSMOLR6IXR0OWFyZm1W0ImLAmE3cggg=)
3: igkLmqGvdo3ZptL2OBtAT5tgBr8.roa (hash: JNS1dghL0HEbj9Q46she80UtZ72vLWiMcXMi6xfr/RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:39:ac:2a:89:ec:f3:88:7f:86:66:15:89:21:fa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Oct 23 04:00:28 2025 GMT
Not After : Oct 24 04:00:28 2025 GMT
Subject: CN=697dc25ccb5b0e13962546d582f3d223238f86ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:92:f1:53:b3:8c:3e:55:01:50:98:c3:fd:
a7:61:d7:7f:ee:7c:c8:e4:60:37:4c:e8:5c:6d:c8:
94:46:d1:28:c6:0b:a0:3b:1a:65:b6:e9:7f:fe:9e:
1f:1f:90:dc:13:d4:3b:eb:8e:dc:d2:b4:e9:7b:ef:
e7:58:d9:39:a1:4e:1d:7d:8c:4f:a7:c8:b6:87:87:
3b:a0:4d:57:f6:c1:cd:4c:c9:ee:40:de:ea:dd:50:
c4:d8:c6:c1:75:46:c3:38:97:dc:c0:4c:06:03:98:
8b:6f:19:44:8b:ac:92:71:ed:15:d7:3a:40:95:4e:
27:2a:44:d5:b7:e4:58:28:6d:36:28:0d:e1:8c:e1:
34:2f:27:3d:83:53:6f:9c:7d:93:4d:1d:39:8f:df:
b1:c8:0e:04:88:65:78:d4:f8:db:5f:ac:6b:10:d1:
f7:f2:a2:78:0b:26:ec:5b:8b:4f:ac:3b:0c:46:4d:
4b:06:a0:e7:1f:8e:57:05:a6:62:4d:8f:03:46:49:
04:c0:4c:f9:38:03:d6:5d:da:8c:95:a7:dc:6c:08:
28:42:26:b4:14:51:13:5a:4b:e9:3b:b1:9f:db:64:
98:1c:32:d1:a8:88:e1:b8:26:d5:31:24:30:94:47:
06:26:1e:f8:d9:af:fc:6f:fc:bf:15:c9:94:bf:cb:
96:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7D:C2:5C:CB:5B:0E:13:96:25:46:D5:82:F3:D2:23:23:8F:86:BA
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a4:bb:f1:68:11:17:b5:01:8a:c6:81:d8:4d:fa:01:5b:17:
ae:23:34:8d:b6:d9:78:36:e6:60:61:e1:13:1f:2e:c7:19:33:
f7:97:da:be:e9:fe:5c:13:8d:5a:71:b3:fa:5d:00:10:eb:52:
78:9f:14:79:d9:10:76:1b:e7:57:e3:c8:bb:0e:5d:4e:87:82:
6e:e7:b8:aa:51:eb:10:fd:75:58:b0:58:cc:3f:24:a0:dd:e9:
bb:1d:94:80:51:41:d3:bb:12:c3:6d:2d:ff:0e:0d:4d:53:ca:
13:6f:e6:4b:1b:f6:01:8e:f1:94:48:29:2a:ab:e5:18:b9:eb:
f7:06:17:d4:59:be:d3:fb:53:46:ef:23:b6:f8:37:35:20:99:
03:fd:d4:d2:27:43:84:a1:d2:24:e5:f6:1e:2a:0e:27:a8:e0:
8c:7f:c4:83:7e:91:ad:f0:c6:22:47:56:ab:61:b2:c5:73:70:
e1:4e:d7:a0:93:15:90:49:12:b1:b2:c1:80:18:18:01:13:2f:
93:40:ec:72:c1:39:95:7c:ce:82:e4:e8:44:26:af:79:97:03:
80:f2:6d:46:9d:bb:d6:d6:2d:b3:16:a9:2c:de:a8:06:6f:57:
14:05:64:aa:83:45:ae:c0:2f:ff:dd:65:13:0a:52:07:db:45:
cb:7b:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 10:59:19 2025 by rpki-client