Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
File: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft (raw, json)
Hash identifier: pPh2qahGFWE879GEuDsfDpNaRzzkB9Hq07S4ILKgMUM=
Subject key identifier: 22:8D:40:92:BA:42:A2:0A:D7:9D:11:05:75:3F:6F:7E:2A:31:5C:C0
Authority key identifier: F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
Certificate issuer: /CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Certificate serial: 019A4EF4BCCB70F04346AE118E31A46220A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
Manifest number: 1421
Signing time: Tue 04 Nov 2025 13:00:53 +0000
Manifest this update: Tue 04 Nov 2025 13:00:53 +0000
Manifest next update: Wed 05 Nov 2025 13:00:53 +0000
Files and hashes: 1: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl (hash: /lSMlu/cNBWLBATGQ5zvPiFSWepUA51P9kenTC1W8mI=)
2: aDwAS1LQt-dxkqhRRrd8pQDVwd4.roa (hash: duXpBH3mnr8j/KJuHRzuQfhllP9IGUW8jdVpYb4QHpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:bc:cb:70:f0:43:46:ae:11:8e:31:a4:62:20:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Validity
Not Before: Nov 4 13:00:53 2025 GMT
Not After : Nov 5 13:00:53 2025 GMT
Subject: CN=228d4092ba42a20ad79d1105753f6f7e2a315cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:44:f8:9a:26:bd:8f:93:0d:de:cc:34:75:
30:79:fe:a5:46:fa:0a:75:96:9e:66:ec:8b:74:a6:
6e:05:9b:fc:b7:df:95:54:73:fb:46:83:f3:25:00:
5e:16:2d:7e:ff:d0:c8:99:51:c4:b2:9e:44:66:69:
e0:49:ba:52:74:89:fd:a2:7a:08:82:08:cd:8d:7e:
d5:46:fe:ba:38:ad:83:66:ed:01:69:22:20:ae:fe:
86:37:7f:71:da:55:9e:38:39:ad:c9:24:ef:2c:18:
2f:c6:66:32:9c:f8:a1:e8:6a:a5:97:5c:40:c9:c9:
12:55:5d:89:8c:68:78:12:07:cf:bc:ff:69:50:66:
7b:f3:6c:7b:c3:18:9d:f4:93:cc:55:30:da:3f:08:
71:31:e6:7b:42:52:13:e0:4b:52:e7:6d:86:15:35:
2e:6e:7d:ee:2d:31:2d:c5:6c:3a:6d:3a:f5:94:ff:
85:ba:85:ae:ee:38:8f:69:82:48:c8:3e:f0:97:d2:
ab:af:db:fe:14:6f:64:7e:ca:8e:d5:d1:34:78:ee:
6f:cb:78:b3:21:ff:23:cf:49:4d:83:09:38:56:8f:
07:d0:1f:70:ce:88:39:73:d9:b3:21:b1:56:c7:0a:
06:c2:83:d4:fa:18:4a:5d:07:14:8f:c8:fb:46:5d:
4b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8D:40:92:BA:42:A2:0A:D7:9D:11:05:75:3F:6F:7E:2A:31:5C:C0
X509v3 Authority Key Identifier:
keyid:F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:26:76:cc:a6:84:fe:7e:c3:6e:7a:0c:b8:f8:6f:d3:e4:cc:
70:29:ab:e8:70:9d:c1:0c:a0:69:d3:14:27:80:16:06:1e:16:
53:7b:6b:f2:f1:5e:05:a8:3a:e8:3a:68:59:38:45:72:1e:0b:
96:f8:b0:0f:64:4b:cc:bb:da:36:f0:16:4c:e3:30:8a:2a:41:
bb:01:97:4a:38:f8:fc:c2:fe:50:f9:b1:db:7d:b6:a3:63:33:
1f:67:dd:bc:e5:1a:58:b4:62:d2:78:18:61:1e:a2:93:41:b0:
ae:50:45:46:fe:ae:0d:d3:41:c7:32:0f:0a:a6:24:74:bc:c3:
48:b7:9a:93:8b:94:c3:d2:0e:ab:2f:d7:85:c6:9a:d3:40:7e:
89:12:c8:64:05:af:2f:85:5a:21:bb:77:d4:59:89:b4:8b:f3:
90:e8:98:d6:6a:2b:7c:b2:c3:91:28:aa:20:6a:51:2a:1c:cf:
1a:bc:ca:e9:40:02:31:68:e6:36:61:52:9d:24:04:4e:41:b0:
e6:7f:35:b0:3c:53:3f:de:a8:5d:85:d4:22:16:f1:15:8e:bc:
9f:ca:52:d5:eb:b4:16:3a:e9:b1:ce:4e:ab:cd:b4:a8:e9:44:
a8:77:2f:73:8d:97:80:fb:b5:5d:c2:fa:a7:1b:b1:76:48:75:
70:fc:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:35 2025 by rpki-client