Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: Ak0PrIE4bz6ctd6pk6SqC2XJMxdNC2/MeXMqoVYmZQ0=
Subject key identifier: C9:C0:89:1E:B1:96:24:AF:EF:BB:31:11:CF:5C:26:EF:2A:4F:76:48
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 019A4F2B1A1B9B1CF8B5E0C73365FA22D056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0C3F
Signing time: Tue 04 Nov 2025 14:00:16 +0000
Manifest this update: Tue 04 Nov 2025 14:00:16 +0000
Manifest next update: Wed 05 Nov 2025 14:00:16 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: uot16TU5Z5sUIBYTOOb6+GeOyNDiUIs6n3qJ2tUtzqc=)
2: goWXgCcrT8sdpWvs98SjkshS1QQ.roa (hash: pL/QBtJXrUgZbyv/2j+3PUPuF0UtD1Pg09swJJxayTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:1a:1b:9b:1c:f8:b5:e0:c7:33:65:fa:22:d0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Nov 4 14:00:16 2025 GMT
Not After : Nov 5 14:00:16 2025 GMT
Subject: CN=c9c0891eb19624afefbb3111cf5c26ef2a4f7648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:fb:26:68:e6:a0:6e:51:07:1b:a8:52:7d:
f1:13:da:43:82:44:6a:de:26:51:7f:46:0c:24:5f:
02:31:3c:fe:eb:0e:71:76:50:64:69:35:19:67:16:
90:9a:61:b1:a4:b9:f7:aa:00:14:a7:ec:10:e5:54:
3d:21:eb:48:37:16:1f:13:8c:e8:06:3b:00:c0:cf:
a0:24:a5:e4:ce:ff:49:39:4d:81:da:c0:eb:39:56:
5a:ee:2f:6b:53:ee:3f:41:63:75:63:75:b1:db:c9:
2a:35:43:25:9d:44:08:fb:0c:93:1d:4c:1b:c4:4e:
57:bc:64:63:18:cb:4b:22:af:ba:03:99:fd:d5:e8:
16:2e:36:c6:e6:82:8c:21:19:f8:28:bd:62:e1:eb:
2f:e2:87:c2:70:5d:22:8b:d4:e5:2f:28:33:b2:40:
99:f0:c8:54:34:86:02:53:63:58:fb:07:ee:0c:3a:
8f:67:ae:1b:c1:cc:b0:92:7a:94:16:05:26:1f:06:
96:af:03:de:5d:ee:b7:d3:93:04:3f:09:98:f0:4e:
84:ee:f1:ec:8e:b1:a2:e9:fd:0b:14:18:1a:3a:82:
86:05:b4:59:7d:45:a6:76:e0:9e:4e:73:f6:b7:4c:
ec:80:9b:51:10:c3:78:b4:fb:59:5d:5f:4b:fd:c2:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C0:89:1E:B1:96:24:AF:EF:BB:31:11:CF:5C:26:EF:2A:4F:76:48
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c4:d6:6b:df:6a:f4:46:60:b7:df:fc:d5:4a:38:7f:d5:b7:
40:af:cf:a5:b5:b8:4c:de:72:df:be:d2:84:ce:10:83:f3:13:
18:5b:55:b8:1d:5e:e2:c2:a9:f9:fa:f7:8d:fe:d2:37:dd:b5:
1f:21:25:eb:dd:01:2c:d3:e0:45:47:a2:a3:0e:75:52:89:64:
c6:62:be:29:47:98:d8:2a:98:0e:eb:4e:0c:90:56:6c:f0:17:
4d:5f:1d:3e:d9:00:d1:09:87:82:01:e6:eb:8e:96:1b:b4:eb:
72:d5:ef:76:40:7c:1d:ac:5d:d8:2b:22:77:68:27:30:db:ff:
20:a7:d1:04:a6:a8:87:b7:cf:1a:d0:73:cb:2d:08:34:9d:38:
35:80:b4:e5:69:44:26:13:bc:3e:80:5b:27:99:41:ea:44:52:
14:84:5a:c7:75:b1:f3:8a:b6:86:44:33:f4:0f:e3:f3:6f:81:
c1:5a:e8:18:f6:70:05:a8:be:68:59:62:0b:e5:db:65:ab:5b:
d4:8f:49:58:7b:2e:8c:58:9c:03:75:a4:d5:ff:7a:9a:d4:04:
fa:02:7f:cd:93:c2:23:6e:06:43:41:97:cc:09:b1:2a:96:d6:
8b:bc:ef:de:96:96:54:d5:98:34:85:eb:1d:53:0c:60:ef:37:
64:b8:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:27 2025 by rpki-client