Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
File: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json)
Hash identifier: xYfsVeW9PtvOjPqD4DudOU8cGwr4Y6s1lSdEalLXh0s=
Subject key identifier: B9:BE:5A:F1:AD:3D:B1:90:80:FA:59:15:E0:31:4A:AD:35:0B:7A:05
Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Certificate serial: 0199FC8F5D43F3CF63ADB3805774FC30ED92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
Manifest number: 16FB
Signing time: Sun 19 Oct 2025 13:01:17 +0000
Manifest this update: Sun 19 Oct 2025 13:01:17 +0000
Manifest next update: Mon 20 Oct 2025 13:01:17 +0000
Files and hashes: 1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: OGcRZfP49WfpAI6PsafaeIJD74RG1vsFnQ2fJ8w2tpQ=)
2: Rq5qhuZJL_f0RiemcCNo1CeBLZg.roa (hash: QjHh1mk02MSSyzdrymnZqYJyNlwN9P8BOUPtrzzXBu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5d:43:f3:cf:63:ad:b3:80:57:74:fc:30:ed:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3
Validity
Not Before: Oct 19 13:01:17 2025 GMT
Not After : Oct 20 13:01:17 2025 GMT
Subject: CN=b9be5af1ad3db19080fa5915e0314aad350b7a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:6a:36:63:5a:e9:11:c1:14:b4:5f:cc:da:
fb:6f:1c:6a:2c:b6:33:13:a8:44:32:ec:d9:77:b3:
29:ce:99:98:f2:7e:e2:95:21:05:49:7f:bc:e3:f4:
03:36:0e:d9:32:60:4d:21:94:c9:7e:5c:14:fb:7e:
d7:38:07:95:1b:65:1e:19:99:01:c6:92:75:82:97:
1f:62:c3:09:fe:76:08:5a:f6:77:e8:37:e3:3d:38:
48:48:4e:00:9b:40:e3:63:ca:d0:61:5a:9c:9c:ba:
64:f8:62:be:84:0a:b2:71:92:c6:7d:66:9f:f4:be:
e8:cd:0d:92:ef:59:73:ec:2a:1c:90:b7:79:e9:7c:
0b:84:c3:8b:96:24:3e:ad:e8:41:a2:3c:17:27:7e:
2c:49:9f:c5:56:ee:1b:01:a7:7c:5c:dd:d9:41:bb:
3b:18:d8:1e:37:b5:0c:f6:06:c4:ad:63:b0:75:b1:
74:55:ce:fd:a0:00:ee:25:49:02:d3:45:34:a0:64:
f6:92:93:6d:3a:38:2e:7d:0a:9e:6c:e7:0a:b8:ab:
98:af:cf:7a:2b:4a:2a:82:d1:50:84:aa:bb:4b:53:
0f:f4:d8:5d:4c:d2:ec:92:bb:55:73:af:73:7a:bc:
90:e9:07:95:92:26:7a:a5:e1:bd:9c:53:65:03:f2:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BE:5A:F1:AD:3D:B1:90:80:FA:59:15:E0:31:4A:AD:35:0B:7A:05
X509v3 Authority Key Identifier:
keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6f:a6:bc:fd:55:f4:73:ea:2c:ec:f5:2e:e1:02:0e:52:d1:
1f:53:19:7a:cc:49:06:3f:25:e6:72:c4:2e:14:c1:ce:30:5c:
f1:16:51:e4:02:96:4c:e2:ee:68:35:1a:33:1d:b8:cf:f8:33:
50:23:4f:55:1f:bd:87:1f:0c:25:ba:56:4b:df:7f:b7:f3:d4:
3d:17:5e:33:b9:f6:0a:b9:8b:d0:ba:92:7e:d2:a7:2e:24:5b:
b9:4b:61:0e:27:2a:aa:b6:9e:60:4c:c5:5d:31:92:15:00:ab:
43:03:5f:96:75:df:91:94:0a:a4:83:5b:35:a1:6f:6f:ea:92:
8a:91:e8:a3:fa:28:ae:90:dc:5a:15:63:05:03:90:1e:ce:cf:
8e:d7:47:34:d8:d5:72:cb:98:68:e7:f7:be:ac:88:d7:4c:06:
91:0a:33:86:a3:e6:4f:f8:89:6d:e0:95:fa:b8:e2:4e:e7:b9:
d6:d3:7a:c8:5c:2b:a3:53:6d:7e:6e:eb:12:d8:dc:3b:86:8f:
30:3e:2a:a8:7d:cf:ff:94:84:91:0d:e3:50:7d:45:a3:73:63:
f2:05:d4:e6:e2:eb:44:9b:73:d7:5f:a5:46:31:dc:84:00:13:
28:d1:82:f1:4b:47:31:19:b8:aa:d7:4f:8a:4f:8c:99:2c:97:
02:a0:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:20 2025 by rpki-client