Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier: x2vDgPn/iJjIATBZb8RG9JoNo+aGF4bBxn+U9vejzT4=
Subject key identifier: 1F:22:CE:20:79:5C:87:CA:B4:07:E1:F0:BA:E4:1D:AB:C5:D1:D2:A2
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 0199FBEABFD770512B765BAB41494656A7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: G5dSd/e+2VX2xK9wG4E/FHyg0iXTP0bQSYuyNQlo7Fc=)
2: liKr9r8FMDweCFSU14hBTeBiJGg.roa (hash: yTAfLgiLewRGMW9BR3bDVbC2pPmowcN0vbDNQIsIUcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bf:d7:70:51:2b:76:5b:ab:41:49:46:56:a7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=1f22ce20795c87cab407e1f0bae41dabc5d1d2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:b6:40:25:e2:f5:a2:6a:eb:73:eb:9c:88:
3b:ed:28:c3:ea:57:f3:d3:f7:ad:e5:1d:98:c4:2c:
20:c9:65:06:2f:55:0b:af:7e:e0:e7:c1:94:41:a2:
a8:86:ba:13:96:06:c6:7f:83:07:d7:8e:08:37:69:
04:1d:8d:a1:50:91:c3:b2:8a:94:e1:b4:ae:4d:24:
cd:30:f2:13:b3:2e:aa:ba:c1:59:e2:63:28:6f:48:
08:82:a9:4b:bf:74:28:22:63:23:9a:7f:71:ac:a9:
17:e0:92:3c:bb:46:22:d3:26:5d:64:8d:28:fa:be:
e8:19:a4:d3:42:84:8f:02:84:3d:a2:32:0d:b1:cb:
dc:72:a7:78:22:e2:7d:0d:a5:f2:3b:58:fc:0c:97:
e4:88:ba:51:63:ae:fa:93:dd:16:f5:1e:eb:4b:3d:
78:bd:19:18:b2:0d:dc:84:ca:2f:33:33:99:81:80:
3c:a9:65:05:c5:98:3f:ea:7e:02:49:df:4a:3e:ec:
b4:a5:e8:70:27:19:28:4e:0b:e7:90:0f:3c:92:01:
02:93:ec:c7:77:8f:bf:4d:a3:a2:6c:05:9f:aa:cf:
b7:c8:e9:1b:66:7a:47:0d:29:1a:05:c9:dd:a7:7e:
b8:d7:04:4c:9e:ef:2e:5f:83:94:80:48:83:a1:0d:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:22:CE:20:79:5C:87:CA:B4:07:E1:F0:BA:E4:1D:AB:C5:D1:D2:A2
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a9:eb:98:9c:bf:de:2d:d0:b5:d4:77:23:5a:ae:d6:b2:1b:
0d:c0:85:6a:1d:b3:7b:d0:34:0f:04:e7:56:68:19:37:46:62:
62:1b:5e:86:13:3c:2c:58:2d:67:87:7f:da:9b:e9:0c:ee:45:
af:6a:fb:08:0a:f3:55:58:d7:4c:b3:75:0a:c1:fd:bd:99:3c:
90:87:d9:b5:09:ae:92:65:b1:9e:ec:53:d3:9a:4e:2f:eb:37:
fb:6a:10:42:55:0f:1c:e6:65:52:aa:a1:5b:6b:cb:35:af:71:
2a:62:82:6c:bc:11:cb:07:49:0f:52:0f:2d:c9:85:06:71:8f:
10:6e:be:87:5f:e3:ba:4c:f9:14:c0:65:81:e7:24:9b:ed:89:
34:ca:dc:2e:39:78:fd:0e:de:68:41:9f:12:ff:95:fe:95:a4:
b5:c1:a9:47:6b:93:14:e5:41:2f:19:8f:99:14:7e:68:f0:93:
92:dc:ac:e1:37:13:1d:67:81:03:dc:a1:21:34:03:5a:8e:e4:
ac:54:23:c9:24:0b:c6:2d:97:0f:c5:27:da:7d:0a:84:32:6d:
a6:b2:f0:f5:09:f9:81:34:e2:85:5e:e1:67:09:c8:a1:de:cd:
9b:60:02:6d:bf:12:8f:9b:6e:47:44:fb:2c:51:a4:9b:23:c0:
c0:e1:b2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:05 2025 by rpki-client