Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
File: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft (raw, json)
Hash identifier: lVkHmxDEH+c1WDDuC0HAbYjQZlmrgZ3C5+KaQqLubak=
Subject key identifier: AD:26:6A:4A:C6:EB:A0:93:5C:7C:69:DD:1C:9B:1D:0C:8E:61:B3:4A
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial: 0199FDD8D419C3A8E848F3B0669BB38C2FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
Manifest number: 05EC
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl (hash: wkVNAGFHcMonAefnWKcQBdYGTg5SG6qLDi44qBhtQd0=)
2: hmRzovRV4UHybR1HxVtSJMOLDCw.roa (hash: OsQ6iHBOvn0+b51MYRo/b13uIhsZ7r4gypQoB9TbMVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d4:19:c3:a8:e8:48:f3:b0:66:9b:b3:8c:2f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=ad266a4ac6eba0935c7c69dd1c9b1d0c8e61b34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:75:65:60:1e:de:bd:ef:2e:78:4c:b2:ef:
7e:af:3f:2e:23:7d:98:00:d1:8a:29:3d:67:1a:29:
27:1c:6e:df:0a:a5:76:a5:6a:3b:a5:07:79:31:f8:
5c:d9:50:34:3a:5c:4c:a7:bd:32:3f:cd:12:1b:3b:
22:97:7d:f7:27:93:67:bd:ef:d1:25:c1:ff:38:bf:
3d:b0:aa:62:77:cf:7d:59:64:8b:7d:2b:15:a5:45:
7b:bf:ae:4b:8a:4c:4b:99:09:c4:23:c5:e0:2e:0f:
76:79:33:16:3f:19:02:d5:97:c0:60:95:59:2b:88:
aa:b6:5f:a4:ad:e7:0a:df:e4:b4:0f:9e:d6:6f:6f:
cb:88:ed:cb:ae:cd:4d:c0:d9:59:b6:5d:0e:0e:69:
e0:04:aa:77:2b:b9:7b:22:67:b7:86:ab:bb:39:e6:
80:36:da:20:c3:86:48:4d:cb:72:8f:f1:63:45:67:
ee:c0:03:9d:31:de:28:bd:33:40:6b:fc:44:08:51:
25:e7:53:41:64:4b:61:e9:f0:be:5b:e2:91:75:ba:
5e:86:aa:7f:ac:86:bb:7d:4d:42:28:e4:a8:df:3a:
62:aa:64:5b:32:4b:45:e4:7a:7d:bd:c5:b8:2a:aa:
59:67:d8:87:3a:f5:0c:19:3b:db:e2:9d:e5:53:fa:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:26:6A:4A:C6:EB:A0:93:5C:7C:69:DD:1C:9B:1D:0C:8E:61:B3:4A
X509v3 Authority Key Identifier:
keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1a:c3:c2:b9:26:34:68:e7:6e:22:7a:57:aa:5c:50:78:3a:
56:94:b6:8c:db:d9:dc:a1:8b:6a:60:a8:4b:e2:63:2a:89:6a:
29:4c:1e:64:b8:81:51:e3:93:c3:92:14:9f:bc:05:65:29:60:
e7:2d:fa:23:0e:a4:a7:88:a0:ba:7f:e8:a6:78:73:45:8f:8b:
e8:c3:16:0a:a3:a8:ec:e4:81:16:83:3c:66:59:97:b3:3e:07:
70:3c:66:77:33:98:47:db:3d:42:9f:1f:2f:95:e4:a8:de:71:
23:4e:cb:10:a5:d0:69:22:39:1b:45:65:41:34:51:75:d7:ac:
b5:4c:d4:5e:46:3a:18:ec:5f:18:78:b1:1f:fc:99:d1:42:c9:
e7:6c:df:ae:52:90:0b:ed:02:e2:0e:7c:3a:09:a2:1b:90:5a:
98:ff:e2:36:3b:fc:90:62:0b:89:22:99:66:ac:17:fe:37:b9:
6e:fb:3b:53:0b:f8:e1:a2:e2:2d:65:eb:6d:30:a8:bd:c6:80:
6c:51:50:36:3f:ad:81:19:13:17:aa:e9:af:87:a6:58:b0:78:
51:29:78:8c:cf:ce:ed:56:64:21:66:02:4b:3d:aa:1c:95:6b:
5b:3b:6b:c0:fa:2d:cd:78:64:30:bf:c1:b5:b8:a0:00:8f:a7:
bf:70:11:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:53 2025 by rpki-client