Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json)
Hash identifier: AWxVBm4FvHI+i2YGDtnebdX9zGBY6eN2WencOj/9KAo=
Subject key identifier: DB:B2:7B:B6:D9:BA:D4:2D:38:0C:88:89:D5:7A:94:63:A4:38:47:67
Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Certificate serial: 019A27E6FC409C4BF8B77BC6F5ED1D080201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
Manifest number: 143D
Signing time: Mon 27 Oct 2025 23:00:40 +0000
Manifest this update: Mon 27 Oct 2025 23:00:40 +0000
Manifest next update: Tue 28 Oct 2025 23:00:40 +0000
Files and hashes: 1: 4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa (hash: sDrnXJKsdAbmdaesDlUsR31uPE7GfMdA3txIVC37ks4=)
2: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: aqksieM/LiPk06wnTmUhvqIDJfZkbjh+yHQN+sYIZoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:e6:fc:40:9c:4b:f8:b7:7b:c6:f5:ed:1d:08:02:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853
Validity
Not Before: Oct 27 23:00:40 2025 GMT
Not After : Oct 28 23:00:40 2025 GMT
Subject: CN=dbb27bb6d9bad42d380c8889d57a9463a4384767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:be:33:62:e2:de:7a:52:77:e9:3f:d2:d5:f6:
cf:3e:4a:f4:e0:d6:4c:e9:c9:c9:50:79:57:ae:c2:
15:3e:e9:ae:78:bb:3a:f9:10:fd:84:7b:f7:85:d2:
5f:8d:ab:61:06:6b:31:8c:97:f3:8b:31:e4:ab:b8:
cb:e1:b8:96:de:dc:85:e8:95:4b:35:98:05:ab:ff:
c5:85:f5:e0:8e:cb:e0:19:09:96:2f:0a:65:57:3c:
d6:83:97:c2:63:09:6c:21:d1:d4:eb:cb:9f:9d:95:
f6:7c:9d:30:96:89:9e:48:28:01:44:6d:b7:25:12:
15:e6:d6:63:25:bd:3a:6d:c2:42:7d:fe:cd:ac:78:
d5:05:82:17:e4:d7:ef:e5:1f:f4:2a:fb:34:02:4e:
a8:57:65:88:8a:f6:d0:a1:06:c8:6c:71:5e:4f:7c:
69:30:2a:6f:72:fc:05:6f:df:8d:ba:a2:04:fa:24:
f8:1d:c9:16:db:a5:b1:0a:ee:01:3e:91:00:bd:cf:
6a:86:88:c1:3d:9c:53:20:0d:39:a7:f4:77:cd:ff:
bf:4f:72:bb:38:f3:b6:71:fa:47:00:22:da:42:b2:
29:32:88:ed:5d:09:77:63:c7:38:e8:93:a4:4d:82:
b5:29:bf:18:ce:a4:4e:70:d0:73:65:17:25:34:3a:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B2:7B:B6:D9:BA:D4:2D:38:0C:88:89:D5:7A:94:63:A4:38:47:67
X509v3 Authority Key Identifier:
keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f7:92:30:2f:b7:72:70:b2:3d:8b:3c:08:19:1c:31:c5:bb:
4a:e9:b1:5b:bc:c4:cf:ae:51:eb:26:42:d0:96:4f:af:52:36:
aa:b8:af:6d:ec:5a:bf:1f:bf:c8:a1:dd:d2:f0:e2:d3:b6:93:
52:3d:d7:9b:31:0d:0c:59:fa:8a:56:97:f9:4b:10:e6:c0:f9:
64:2c:8c:15:48:d5:7c:11:d2:e2:b2:ea:56:1f:24:b9:0d:fa:
14:42:1b:40:ed:16:e5:aa:03:33:31:e8:b9:a4:f4:16:bb:e7:
cc:08:38:35:b3:cd:ee:6c:23:b2:31:db:94:af:4d:66:4c:bc:
ea:f5:a3:cb:3e:6d:07:33:7d:1e:80:4d:e3:3a:02:2e:4d:0b:
fc:08:bf:bd:dd:76:51:fd:69:26:47:62:cb:60:b2:df:a1:1b:
21:13:ea:27:71:3c:a4:4c:1a:b6:83:8c:57:6d:d2:e0:d1:9e:
64:55:b6:71:68:d7:43:47:8f:de:bb:a2:8e:34:8f:d1:2c:07:
92:7d:ce:3a:5c:59:81:eb:23:e0:e7:44:93:8c:2b:96:dd:b6:
7a:73:74:e0:08:5e:68:37:68:85:05:5a:9f:2f:3e:ff:a3:36:
fd:fd:64:96:58:18:72:22:cb:ef:42:73:87:0e:2c:60:d0:84:
ad:0f:6e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:38:24 2025 by rpki-client