Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
File: 9fDwfKCmtMssFZ6QRZdFA64ohYE.mft (raw, json)
Hash identifier: gVIza2zvAgGqFXmccrYr2x4PP1oyNhUSXtZmhlKqzPA=
Subject key identifier: A0:02:43:28:73:0A:19:4E:6D:22:F4:DA:11:AB:A3:57:54:00:06:46
Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
Certificate issuer: /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Certificate serial: 019A22C0A2C11A1E9506B112F615CC616F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
Manifest number: 5D
Signing time: Sun 26 Oct 2025 23:00:41 +0000
Manifest this update: Sun 26 Oct 2025 23:00:41 +0000
Manifest next update: Mon 27 Oct 2025 23:00:41 +0000
Files and hashes: 1: 9fDwfKCmtMssFZ6QRZdFA64ohYE.crl (hash: STIPnzg6/StS4VnOXbbWGNM9E/OxdkIo12VmlPiSt/E=)
2: _TKV-DpdXmei2SR3rrnjoUIFNqQ.roa (hash: R5raBHMEiNG8zclHwaLQB17jXPqQeZzFe9QNn7MrSYM=)
3: c25XUVb4Bk3AvdWuVyNrTQybFGc.roa (hash: j4cV2DVaLOTZm+S8euSjn/Ih9FV1aHPND9PujtBd3s0=)
4: q764NZ2C5xrpkP8LBsmdVe7f1dw.roa (hash: sLViIw17i8ukMTeK1rHQJp904qo/JWVcyaL9gru+PTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:a2:c1:1a:1e:95:06:b1:12:f6:15:cc:61:6f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Validity
Not Before: Oct 26 23:00:41 2025 GMT
Not After : Oct 27 23:00:41 2025 GMT
Subject: CN=a0024328730a194e6d22f4da11aba35754000646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:2a:f3:b7:c4:76:b1:02:71:99:99:37:eb:
d6:2f:75:ec:b2:ba:54:e8:cd:92:57:3a:08:ca:45:
28:9c:76:e9:91:38:76:99:5e:be:20:62:a3:6a:44:
47:98:02:24:f9:c7:70:32:3a:78:b5:60:f5:f6:75:
43:36:b7:3d:ed:92:8b:3e:5a:27:7a:66:33:dd:50:
cd:a9:0d:31:ba:d0:fc:72:29:02:bb:76:c8:94:50:
c1:b6:67:31:c4:7d:97:07:0e:79:9b:e8:4d:e4:28:
9a:f6:a6:19:5e:3a:89:17:5d:08:79:5d:1e:55:1d:
b3:d7:8f:03:c4:5c:a0:2b:30:69:20:7e:a7:45:2f:
da:c2:91:5c:ca:b9:ed:a9:38:94:32:28:b0:f0:6d:
ff:d2:85:59:2d:6c:50:11:38:ae:29:8f:39:75:6e:
dd:85:85:24:a9:b2:90:ef:5c:d3:96:b6:da:b8:71:
ea:99:fa:ef:6a:81:59:48:d8:41:7e:de:a4:dd:79:
20:d5:b7:16:73:82:30:5d:89:9f:73:e4:91:f3:1e:
37:31:50:a2:14:6e:2b:e4:51:74:63:c8:c6:da:9e:
4d:9d:88:6c:a0:e6:19:41:fd:8c:72:a5:7f:b3:1b:
4e:8d:2a:1d:32:10:55:0f:1e:e7:59:b6:90:87:f1:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:02:43:28:73:0A:19:4E:6D:22:F4:DA:11:AB:A3:57:54:00:06:46
X509v3 Authority Key Identifier:
keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fc:44:33:01:1f:e0:b3:73:0e:12:d1:c2:0c:f7:f1:3d:7e:
4c:8d:f5:f4:bd:d3:4f:ee:39:8e:9e:5a:62:bf:8a:3c:48:f9:
69:65:ce:b9:49:06:a2:40:05:31:4c:97:79:ff:70:77:d2:38:
94:35:7b:b7:1c:09:80:8f:20:c7:ad:6b:0d:0e:b5:ca:21:35:
5c:56:86:19:37:90:d2:c4:f0:c3:17:e0:88:f3:5f:b6:a0:98:
a6:d6:c3:c5:b7:83:99:0b:f7:4f:0d:bf:89:6f:3d:b3:10:ac:
54:b9:f3:a3:78:67:19:b3:d6:77:ce:31:ec:bb:79:87:b6:40:
57:c9:d0:4c:44:e6:9e:9e:f3:98:fd:a4:74:c3:ca:bd:22:bb:
25:04:e3:b9:bb:72:6c:c3:5d:62:f7:05:5b:93:9d:c6:6a:ca:
92:6d:8b:15:5a:bc:1d:81:66:f1:a0:46:05:a3:6a:e1:fe:c2:
bd:20:8a:97:0c:e8:04:b6:c8:8a:4e:7f:a9:c9:a6:ba:a1:55:
67:20:4d:c2:f4:70:90:eb:78:69:78:f4:44:68:9f:ce:24:58:
a1:59:55:78:40:86:2e:18:db:b2:ef:04:65:4f:ee:37:4c:bd:
09:1c:0f:c5:91:2b:98:d5:80:e4:61:fb:79:ea:fc:03:2a:80:
c5:ab:eb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:04:50 2025 by rpki-client