Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
File: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json)
Hash identifier: JGEAtBekLO/Xj9ba0NJ82hFzj9X8/Rcp7vv4wdjAhuw=
Subject key identifier: E2:83:3F:5B:31:EF:B5:0A:AB:E2:62:64:E4:A5:6B:DE:79:31:15:50
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial: 019A03DA8349877A4E29A689BEF9824800E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
Manifest number: 118D
Signing time: Mon 20 Oct 2025 23:00:43 +0000
Manifest this update: Mon 20 Oct 2025 23:00:43 +0000
Manifest next update: Tue 21 Oct 2025 23:00:43 +0000
Files and hashes: 1: 8IrRnzXhLEtJOzQ76JyjoEUrlXo.roa (hash: twXscxBiA6A/cPdgQ7hNA9EiiSEcOyWKVNdA2W42KG4=)
2: LsBMcdJw5xS8I63MgOSx7GP6YGo.roa (hash: eclfzXKV6RSN6OrnDOnk9OvTtMq4JN86esMRl2QpoQY=)
3: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: T8t/CJkH/S4o9WyGjHIlXjSaKvuBMtOoYxJb5yuWwmU=)
4: RP5jpn-uKD4VZqtBiaKoc8atoPw.roa (hash: QDcnUril7uwVWWdbILh+cVbAEXM+2Qt6gMgTdP6yAQo=)
5: UEQBycXO84xxZEefVNxr90yQeH0.roa (hash: TEj6JdNtANQj346QJ0SBfIpcEXL1H4ox6W/yWcLs2Y0=)
6: ufd9I1sTMu_-cmgS_4wyO_C2LOU.roa (hash: t8YD8zi5UguFlovOm8R2XRjIBtMUKaWMQ8CNRGn6mYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:83:49:87:7a:4e:29:a6:89:be:f9:82:48:00:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Validity
Not Before: Oct 20 23:00:43 2025 GMT
Not After : Oct 21 23:00:43 2025 GMT
Subject: CN=e2833f5b31efb50aabe26264e4a56bde79311550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:fc:b3:9b:66:8f:8a:14:b1:f0:3a:ba:57:
a4:10:72:27:11:1a:83:27:ac:36:80:8a:35:5d:b0:
ec:e5:9b:c4:2f:ca:10:55:e1:7f:96:54:4c:fc:0c:
3e:c4:ca:a4:76:1e:f6:04:66:57:6b:cb:58:87:0f:
01:61:7d:3d:ac:58:09:57:3f:42:01:22:d5:69:95:
9f:a4:f4:66:6d:40:5d:76:5d:31:fb:12:0c:c5:a1:
2c:5a:96:24:cd:6b:29:f1:33:1e:64:99:21:71:85:
89:fa:a5:7f:17:91:85:e2:4b:65:4a:9e:7a:49:7f:
af:6b:b6:90:25:c7:cf:05:96:ae:57:af:76:ae:80:
4a:8d:84:e1:d8:0f:7b:1b:b4:61:8e:93:75:f1:68:
6c:24:6d:9d:95:7a:66:5e:0b:a0:d9:47:fb:cc:56:
ab:b7:a8:4f:42:27:fc:71:cd:48:52:92:aa:f4:cd:
a3:cc:80:3e:71:f8:b1:70:1f:57:ff:ad:78:f8:94:
6b:27:f3:de:bf:38:94:86:a8:2d:22:cc:f2:7f:49:
42:51:e6:8a:06:55:01:3f:80:d0:b7:41:32:bf:55:
55:c9:17:67:09:9a:85:f4:69:47:67:c9:88:3d:3b:
ff:34:1a:06:c4:fa:ea:ae:df:aa:08:43:7b:fa:13:
cb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:3F:5B:31:EF:B5:0A:AB:E2:62:64:E4:A5:6B:DE:79:31:15:50
X509v3 Authority Key Identifier:
keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5d:e8:13:cb:69:42:e7:dd:7a:da:22:c9:cf:56:ba:21:b1:
ef:8d:19:32:7c:1c:ff:b6:27:67:f8:ba:60:9a:47:7e:a3:33:
5e:b7:cd:71:c3:bc:95:70:d4:3b:93:63:02:12:8a:22:5d:2b:
c0:29:12:d2:4d:e2:af:62:96:64:51:15:95:34:e8:26:85:2c:
60:7b:a3:b4:75:5e:2f:08:ff:7f:cf:28:5d:b0:22:3a:cd:66:
1e:60:d9:7f:b2:36:50:e7:3e:c9:5c:d3:e4:c9:1c:62:05:b5:
41:e8:7b:9b:c2:e6:ca:f8:f7:f6:5a:aa:bc:b2:aa:ed:1f:db:
70:95:a5:d7:0a:4e:75:b4:a8:ea:2b:70:3c:28:d4:f5:83:2f:
d7:51:fc:58:f9:5f:0d:42:76:9c:d1:ca:72:0d:69:27:fb:b0:
36:25:3d:dd:77:2c:cd:09:bb:24:80:b7:db:17:02:88:c7:6d:
40:32:36:69:1b:91:6d:40:a3:50:24:be:40:92:3e:cf:af:88:
a6:82:aa:2b:aa:82:58:4b:42:1c:32:bd:72:44:72:1e:15:bc:
e7:43:95:04:1f:ee:58:ca:8a:cf:53:1f:8a:ca:0d:23:9f:c2:
2d:f0:c1:cf:fa:de:c6:f7:21:c9:dd:1a:ca:2d:ac:5e:01:65:
19:69:d6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:54:15 2025 by rpki-client