Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: SZn0lc+TWvcro6VNXZXkV5cool87TIt4qL23Qdtliw4=
Subject key identifier: D8:F0:FE:16:81:E4:CE:3B:D7:D2:A1:D6:9C:6D:9E:CE:51:C9:70:B2
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 019A1D2C423D126A373AA7642ED8D42817BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 10B1
Signing time: Sat 25 Oct 2025 21:00:31 +0000
Manifest this update: Sat 25 Oct 2025 21:00:31 +0000
Manifest next update: Sun 26 Oct 2025 21:00:31 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: BG7RaQxsZuyfgqPSDKTLaeBNKDKjoD/3Y1AnhRaA6nw=)
2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:42:3d:12:6a:37:3a:a7:64:2e:d8:d4:28:17:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Oct 25 21:00:31 2025 GMT
Not After : Oct 26 21:00:31 2025 GMT
Subject: CN=d8f0fe1681e4ce3bd7d2a1d69c6d9ece51c970b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:df:2b:b0:a0:e1:49:de:bc:5b:5f:d8:84:
13:99:6c:84:df:95:8c:86:46:43:c7:88:83:73:7c:
d0:e0:af:e3:b9:ce:7c:af:30:dd:15:37:e7:81:49:
e3:c5:43:84:8d:14:97:f2:72:d1:df:18:65:00:9b:
83:fb:ab:88:e8:f2:90:9d:82:01:9d:e2:9c:3f:bf:
a2:58:03:11:72:88:14:31:d0:66:5a:6c:0e:b1:7a:
c9:91:91:46:b2:4a:07:83:84:6a:fb:6c:85:b4:e1:
f1:ef:76:bd:15:f1:f5:f9:52:59:17:c6:33:5a:ae:
fd:31:44:a8:d4:e3:7f:2b:84:01:d2:5e:ad:6e:3d:
10:76:23:f7:e6:78:ca:ed:f5:96:8f:94:72:2e:ce:
68:5a:a5:cb:42:1a:a7:af:c2:85:10:b0:e1:19:dd:
25:0e:09:bd:46:a7:99:32:34:96:2c:47:1f:1a:a1:
c9:08:60:bf:1d:4b:13:12:8b:c9:df:88:42:54:86:
ed:93:57:c0:35:28:5e:56:97:24:74:11:a8:f6:83:
85:70:61:df:81:55:71:a7:d0:ac:87:65:af:d1:d2:
4e:ea:cb:97:77:50:49:73:bc:b5:87:b2:ae:1f:15:
e2:c5:5b:18:2d:99:6d:07:b3:1d:1f:6a:80:8f:6c:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F0:FE:16:81:E4:CE:3B:D7:D2:A1:D6:9C:6D:9E:CE:51:C9:70:B2
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:af:7d:22:e5:9b:28:da:fc:51:76:d7:48:7b:1d:ef:32:7a:
38:16:f3:7f:76:49:c8:c4:eb:d5:3d:48:c3:6a:e9:8d:8f:2c:
9c:b5:e0:96:f0:bb:8a:c1:76:a9:bc:91:d7:89:1e:2e:73:46:
da:34:2b:ff:1b:e9:bd:d2:94:54:67:bf:70:a9:17:17:2c:4c:
62:d8:ba:48:37:20:88:54:e3:eb:7d:72:b2:52:ea:02:f5:e6:
e5:d1:51:a7:48:b3:f6:c5:f3:b6:f4:05:f3:9c:f9:01:78:77:
b0:7f:6d:17:6e:56:46:3d:61:39:2f:94:be:35:19:96:97:9b:
f0:f4:32:df:e5:e7:6c:3c:56:c2:cf:1a:4d:e0:2f:1e:8d:ff:
20:00:b6:e8:94:19:96:94:53:e4:0d:38:a8:9c:74:aa:e6:2e:
24:94:42:2f:5e:58:5d:ac:2b:e4:14:7b:6e:86:3b:d8:b2:02:
32:3d:57:ff:f5:22:78:3f:d4:51:6d:6e:b9:a4:82:95:da:1e:
b8:70:05:44:16:87:d4:34:9d:a0:cb:29:40:49:85:de:da:85:
30:91:06:6c:8b:e6:07:d9:17:fd:07:f5:4b:97:cb:e5:a2:89:
f9:b5:24:3a:38:6a:43:8b:8a:c9:d1:7b:38:d9:58:91:ca:32:
4c:00:69:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:52:58 2025 by rpki-client