Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json)
Hash identifier: svrV3G0NjNWACBeSiBdCIBQjqpkHdkYez6RPBCkWGqc=
Subject key identifier: 3B:D2:C0:D9:83:BF:CF:19:70:88:DE:2B:CD:14:43:5D:9E:B6:B1:41
Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Certificate serial: 019A077FD4070D092404062A9B4608C9C831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
Manifest number: 0AB3
Signing time: Tue 21 Oct 2025 16:00:09 +0000
Manifest this update: Tue 21 Oct 2025 16:00:09 +0000
Manifest next update: Wed 22 Oct 2025 16:00:09 +0000
Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: z3775/fqWA8W+HZlDvj90t3tnrj9vQFBeKWIexNufOs=)
2: VwdOphY_UgRaqYf3Kg3b6kzwRf0.roa (hash: RncMvUV6R6LkD/qjU1iWGPE4PHApbhUX2ZP/1640Hn8=)
3: mlu6XIXNKNHqGWfvXZrW1IO6Mng.roa (hash: q1iBqwACk42VM5awfXg78+LQaSKbxFwEqGdC0JqAxjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:7f:d4:07:0d:09:24:04:06:2a:9b:46:08:c9:c8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720
Validity
Not Before: Oct 21 16:00:09 2025 GMT
Not After : Oct 22 16:00:09 2025 GMT
Subject: CN=3bd2c0d983bfcf197088de2bcd14435d9eb6b141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:e4:cb:f8:78:14:8e:b8:d5:e0:64:59:89:
4a:8d:ca:91:0f:f6:19:52:d4:e5:c5:f7:d6:e4:32:
82:31:78:e1:cb:51:87:3d:86:c2:64:40:49:c4:d4:
93:21:02:25:58:e1:47:ad:df:c6:1d:ce:c8:83:07:
de:54:de:3a:9e:92:21:26:86:c7:b2:4c:7f:74:22:
8f:c8:26:8a:b7:2d:59:ba:f6:7f:86:d0:80:5f:f7:
de:39:11:84:e4:7d:4d:c5:4a:72:fe:d7:c9:c0:69:
b1:d3:18:41:97:06:63:c6:d2:97:23:e8:9d:28:29:
14:d4:6e:40:81:bd:36:75:01:82:f6:dc:bd:bb:b5:
30:2f:ea:3c:85:0b:7b:78:35:e8:aa:bc:9c:d1:27:
fd:26:29:ed:7b:d3:5a:c6:82:a6:22:f7:c7:c8:d2:
af:fb:b3:58:c0:48:08:55:0a:a1:3d:3e:c2:95:92:
43:75:e2:cc:5e:f9:24:d4:b3:6b:05:41:a8:a5:fa:
49:2b:2f:04:26:4a:57:12:85:29:d9:69:f0:3a:8d:
00:fb:01:86:57:3b:72:33:e4:e8:85:e5:99:12:2f:
95:c0:e1:32:bb:77:35:d1:cb:e6:80:cc:18:89:fd:
16:be:49:a4:68:1d:0b:f0:a6:54:6b:e5:4b:f2:6a:
02:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D2:C0:D9:83:BF:CF:19:70:88:DE:2B:CD:14:43:5D:9E:B6:B1:41
X509v3 Authority Key Identifier:
keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9b:70:3f:a2:2a:92:5c:61:a2:ad:ae:ad:bb:32:5f:87:97:
6b:da:3e:b4:de:73:72:86:dd:59:be:da:3f:ab:34:c6:26:ed:
5c:3f:8f:1f:05:08:58:78:6d:b0:6f:bb:9a:44:e5:20:d7:b5:
cf:18:3a:35:48:7c:dc:08:db:b5:64:2f:fd:d9:c7:25:79:e1:
92:75:ca:37:1b:1e:7f:66:cf:d1:78:16:fb:69:b1:fd:24:75:
cf:f2:6a:de:be:88:bb:9d:0c:e4:6b:f7:73:9d:d7:26:12:eb:
e0:58:e6:94:61:52:e9:bf:b6:40:ad:d0:13:ba:a8:b8:d8:5f:
ca:f0:49:77:dc:f3:3b:cd:fc:28:64:bd:2e:38:3d:52:41:74:
29:81:27:a1:13:0d:93:9b:5c:a0:6e:f6:7b:4c:9a:7d:25:a8:
67:4d:75:63:81:bd:54:2e:76:7b:cc:88:c3:de:f4:18:0c:52:
18:a2:dd:e2:85:72:08:a6:06:b1:92:52:a0:8f:19:2e:d1:e7:
39:6f:6a:d0:4b:9d:93:0d:cb:b3:bd:bc:8a:ba:c8:33:f5:3d:
e6:45:07:d3:21:d5:23:18:42:c6:d5:87:f5:4c:65:4a:d0:1f:
a6:0f:d4:d9:77:69:f2:ea:b4:c6:06:be:a0:32:1f:b2:fa:f5:
5e:10:d2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:17:28 2025 by rpki-client