Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json)
Hash identifier: aGHLCaFJMnW8N9C7GuqWh2ffExv8r5gOsCLPJg3WcEI=
Subject key identifier: 63:97:DE:31:26:F7:DD:A9:51:24:29:9A:5F:3C:E7:BD:B0:9E:85:9D
Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
Certificate issuer: /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Certificate serial: 0199FC21482CE4896287393A7E630834F341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
Manifest number: 0C16
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: sc2YxMu79dtMi/OurRRyoTP44T3ZQOvkK1Ubx4ndRRM=)
2: BfiNOagjub-Q5UhmAEUO1BegvlM.roa (hash: z7UGbr4hGM96gAGkSVL5gy0uNjYzSjUeofOhu3xqo/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:48:2c:e4:89:62:87:39:3a:7e:63:08:34:f3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=6397de3126f7dda95124299a5f3ce7bdb09e859d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:e4:d1:ee:e2:27:78:f1:bd:59:30:e2:d7:
86:72:74:4e:96:b9:74:ca:ea:23:38:95:bc:84:20:
29:81:44:1f:db:93:df:d3:60:58:2d:b5:81:2c:f1:
7b:e1:6f:90:0f:a2:4a:24:89:f3:37:f6:72:ab:bb:
35:e9:68:ba:55:be:13:db:a3:f1:b8:3a:5c:70:17:
9c:e6:d9:7b:34:74:12:ba:bf:33:80:1f:64:ee:90:
e0:05:ae:31:33:e7:f2:c1:02:1d:6b:3c:a4:fb:c6:
8a:5c:a5:71:9a:ef:04:b2:d9:45:e5:37:a6:72:61:
eb:ba:e9:70:4a:92:6a:96:7f:30:40:de:ad:96:f9:
f7:8a:af:1d:3e:2a:c7:fb:99:44:c7:48:df:86:f6:
ca:74:3e:78:44:58:81:22:8d:9b:f8:70:d4:55:28:
ca:8e:e0:b4:b0:7c:7c:33:26:d8:87:48:53:8c:16:
16:ed:f2:6b:85:24:93:45:1f:c5:66:d9:60:ea:fc:
9f:8a:3c:c8:e0:56:e2:21:c8:b8:e3:66:cb:cf:15:
45:ee:d0:a9:43:67:2c:27:07:d1:70:a0:10:ee:51:
9a:95:21:bf:4b:34:38:5f:ab:c2:a6:60:f0:21:6e:
3b:3e:c6:0c:6a:0a:a6:ac:9a:a8:df:bc:33:b3:e9:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:97:DE:31:26:F7:DD:A9:51:24:29:9A:5F:3C:E7:BD:B0:9E:85:9D
X509v3 Authority Key Identifier:
keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:dc:45:e6:1d:45:62:65:8f:ef:b3:97:b5:d8:e2:8e:35:26:
e0:1d:09:99:86:73:b2:83:7d:d4:b8:56:6e:07:12:04:20:f4:
93:1b:e0:0e:f7:98:71:0d:eb:fb:b5:2e:c9:55:61:91:e0:4b:
24:d3:9e:ab:05:42:8d:1a:b5:0e:d6:d6:75:83:8c:58:bf:99:
10:3f:bf:8a:c5:98:19:89:a9:36:e3:fe:bb:86:ed:d5:cf:2b:
af:d7:6f:fc:70:cf:2d:f4:46:9f:1c:21:f1:81:8d:7f:de:cf:
73:73:1e:1a:b4:6a:d7:27:31:4d:48:80:01:e9:59:7e:96:aa:
6f:e1:82:1e:65:92:6e:7c:51:ca:66:21:46:87:b5:18:a2:08:
17:8b:b3:b3:99:18:4e:45:38:63:6f:44:d3:b8:10:e7:29:0f:
f0:28:69:4f:32:e6:42:67:f5:37:ef:01:16:8d:4b:64:03:4c:
78:f3:1f:b6:8c:27:0e:6a:fb:c0:ab:e4:7a:c6:36:80:ea:73:
c2:f4:fd:9e:46:55:b4:ff:04:af:61:fc:f7:cc:2c:ce:67:e2:
19:ec:9f:16:e5:a6:ca:73:15:4a:2d:99:1e:54:cb:bc:81:ee:
6e:13:f0:23:a2:fd:dc:de:ad:93:42:8a:42:13:4b:48:83:47:
ef:d3:7f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:19 2025 by rpki-client