Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier: xkhsnl5lkcJDrOD0uppqCLhFoEJGZSI59Cm8o0exNbg=
Subject key identifier: 42:49:71:EB:79:64:71:8B:C2:32:C6:B2:C6:46:63:E0:57:9A:7D:C5
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial: 019A22F73DAF091317297925C96D4A6739CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number: 142B
Signing time: Mon 27 Oct 2025 00:00:19 +0000
Manifest this update: Mon 27 Oct 2025 00:00:19 +0000
Manifest next update: Tue 28 Oct 2025 00:00:19 +0000
Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: UDOGd9677PpAbjIl31NcM8SyqKVVf9bM3ujwJ9w8xuA=)
2: k_l8rtQi2P6fa9dQhkQ5j5jaCYE.roa (hash: sMo/6l6OJgyWFVqU8cFbnDYPktbERaDpmId+0GVplIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:3d:af:09:13:17:29:79:25:c9:6d:4a:67:39:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Validity
Not Before: Oct 27 00:00:19 2025 GMT
Not After : Oct 28 00:00:19 2025 GMT
Subject: CN=424971eb7964718bc232c6b2c64663e0579a7dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:f4:15:fa:c5:29:f4:dc:c8:d3:48:c9:fa:
aa:70:46:ed:b4:29:85:db:97:4f:0d:1d:c0:ad:f2:
a9:5e:d4:92:6b:d0:0f:87:00:4f:97:a2:07:8a:9f:
42:af:e1:03:32:e9:41:d5:87:43:f0:2c:9d:d4:e7:
b9:fc:1e:ef:04:af:aa:e4:b2:b0:19:52:bc:7d:52:
fe:49:f3:5d:f5:22:de:f5:07:6e:1f:29:d6:70:96:
6d:07:53:25:ce:96:ed:a2:ed:f6:38:f9:dd:b8:4f:
ca:b1:3d:c4:1e:13:85:9c:70:a9:96:27:09:98:cc:
80:2c:91:0f:e3:76:d7:af:a4:9c:b2:15:18:72:87:
53:4e:7d:0d:b3:d4:2b:09:33:e9:a6:d8:bd:02:d4:
5d:c9:b5:8f:39:ae:1d:f7:4e:97:6f:37:44:ff:f8:
0c:42:a0:bf:ce:2c:18:c7:81:6c:96:f3:05:3a:6b:
b4:78:af:07:ac:4f:02:c7:c5:4d:6c:7a:9c:29:3f:
6a:a9:97:d2:53:b4:89:19:10:83:cd:95:b0:6c:7d:
37:04:97:b0:12:83:a1:20:b4:e3:89:84:6f:3c:7c:
d7:f7:15:8a:f1:b9:a1:0a:7f:00:4d:c1:64:b1:f5:
5e:06:d7:43:9b:fc:49:9e:04:e0:18:c2:6c:93:94:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:49:71:EB:79:64:71:8B:C2:32:C6:B2:C6:46:63:E0:57:9A:7D:C5
X509v3 Authority Key Identifier:
keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:14:1a:13:0e:f2:da:d6:04:c8:ee:52:cc:35:55:f1:f1:78:
e0:11:5d:68:08:55:9c:0f:75:41:79:c7:9f:d7:55:e4:1c:d6:
76:0e:1f:1e:14:d8:53:09:e7:c2:4d:68:7e:56:99:a7:c6:10:
ca:95:37:8a:c1:82:b2:94:e9:42:d5:c2:ba:f9:1c:41:0a:ca:
f9:9c:f4:e3:0c:c9:1e:ba:16:0a:31:0b:a2:f5:01:89:df:80:
2d:69:ea:eb:96:1d:6b:99:c9:12:d2:8b:bd:af:ed:8f:8f:4f:
95:ed:41:27:18:34:3f:b2:b3:80:52:9d:ea:ff:87:05:32:ac:
68:43:5f:2d:f7:0e:0e:82:7f:1b:50:df:74:1d:a0:7f:69:25:
e1:b5:94:dc:61:22:e1:94:cc:80:52:c7:9e:a7:1d:d1:83:07:
00:fe:f7:6c:de:0e:46:93:8b:fb:3a:77:50:90:e2:ea:c4:60:
a0:94:8a:13:34:a2:fd:c6:0e:43:30:ea:65:51:96:67:99:dc:
eb:6f:53:8b:bf:9b:3f:94:a0:f2:6d:e5:e3:f8:5e:e8:ed:be:
97:8b:d4:6e:dc:dd:c6:b1:f4:d7:cf:bc:80:9d:78:9e:b7:49:
dc:4c:1c:2a:81:0c:d5:19:a5:dc:ec:e7:e3:3a:2d:5b:e1:10:
a7:fd:b5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:50:17 2025 by rpki-client