Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: kkOY7gbOBwf4cueVR06rbIJ3RM8VMgmKngUTBthajLI=
Subject key identifier: 77:4F:27:27:AF:55:54:9F:5E:D0:47:30:5F:73:D9:F1:86:55:9B:63
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 019A1FBF4555E2CF9B0B8F6F2281369C975A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 12E0
Signing time: Sun 26 Oct 2025 09:00:20 +0000
Manifest this update: Sun 26 Oct 2025 09:00:20 +0000
Manifest next update: Mon 27 Oct 2025 09:00:20 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: 9G807/rf1M7v3SokAfdbBuPX/ROs4VFbFGI0Thc4prU=)
2: jFj_wAVFaMa6v6BwAOU_Uc1FIto.roa (hash: OCl5X/o2fl4tL/vj2OOu1PZNEi03ZxIx2lIN6Tnh8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:45:55:e2:cf:9b:0b:8f:6f:22:81:36:9c:97:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Oct 26 09:00:20 2025 GMT
Not After : Oct 27 09:00:20 2025 GMT
Subject: CN=774f2727af55549f5ed047305f73d9f186559b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:96:0b:56:b3:5f:cd:41:ad:fa:64:10:ce:
90:31:74:e2:11:d6:70:43:a7:d5:22:fb:e7:3f:62:
c1:7e:41:ac:ad:7f:fe:65:0f:18:fe:2b:c7:4b:15:
7d:66:8e:f1:eb:d8:9f:3e:dc:2b:b8:5d:05:bb:b8:
80:fc:13:79:62:55:8a:fb:53:a7:7e:37:f4:14:f8:
13:1e:c5:d6:28:6e:bf:3f:59:bf:9b:31:59:fb:4a:
d1:82:2f:42:22:91:c8:15:c7:b6:18:73:ec:cb:5f:
e0:bc:35:71:5e:4c:87:bd:98:ab:42:06:39:4d:c9:
ae:13:a6:46:7c:69:f5:86:e6:a0:29:4f:7b:bf:3f:
51:43:eb:c6:88:97:02:f5:9c:5b:52:68:ee:83:3b:
eb:d6:a6:d1:f0:28:f9:2c:0c:fa:91:6f:5e:47:5a:
ae:5c:f7:50:ad:70:f7:f7:a1:5d:6d:ab:58:29:a6:
d3:2d:71:bc:c0:f3:be:d5:dd:3b:c6:7e:ff:0b:7d:
80:c8:23:2a:50:b3:3a:6f:c8:35:db:8c:0d:0f:65:
a5:57:a2:32:c4:b6:16:2b:a1:4f:9a:a3:d3:11:00:
81:73:f8:cb:71:eb:27:3d:f8:f1:2d:e3:8f:5d:fc:
07:16:4e:83:15:91:a6:e3:f1:69:dd:3b:8f:09:8c:
e6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4F:27:27:AF:55:54:9F:5E:D0:47:30:5F:73:D9:F1:86:55:9B:63
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d3:6e:76:a0:7d:56:69:13:8a:7e:c4:c8:46:d7:fe:34:32:
3a:18:7a:13:2c:52:67:16:0a:43:0a:ff:dc:83:31:90:e6:d8:
e1:cd:ae:30:91:0a:24:3f:3f:d5:b0:a7:39:46:4a:e4:cb:c7:
a3:e1:89:f3:5c:61:ec:aa:37:7a:f1:59:a3:56:02:18:7c:2e:
e8:8d:ce:e6:00:4b:03:25:8c:c6:f5:21:80:22:dd:8c:9f:3c:
d4:10:3d:80:03:b8:b1:74:08:49:7b:a7:6c:c4:c0:07:c3:31:
4a:86:f7:c7:2d:3c:ab:40:e0:c4:6b:85:d3:bb:74:10:74:6a:
2b:f7:0a:0d:51:9f:91:a5:c3:a1:0e:67:84:2a:6f:fc:6f:36:
3d:64:0f:81:3c:47:ae:84:04:37:f4:95:96:96:2c:e1:e1:06:
76:b3:e5:63:6a:5b:9d:b2:b7:81:cc:95:8e:bb:b0:2c:49:8d:
de:cb:4a:a0:0c:ab:d9:83:ce:61:53:c4:4d:db:08:1b:4c:fa:
9d:71:a4:5f:ae:b8:ef:be:47:ea:cf:e5:41:87:85:77:d6:48:
ed:c1:03:8f:c7:a3:0e:4c:3f:61:76:cf:7d:ae:da:6e:03:8b:
34:6b:7f:b9:46:81:37:15:ee:1f:ea:c4:87:a9:8e:04:ad:01:
06:01:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:03:26 2025 by rpki-client