Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier: 0KeKz31n2AKwZlR8bH0vNyCU14SWQdnU9QAL/1Hu0aI=
Subject key identifier: CB:98:0D:03:A9:B9:43:23:AC:95:D0:2D:3B:27:67:9C:CA:0A:77:0B
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial: 0199FBEA79F8A57CCB155A0E7F4218B4DB44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:11 +0000
Manifest this update: Sun 19 Oct 2025 10:01:11 +0000
Manifest next update: Mon 20 Oct 2025 10:01:11 +0000
Files and hashes: 1: HoDvxsQA4iXxpxVk1_co_JtvvPE.roa (hash: cWutlJOtBJ4KMx+ET4BMORGB6H9YK5+9Bn/1o272ZUM=)
2: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: e8nbER+iCCSJ74OJqy6VStFsZF0c9r2ysJFm9QE9+gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:79:f8:a5:7c:cb:15:5a:0e:7f:42:18:b4:db:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Validity
Not Before: Oct 19 10:01:11 2025 GMT
Not After : Oct 20 10:01:11 2025 GMT
Subject: CN=cb980d03a9b94323ac95d02d3b27679cca0a770b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0c:fd:a8:a5:f0:cb:56:b7:d2:4e:93:6a:09:
a1:b9:f8:16:b8:52:f3:93:da:f3:42:b1:54:2a:69:
eb:2b:3a:7b:4b:94:a1:da:60:d9:d1:68:43:9e:31:
ce:80:ca:94:96:6e:10:94:a5:8b:1d:ec:07:ba:9c:
eb:01:d8:c1:9e:64:fe:a5:f4:2c:96:ff:d4:2c:87:
99:97:09:6d:e9:27:32:bb:72:85:f5:d5:90:77:c7:
3b:e7:9f:97:b9:eb:3c:23:95:c3:e1:a7:3f:8b:e2:
3c:b3:cd:1f:77:7b:35:c2:a8:c2:b6:15:da:81:39:
69:82:b4:08:99:8d:ff:d8:2d:16:cf:e5:46:53:0a:
87:e8:be:2f:53:15:e9:10:3e:48:4e:36:d0:99:ba:
47:1b:c5:a8:be:8b:52:46:72:0b:c5:92:8a:82:62:
9d:e0:76:47:e9:88:47:4b:d9:e0:c0:47:fd:a7:9e:
92:70:c2:8a:a5:bd:fb:f6:a8:56:89:33:a8:94:30:
25:46:b4:2c:1d:2f:ea:64:38:c2:36:cb:b4:41:4b:
17:01:25:bf:33:9e:07:89:c0:34:4b:2f:8d:26:77:
5f:0b:26:1c:cb:63:be:3f:d9:e6:82:f0:58:7e:0b:
7e:4b:b3:b6:4c:d2:96:c1:34:63:d5:8a:7d:90:06:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:98:0D:03:A9:B9:43:23:AC:95:D0:2D:3B:27:67:9C:CA:0A:77:0B
X509v3 Authority Key Identifier:
keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6a:8c:ba:cb:34:b9:fd:e8:f3:03:f5:52:64:69:4a:2a:70:
e6:ae:53:04:df:fb:78:50:81:1c:0c:2f:9d:c0:a1:22:f4:e1:
14:2a:90:80:3f:31:79:d7:a0:f7:e0:bf:03:17:6e:b0:51:1b:
d4:b6:46:a2:4c:4e:03:ee:d7:70:7e:9c:a0:85:ea:49:2e:e4:
06:e2:66:fc:53:0a:c7:68:95:74:9d:66:6d:01:75:37:d4:bc:
fb:7d:ce:d9:82:3f:c9:d2:d3:62:e7:e9:fd:17:59:fd:4c:40:
a9:44:a3:de:f3:b5:94:e4:ab:36:6f:f7:3f:93:90:07:8b:5a:
97:42:84:41:be:c1:c7:35:3e:49:93:2d:ce:aa:af:a6:ca:ad:
05:f8:0e:40:06:4b:ed:98:d8:35:b3:6c:87:d8:6f:9d:eb:b8:
36:ae:1a:54:80:f2:18:09:87:d7:56:a5:3c:dd:9e:4e:d7:8b:
23:5d:9f:d8:78:92:55:e1:89:29:30:c0:cc:3d:0d:3f:c5:55:
b6:96:08:b4:33:c1:27:01:1c:1b:7f:25:dc:9c:00:4e:95:67:
9c:5d:c0:8e:da:3a:1c:16:eb:1b:4e:16:2a:5a:06:f8:26:0b:
d2:a8:98:e9:03:29:ba:a1:a1:d9:91:93:50:df:93:ac:37:95:
f4:b4:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:59 2025 by rpki-client