Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: 2I0DJpZPEo8MnKUqp4nmeuYR+Ivqh3eexxbHfOQgBbI=
Subject key identifier: 7E:F8:29:7E:55:A2:A7:25:5A:16:43:D1:43:A1:8A:18:B1:11:C0:29
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 019A3044DF235B28A9C0F86342F9F531A3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0C2F
Signing time: Wed 29 Oct 2025 14:00:11 +0000
Manifest this update: Wed 29 Oct 2025 14:00:11 +0000
Manifest next update: Thu 30 Oct 2025 14:00:11 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: 0hizeL06b/v7QSVwkwS3hNOnAhglFbEfG8y738W4umA=)
2: goWXgCcrT8sdpWvs98SjkshS1QQ.roa (hash: pL/QBtJXrUgZbyv/2j+3PUPuF0UtD1Pg09swJJxayTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 14:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:44:df:23:5b:28:a9:c0:f8:63:42:f9:f5:31:a3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Oct 29 14:00:11 2025 GMT
Not After : Oct 30 14:00:11 2025 GMT
Subject: CN=7ef8297e55a2a7255a1643d143a18a18b111c029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:4f:d7:38:5f:b1:8e:2d:7f:94:43:24:8f:
b8:37:79:ba:c2:88:10:fa:49:2a:e8:0b:0c:4a:89:
5e:31:e6:db:9c:25:7d:89:61:b4:9c:c4:3b:9b:04:
15:d7:0a:51:19:8a:b2:12:1f:96:d4:23:28:98:cd:
fc:3a:a4:cb:5c:c1:ef:30:00:a5:95:30:f1:c9:2b:
48:85:d5:19:ad:78:02:1e:0c:4d:cf:4d:6d:0a:24:
ae:41:e9:ed:61:58:be:4d:e9:5d:1f:21:4b:86:07:
bc:98:69:3c:d3:0e:0d:07:ae:d2:58:b7:a6:34:26:
4c:a4:ac:7e:39:42:ca:fb:d7:ef:e1:db:6b:b6:fe:
ed:d2:e3:90:e2:7a:ab:9b:31:de:25:7e:55:d4:7b:
3b:a9:73:84:09:ca:a2:ca:b4:81:7f:f7:93:4b:c5:
72:d5:20:3c:56:1d:28:7c:fc:91:35:9c:27:90:17:
68:a1:01:84:c1:80:85:20:98:3f:07:30:60:23:39:
56:71:60:c9:88:80:94:a1:87:c8:f7:82:fd:61:2d:
0c:a3:00:a1:a9:15:a8:24:5f:fd:cb:b7:80:67:a8:
00:73:a2:16:84:db:08:5e:4a:e3:70:2e:26:a0:28:
7b:90:a8:41:a5:1d:2f:08:e6:6d:99:89:03:94:82:
62:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F8:29:7E:55:A2:A7:25:5A:16:43:D1:43:A1:8A:18:B1:11:C0:29
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3e:78:46:1f:c8:23:a8:ab:99:34:9b:23:6f:66:e7:14:81:
4d:fc:8e:0f:91:fe:37:7d:7f:ff:df:0c:92:d2:27:a7:c4:5a:
3b:0e:75:44:4a:7a:3f:32:bb:45:40:73:00:88:ca:53:4e:12:
83:cc:f3:46:96:ce:9a:08:0b:5c:99:6f:b5:a5:4d:db:75:b7:
44:b1:58:7c:b0:ce:e6:2f:48:7d:8c:88:8d:42:29:53:c8:c5:
42:9d:21:20:81:e2:eb:b8:3a:93:33:9e:0a:79:b2:1b:57:96:
17:52:93:9f:18:51:6f:99:51:64:8d:11:0d:19:1d:c4:73:57:
70:2a:a0:94:44:98:47:ef:bc:2c:4c:a4:d7:d7:28:a6:58:1b:
61:4b:92:28:56:d8:72:03:72:5f:9f:fa:28:56:b3:ca:07:72:
9a:64:df:37:30:d7:a6:16:c9:0a:ff:b0:fa:9d:00:a2:fe:f0:
4c:c4:48:28:d8:e9:80:4d:1f:30:73:99:d0:ef:22:9d:9f:7a:
9d:c6:35:1f:37:75:d0:06:b8:9c:5d:00:9e:ac:6f:9d:90:4d:
f6:2d:6a:fd:36:c3:cb:28:46:99:c5:73:61:f1:9d:c4:4b:df:
4b:91:42:69:01:02:de:15:0d:37:02:0a:e6:e1:ad:25:74:0f:
88:d8:8e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 21:48:05 2025 by rpki-client