Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: fUIiUs0futoh7L0Ff3wOkyicTVbTplxQl0Kc9A2XNpk=
Subject key identifier: E5:6A:34:4B:C1:F7:4A:A8:32:62:1A:35:29:0C:99:44:6A:DD:C3:CC
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 019A247897757FABC211E3C5A22C2873EB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 075B
Signing time: Mon 27 Oct 2025 07:01:14 +0000
Manifest this update: Mon 27 Oct 2025 07:01:14 +0000
Manifest next update: Tue 28 Oct 2025 07:01:14 +0000
Files and hashes: 1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: LdUjiDk0gETYHgk5A5m9ZB03KkLSHaRBYoslMVLfyxo=)
2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:97:75:7f:ab:c2:11:e3:c5:a2:2c:28:73:eb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Oct 27 07:01:14 2025 GMT
Not After : Oct 28 07:01:14 2025 GMT
Subject: CN=e56a344bc1f74aa832621a35290c99446addc3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:6b:fb:4c:26:3b:52:05:0d:e1:ba:c5:9d:
2b:c7:9f:ef:60:6c:d3:af:dd:81:73:3b:4c:06:a0:
c3:9b:94:d9:6b:a9:b6:d6:af:ce:25:3e:49:5d:c8:
17:b9:4e:5e:3b:4f:20:05:22:5a:ea:31:a4:06:73:
bd:04:fe:5f:4c:e9:1d:38:c9:70:45:6f:d8:7b:cd:
4a:65:1d:b3:7e:66:30:36:db:15:6a:b7:48:fa:32:
e6:af:90:85:f5:50:c4:b2:cb:1f:e4:60:c5:ca:20:
eb:3b:30:76:42:db:e8:31:50:2b:50:48:1e:4d:a9:
47:12:40:c8:c5:51:f7:7e:fb:ee:c6:f9:8b:13:a7:
14:08:6c:eb:7b:c8:37:75:4e:69:83:4c:44:15:62:
8a:1b:e2:5f:78:a0:67:cc:2e:17:ad:3b:77:ec:ad:
d6:57:37:d2:19:1d:a2:6f:45:5b:2c:d0:34:3f:03:
c7:0c:f8:f5:e0:b6:57:bd:31:82:83:21:f3:c4:df:
c6:2e:07:ca:94:3a:56:ee:e6:d5:f5:7e:d9:77:59:
ef:0a:fb:4e:df:6d:f7:a3:61:bb:80:0d:ca:d5:6f:
69:c5:40:6c:86:d1:9b:66:db:5b:34:f8:d5:7a:1e:
82:69:05:ac:9f:92:f8:67:92:fa:a0:fb:1b:3c:40:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6A:34:4B:C1:F7:4A:A8:32:62:1A:35:29:0C:99:44:6A:DD:C3:CC
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:03:a3:bb:8f:fe:2b:d7:22:3e:97:b2:f6:a3:d9:8f:e2:86:
aa:00:c0:9b:6b:ef:b1:06:20:5a:c2:91:9b:8d:f1:cc:ef:f9:
18:0f:00:b7:f4:76:b7:65:3b:46:9e:54:1c:58:3a:67:ad:42:
d7:ea:25:41:69:98:d3:92:44:b9:d2:dc:22:92:dc:14:5e:78:
fa:e0:35:fd:16:66:f6:33:c7:c6:c2:d4:9c:46:34:f1:57:96:
f7:43:28:7a:71:c6:da:e9:c9:1a:13:30:da:10:5d:fb:79:91:
e3:3e:c7:5e:b9:05:fa:bc:62:48:70:09:ff:6a:4b:2e:bc:73:
46:cc:0a:58:bf:e1:7f:1d:b5:4f:dc:41:2c:b7:28:70:32:54:
90:91:44:ad:0d:c6:05:12:11:5a:0d:18:59:49:62:8e:cf:db:
69:09:d0:e8:f6:f5:67:67:bf:2f:33:dd:86:3f:90:04:07:9f:
aa:84:72:85:e8:58:dd:88:8a:62:88:3e:32:a1:d0:67:c3:82:
d8:ce:18:dc:11:62:52:92:1d:6a:b9:d2:69:ba:cf:d1:b2:6e:
1c:47:86:8f:01:2d:4e:f6:be:34:0b:48:67:f7:ac:42:d9:75:
da:c1:4e:ae:1a:1f:e7:4f:da:2b:5f:5d:4b:63:bd:ca:10:88:
59:d8:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:28:11 2025 by rpki-client