Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier: 5OJoDPhY+yCQU2m4npvsYre8yiKLVe8vyPWZM6nYldA=
Subject key identifier: AB:C2:A7:5E:81:7A:1B:74:C1:52:61:2D:F1:7C:B8:C6:DF:B0:3B:98
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 019A247817BA35A257083904739A29761CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number: 07C7
Signing time: Mon 27 Oct 2025 07:00:41 +0000
Manifest this update: Mon 27 Oct 2025 07:00:41 +0000
Manifest next update: Tue 28 Oct 2025 07:00:41 +0000
Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: VGltmjQAZVbWJhqe0CQzxeKuexguGaE4TLeOw1AhQBA=)
2: Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa (hash: 3AsnPktXMzidA1tsY7S+Rc/2XsSBvEXEVlda+G5oNPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:17:ba:35:a2:57:08:39:04:73:9a:29:76:1c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: Oct 27 07:00:41 2025 GMT
Not After : Oct 28 07:00:41 2025 GMT
Subject: CN=abc2a75e817a1b74c152612df17cb8c6dfb03b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:6d:57:4d:b4:eb:2b:b8:52:c6:d2:c4:6f:
22:08:df:dd:87:03:94:b0:a4:c3:68:03:eb:09:9d:
6e:ff:75:cf:58:04:54:69:9c:5b:32:d1:e6:88:93:
4b:de:4e:ca:54:07:43:fb:c8:9d:33:ca:c5:49:16:
bd:31:5c:ea:89:ae:90:40:f4:ef:d3:54:25:39:5b:
35:e2:57:8d:f8:64:72:9d:9c:e0:b2:5b:11:db:80:
6e:c0:70:71:0a:63:a4:9d:5f:3f:95:04:19:1a:04:
f6:19:e8:99:6a:37:61:51:5c:a2:d4:6b:9a:69:fd:
ee:3a:4c:fc:ca:4a:2e:33:c0:fc:96:6d:eb:55:fd:
98:23:0d:4e:7f:06:0f:40:4c:3a:a2:c0:95:18:fb:
e6:5a:7c:f5:0f:eb:e0:86:b9:32:c0:b2:87:79:19:
df:d4:00:af:b0:1a:59:ca:98:6e:e4:ac:4f:d2:2a:
57:96:70:5c:0b:e9:c7:38:06:71:5d:3a:52:78:1d:
15:87:7f:d9:0c:a0:2e:d8:e5:47:e3:09:ad:d1:f4:
bf:1a:dc:44:f6:9e:c2:3e:76:d0:86:7a:64:87:d4:
29:32:25:3a:a6:9b:a8:bb:87:2c:62:6c:fc:6e:a3:
f1:89:2a:b5:6e:04:14:b1:5f:d4:22:34:86:7b:2c:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:A7:5E:81:7A:1B:74:C1:52:61:2D:F1:7C:B8:C6:DF:B0:3B:98
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:13:44:68:fb:e7:d9:90:e8:53:c2:93:7e:2f:28:a7:63:e7:
2e:11:1b:65:78:fe:b9:f8:66:d7:c7:9d:42:49:fe:0a:ff:37:
07:08:87:a3:41:d2:b5:88:dd:b0:f5:65:d3:ea:3c:03:0c:bd:
d1:8d:fc:5d:a7:00:d8:73:a3:49:8f:e7:54:d2:27:44:1c:24:
02:d8:6f:42:fc:73:82:5c:85:c4:a3:5a:a7:ef:f6:0b:11:e2:
a5:6d:cd:b8:e8:e8:6a:32:3d:7f:68:64:63:4a:f5:ca:ad:21:
e9:12:95:82:07:38:9f:9e:74:92:ed:8e:60:dd:51:da:21:c4:
4d:88:7e:bb:0c:86:b4:4d:55:06:88:07:62:d3:c8:00:49:f2:
b6:81:db:65:06:3a:19:ec:e0:9e:bf:f1:ae:5d:59:20:1a:58:
ad:dd:74:78:e9:d5:6d:22:05:64:f6:1c:0d:a2:07:2f:6a:f2:
cb:66:95:e7:2f:fd:d7:ec:12:38:42:69:f2:aa:29:d9:ef:0b:
b1:a6:9b:c7:7e:90:15:77:0d:14:92:1b:88:93:fc:9f:93:47:
15:d7:30:08:0c:30:8b:17:93:74:e4:d3:31:0d:6a:96:1f:15:
e1:f6:3a:7a:c8:bf:f2:b6:f5:78:27:dc:39:88:24:70:3b:4e:
ca:08:a2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:57:40 2025 by rpki-client