Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: Qw82IjEpoKqmWVZhDH/9JFAYhxJWFzR++hM1ORvmwyg=
Subject key identifier: 72:D1:C4:B4:B2:C4:F7:11:D4:85:E7:12:0C:88:3D:63:3F:5C:47:DF
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019A221BEB436C22C3994284B182F09B3D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0B70
Signing time: Sun 26 Oct 2025 20:00:46 +0000
Manifest this update: Sun 26 Oct 2025 20:00:46 +0000
Manifest next update: Mon 27 Oct 2025 20:00:46 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: 34tdFXXRnV0shi9+uaeVKfU19fzV6HsYyEDKrz1drs0=)
2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=)
3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:eb:43:6c:22:c3:99:42:84:b1:82:f0:9b:3d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Oct 26 20:00:46 2025 GMT
Not After : Oct 27 20:00:46 2025 GMT
Subject: CN=72d1c4b4b2c4f711d485e7120c883d633f5c47df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:06:23:74:40:fd:f1:a6:46:49:d1:6d:99:
25:d4:84:c3:e5:d4:fa:ae:91:ed:a0:5f:e8:26:8a:
75:42:ca:aa:9c:77:32:31:5d:ca:12:39:77:08:48:
01:73:31:e5:3f:e4:ac:b3:4c:e2:65:d5:62:13:bf:
24:58:8b:0f:46:26:5d:68:35:00:ae:a2:75:b5:d8:
41:64:0e:62:2a:49:4e:18:aa:83:40:42:7a:b2:8d:
c2:51:40:38:7a:02:f9:25:01:bf:9c:6c:06:ef:31:
3f:3e:b1:05:0f:39:b7:79:32:12:16:52:fa:68:e2:
73:77:3a:79:61:5d:d9:7d:16:54:3e:8c:47:25:ae:
d0:41:af:d1:f9:bc:d2:2e:64:df:db:57:55:f1:5f:
92:e9:dd:b9:67:5e:72:dd:a1:ad:7c:e8:d6:ea:e6:
d8:c9:7f:a4:5b:5d:c2:6a:16:ca:56:75:5e:8a:2d:
b8:65:79:da:cd:ee:ca:ac:df:91:b6:8d:ee:fd:82:
28:b7:fa:b4:04:67:52:38:d5:3c:b6:fe:6a:06:6a:
10:e7:fc:6f:e4:47:63:34:6a:8f:e9:10:39:3c:87:
46:67:9a:89:26:61:6c:7e:e9:ec:e4:17:74:55:cb:
ed:92:8a:d0:6c:6a:f3:1c:f9:4a:f6:a3:ba:fb:09:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D1:C4:B4:B2:C4:F7:11:D4:85:E7:12:0C:88:3D:63:3F:5C:47:DF
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:47:57:c1:65:c8:8b:cc:28:15:01:7a:4a:5e:eb:67:43:03:
74:60:75:a4:6e:41:71:3e:a3:ed:de:62:98:a5:df:85:d6:c1:
fc:61:88:f9:fe:80:10:2d:bf:c6:a3:55:c0:0c:75:6d:70:8c:
0c:51:c8:1c:63:8b:d4:99:7c:75:64:d4:a5:2d:d4:d9:fa:2e:
79:5e:ea:6e:6e:b6:db:b0:f1:a3:e5:8a:68:3d:9f:31:db:c1:
01:1f:0c:fe:bf:ff:bb:bc:48:57:99:ab:d5:cc:71:9b:8b:45:
2a:d4:3d:62:9c:1e:15:db:a4:af:6a:f1:fa:67:28:c2:7e:eb:
66:cf:3a:69:49:9c:25:d6:ad:0a:3b:fd:89:16:ff:bf:97:5b:
77:47:b3:94:ce:b3:9e:7f:f6:63:30:8d:3e:10:6a:7a:05:b7:
cc:29:a4:39:30:47:1f:74:5f:22:a4:64:34:21:af:3c:7f:03:
43:e3:2c:a8:81:86:1d:b3:35:74:56:b7:08:4d:bc:92:a3:9c:
23:d4:4b:cf:0c:3e:a1:80:25:11:b8:f7:62:2b:90:ac:46:dc:
45:5f:5f:77:a6:7f:f6:61:79:48:e0:03:d9:02:c7:ef:fa:38:
9f:75:80:62:33:22:14:73:8a:79:e7:5a:0f:78:23:ea:7b:81:
e9:63:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:38:45 2025 by rpki-client