Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
File: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft (raw, json)
Hash identifier: FnbYYTRQxHfnTxBmxy7uT3Lh6aCmVL/0XZVNjEVP2vE=
Subject key identifier: DF:37:8B:DC:CD:1C:08:AD:05:B2:73:DF:C4:23:FA:3A:50:23:66:FD
Authority key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
Certificate issuer: /CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Certificate serial: 019A2553CA6D487B325A1039E51FF7C161FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
Manifest number: EA
Signing time: Mon 27 Oct 2025 11:00:39 +0000
Manifest this update: Mon 27 Oct 2025 11:00:39 +0000
Manifest next update: Tue 28 Oct 2025 11:00:39 +0000
Files and hashes: 1: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl (hash: 3Y9nXEoqhnDtgvWdnuxm4zV/HcY4C/3UYkwkJXOx4R0=)
2: mNqIiIsivK3RH9-qHlJI1-YYSi8.roa (hash: H9Eh88q+8mpDx8ZuUb0d9LRmXaGpIblFFe9crHh272Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:ca:6d:48:7b:32:5a:10:39:e5:1f:f7:c1:61:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Validity
Not Before: Oct 27 11:00:39 2025 GMT
Not After : Oct 28 11:00:39 2025 GMT
Subject: CN=df378bdccd1c08ad05b273dfc423fa3a502366fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f3:67:0c:60:01:1a:f9:43:5d:2c:b0:c5:9e:
f7:99:10:ef:37:43:ab:4a:52:9c:49:fd:06:cc:2a:
34:ba:08:89:f9:0c:e2:65:09:e0:c5:74:66:27:1a:
11:13:a9:52:7c:82:f0:76:11:5c:1b:7a:45:00:12:
59:59:f5:ec:2c:39:76:3f:b8:d3:ad:69:b4:58:84:
70:e7:db:95:7b:5c:ec:4e:96:4c:ef:20:0f:12:70:
23:89:80:83:07:3a:07:aa:c1:08:43:4d:60:26:e1:
6a:3c:db:de:03:65:ed:cb:53:d4:b0:e1:71:a5:54:
8e:60:65:6a:03:e0:5b:08:4b:3f:06:ee:19:34:8e:
3a:e8:72:b4:b5:02:4f:52:5c:f2:b6:86:d1:ee:ff:
1e:49:e2:c2:a4:91:fc:5f:1c:54:2f:79:ac:67:8d:
85:0e:9a:8b:a5:99:9d:fe:2c:0f:8f:ea:c5:1e:02:
89:30:8b:1a:2b:20:dc:e7:38:71:de:6e:d8:22:5e:
63:af:14:2c:cf:38:e4:b7:b9:8d:f0:7d:26:a1:1b:
ff:fe:3c:68:06:6d:3b:18:00:49:50:43:3a:93:ba:
3f:28:61:e9:51:4b:39:b9:dc:3e:4a:b1:7c:71:18:
1b:c9:75:c2:9e:be:42:96:dc:6b:c1:32:d4:a1:5a:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:37:8B:DC:CD:1C:08:AD:05:B2:73:DF:C4:23:FA:3A:50:23:66:FD
X509v3 Authority Key Identifier:
keyid:F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:33:1a:ae:e6:76:26:cc:88:f0:42:c2:8c:29:36:a3:63:12:
ed:5e:c0:02:7c:51:3d:29:dd:c9:7c:34:71:af:63:11:d7:2d:
ea:55:4a:86:63:44:d9:ff:46:a8:bd:6e:34:ff:36:f7:fc:18:
dc:cc:63:41:4a:4c:03:ab:6f:0d:c5:27:8d:b3:d7:21:4d:a3:
04:71:37:57:9d:c5:77:ac:33:16:f2:5d:b9:5b:39:c3:c5:79:
82:dd:a0:88:2e:0d:7e:7a:ec:7d:5c:9b:2f:d0:a1:64:f8:3b:
24:a9:3d:9c:50:93:84:ae:65:db:ca:7a:2b:ef:cf:82:ad:04:
e3:79:21:b9:a9:87:24:bf:a4:d8:f2:56:fd:cc:c2:d9:4d:10:
50:68:dc:58:f4:d7:57:2a:7a:65:b1:70:30:8b:2e:e2:d7:a9:
4a:0c:f9:5c:6f:18:df:37:c1:9a:10:b4:f7:a1:79:bb:75:06:
43:d7:16:4b:9c:1f:e6:81:cc:d8:a7:86:79:4e:3e:ed:7f:6e:
6c:e2:b7:79:28:b0:e4:55:73:57:03:63:3e:11:f3:7b:b1:b9:
9e:d6:aa:2e:22:09:d1:42:13:8a:f0:d8:b7:2d:2f:70:c7:cd:
3a:fd:ff:ed:76:e4:23:d3:ab:66:90:af:ec:98:42:07:50:7e:
7f:ad:c4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:29:39 2025 by rpki-client