Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File: S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier: PrEajTiANMfHAGp3QCf2zmj3evJNq6ta8wbHNFcUWu0=
Subject key identifier: 67:B3:40:A3:D7:72:5C:33:98:83:81:0B:EE:45:36:D5:BE:7C:A0:4D
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer: /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial: 019A1CBE05ED31C67E4A2D0CB104D5EBF400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number: 0CA0
Signing time: Sat 25 Oct 2025 19:00:06 +0000
Manifest this update: Sat 25 Oct 2025 19:00:06 +0000
Manifest next update: Sun 26 Oct 2025 19:00:06 +0000
Files and hashes: 1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: 6aQbh6Hz3b5O5dadH7uMc8Loi084H3bf22DcoO+fETk=)
2: oa49XCli4BnhzjMFZt__xzBFHcY.roa (hash: tJwIQtT+Kk475hshkks2qpfV9lu0TNlB3mE3lLaKnow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:05:ed:31:c6:7e:4a:2d:0c:b1:04:d5:eb:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Validity
Not Before: Oct 25 19:00:06 2025 GMT
Not After : Oct 26 19:00:06 2025 GMT
Subject: CN=67b340a3d7725c339883810bee4536d5be7ca04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:e3:4f:98:d2:b7:37:39:0b:e7:5c:3d:00:
5b:1e:b6:45:ad:d7:b0:fc:cf:ce:92:e2:f0:61:c3:
dd:ef:09:55:2d:a5:5e:52:68:68:5f:b3:43:11:2a:
bd:aa:c8:97:55:87:68:29:ce:62:c3:93:7a:ed:22:
fe:0d:16:1f:f8:34:3c:39:01:6f:36:62:33:c9:27:
bf:d4:af:e7:95:e3:a7:12:38:5a:9f:0a:d7:f0:af:
e6:2e:75:52:67:0b:14:3d:44:67:9f:7b:34:6c:1e:
94:51:6a:4e:c8:23:33:e3:45:b2:60:36:8e:23:80:
be:bc:5d:87:8b:b3:6a:a6:2a:5c:b3:89:70:7f:35:
a0:cc:9f:2f:d3:09:7a:70:f7:bb:e8:5d:2b:22:e7:
33:5b:41:10:e5:67:2f:6e:18:c2:86:8c:6d:d5:a0:
84:9f:5e:a0:0d:36:bf:78:e4:24:ac:35:eb:90:84:
08:5f:1c:f9:6c:f6:c0:8b:f5:c2:74:de:5e:a7:af:
32:90:9c:db:90:a7:18:90:ae:7b:06:a8:d0:78:8b:
25:71:0a:f0:a5:64:be:f2:29:10:f7:44:b7:a7:b7:
26:45:b3:26:eb:9d:be:65:0e:dc:13:a9:1e:9a:8f:
91:f6:56:36:34:7c:68:8e:2a:10:fc:fd:86:81:9a:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B3:40:A3:D7:72:5C:33:98:83:81:0B:EE:45:36:D5:BE:7C:A0:4D
X509v3 Authority Key Identifier:
keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4f:aa:6a:69:85:7d:25:66:45:24:6d:df:7f:6d:c6:5c:02:
2e:61:ef:94:73:82:b3:51:93:a6:a8:35:f6:6b:4b:0f:67:b1:
93:60:f7:de:ce:12:9c:b7:ae:96:90:ad:fd:21:39:bd:4d:47:
66:e6:26:17:3d:2f:73:a5:28:f7:01:0f:df:aa:e6:d4:69:d3:
70:ef:a6:aa:f1:00:27:69:23:8b:9f:91:a3:48:48:52:c6:c4:
bf:eb:d0:41:2f:ae:db:69:1d:6d:4c:58:83:de:7a:00:41:42:
94:5e:7c:1e:a0:de:da:f1:54:4e:57:1a:62:25:b6:5f:85:5a:
a2:86:c4:ff:c2:ab:38:21:6e:b6:7a:b5:f3:1b:90:cd:b3:7d:
07:13:12:10:16:81:48:30:77:7e:af:ee:04:70:74:a6:ac:0b:
2b:e2:3f:b4:19:0d:b6:26:85:a3:19:bb:52:8f:57:e4:b3:90:
3e:0f:5b:57:38:9d:97:dd:93:67:b3:8f:f5:af:8a:59:e2:33:
f3:a4:e9:5e:01:e0:c9:4f:23:f8:0d:18:fc:00:84:11:5b:0e:
0b:c5:78:71:fd:63:d6:75:55:8d:d6:9f:bd:71:88:2e:00:a4:
3d:b4:ff:6e:e1:aa:76:e8:52:a4:c4:62:25:28:3a:00:4d:bd:
58:59:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 21:16:03 2025 by rpki-client