Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
File: 9qD_yrRKardihf2LFfuprgRywAo.mft (raw, json)
Hash identifier: XJ7/mBS5tLr3Q4DAhlStYtWYB3LIS7PIK0iJyLQxiag=
Subject key identifier: B7:4F:31:EA:77:88:6D:CF:5A:84:67:D8:94:F5:20:42:BF:21:A9:B6
Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Certificate issuer: /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Certificate serial: 0199FF225A95082BABA720B58F7C77BA4ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 01:01:05 +0000
Manifest this update: Mon 20 Oct 2025 01:01:05 +0000
Manifest next update: Tue 21 Oct 2025 01:01:05 +0000
Files and hashes: 1: 9qD_yrRKardihf2LFfuprgRywAo.crl (hash: Dwm7TJOi3nACkZ5rvng6OnUdp0BX77RFu2RP6paSUoA=)
2: XPkwDLJHT478MATdbgeUa5gcEiA.roa (hash: DoMDYSGNMC9OU+9UBRPPXJnhTtSu9q09Id+HJ989GvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:5a:95:08:2b:ab:a7:20:b5:8f:7c:77:ba:4a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Validity
Not Before: Oct 20 01:01:05 2025 GMT
Not After : Oct 21 01:01:05 2025 GMT
Subject: CN=b74f31ea77886dcf5a8467d894f52042bf21a9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:45:f0:f2:6c:64:82:41:97:67:d3:1a:ab:
93:87:f6:7d:39:ab:14:09:60:75:6e:56:f5:af:bd:
c1:2c:e6:c3:f4:fe:40:31:86:29:5a:73:c0:94:bc:
45:56:45:b1:41:3e:4b:3e:2b:9d:f4:eb:f1:0c:b5:
37:85:da:44:da:54:5e:39:51:76:24:34:c9:d4:5f:
e8:e8:3a:67:7f:7c:57:96:ef:2d:00:08:35:9d:da:
c0:fb:1e:6c:5a:cf:d1:38:93:d6:d4:1d:e7:cc:2e:
c0:3b:69:a0:4b:17:17:eb:f7:7d:00:62:7f:01:cc:
40:5e:98:e6:a6:2d:b1:7b:05:07:25:a6:f3:b3:2b:
36:8f:72:23:0e:f0:9e:bd:ad:ea:02:e3:9b:49:d5:
d4:74:9b:71:e6:8c:9f:13:37:37:59:7e:90:12:55:
6f:7c:25:27:f8:b7:50:9a:3d:d2:cb:aa:66:46:db:
76:57:c5:fb:07:53:a6:6c:fc:3a:50:16:8f:69:de:
44:ac:d7:56:42:63:96:ea:8a:ce:a6:93:ad:bb:39:
dd:ba:b5:03:3f:1f:ce:5e:26:65:48:59:d8:5f:03:
2c:c2:12:1a:29:5c:b8:36:a7:48:94:aa:c4:d8:75:
25:7d:c1:67:e5:7e:e9:74:68:21:91:5f:d5:af:8c:
22:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4F:31:EA:77:88:6D:CF:5A:84:67:D8:94:F5:20:42:BF:21:A9:B6
X509v3 Authority Key Identifier:
keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f4:f4:52:7f:81:fb:e2:35:8b:b1:c0:c2:dc:7c:90:83:af:
ad:1f:84:cd:93:32:44:db:5f:30:09:bd:b6:8c:25:39:11:f0:
46:df:93:ee:3e:bc:47:69:4b:3f:31:42:49:d9:bb:4f:03:e5:
a4:cc:d1:33:b3:0a:7b:a9:3e:87:30:6f:23:bc:eb:a1:4c:a7:
6d:63:64:80:17:03:0f:37:81:2a:51:83:aa:da:c8:cf:83:c6:
8a:ba:7e:33:90:c7:cd:8a:28:de:03:24:ba:1b:87:ac:fb:3f:
7e:95:6c:69:50:96:57:aa:f2:07:e7:c5:8e:37:fa:10:83:f7:
0c:dc:4c:50:f6:4f:81:18:7e:0c:cc:64:0a:91:1e:18:8d:fa:
5b:41:f1:52:0f:90:1d:db:ab:8e:f8:d4:1e:c0:eb:49:07:23:
92:d5:37:0d:64:d0:08:31:91:79:89:f4:a6:45:46:ad:99:a6:
87:12:08:9b:40:ec:3c:1b:df:4d:66:64:59:5b:ff:1e:c7:db:
1e:18:f8:d1:64:46:0f:3b:2a:c3:d5:9e:cb:ce:17:21:a4:a7:
03:15:10:a8:3a:78:a7:73:9d:60:0c:b7:f0:b3:9f:55:fa:55:
f6:b2:8d:95:1d:b2:8c:4a:ef:d9:15:64:6c:88:6a:a1:81:c2:
ac:3f:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:39:36 2025 by rpki-client