Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
File: 9yQQnyF3AuaYDbkFOo9HEPwKCno.mft (raw, json)
Hash identifier: Ar4390qtyoydjgFwkbREI8qwlRibwnIZ4rwTIHjtGFQ=
Subject key identifier: 4C:06:61:52:35:C1:63:B2:2B:02:B9:27:CC:71:C6:11:76:1E:97:CD
Authority key identifier: F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A
Certificate issuer: /CN=f724109f217702e6980db9053a8f4710fc0a0a7a
Certificate serial: 019A00DA55CB88C93D3D0CAAE6E804ABCAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
Manifest number: 01F4
Signing time: Mon 20 Oct 2025 09:01:40 +0000
Manifest this update: Mon 20 Oct 2025 09:01:40 +0000
Manifest next update: Tue 21 Oct 2025 09:01:40 +0000
Files and hashes: 1: 9yQQnyF3AuaYDbkFOo9HEPwKCno.crl (hash: 4mCGGpKt3t5pJ/me1VG1Ww9+j/GXmspVRH7eTHlLiZo=)
2: nFar_UOXP4QzN4-h1MF9qknQEIw.roa (hash: tJ5LZZ8cOfCs7MBCUeqrXfhErlPn41y+8yI8NHVM7o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:55:cb:88:c9:3d:3d:0c:aa:e6:e8:04:ab:ca:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724109f217702e6980db9053a8f4710fc0a0a7a
Validity
Not Before: Oct 20 09:01:40 2025 GMT
Not After : Oct 21 09:01:40 2025 GMT
Subject: CN=4c06615235c163b22b02b927cc71c611761e97cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:00:51:c8:db:23:c3:e6:26:76:5c:95:48:
4c:54:d4:98:c1:2b:77:87:33:99:ba:c2:fd:bb:f4:
27:f8:b1:df:2e:ef:3a:48:55:2e:72:1b:ce:6a:da:
ff:48:ff:4e:bb:1e:dd:a5:86:1c:7f:dc:16:51:a2:
01:d5:27:3f:0a:34:9a:c6:aa:85:ec:a8:17:b5:af:
48:4d:b0:11:b2:2c:2b:75:df:a9:43:66:7f:e3:35:
6d:68:7b:ff:75:37:0d:5f:fd:b9:88:8b:16:62:83:
b9:cf:17:91:3a:c7:0d:b2:cd:30:32:f1:6f:e2:f7:
f7:3a:86:51:c1:b9:1b:e5:76:6a:d0:a7:91:6f:f0:
2e:99:81:8b:b2:08:6c:1b:e8:54:10:8b:d3:15:64:
07:e2:6d:00:a5:f2:24:a4:07:de:06:53:b2:40:97:
9c:57:ab:b6:bc:cf:9c:28:9e:09:fa:2b:df:2f:4c:
ea:01:a4:e0:4e:4f:82:33:80:e7:35:7b:cc:fb:89:
69:09:35:d2:0d:e2:b4:0d:e6:a7:76:65:5e:bd:58:
0b:ab:ad:98:c5:26:cc:e2:00:2e:6d:4c:9b:b7:4e:
8b:d6:33:12:89:27:cd:fc:57:6d:85:9f:e8:da:6a:
79:25:4e:7f:71:98:fc:6a:1a:16:2a:1a:85:7a:2d:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:06:61:52:35:C1:63:B2:2B:02:B9:27:CC:71:C6:11:76:1E:97:CD
X509v3 Authority Key Identifier:
keyid:F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:79:00:c2:11:f2:38:4d:65:d0:35:29:d1:8e:ea:d0:23:d3:
24:fb:fb:96:5c:d0:f9:90:93:e0:0a:b3:5a:f2:e4:d0:e5:d2:
28:99:5e:1d:04:6e:c0:01:7c:22:85:c9:b8:04:69:1f:7b:b9:
11:4e:ed:f2:0b:d4:7f:bc:59:8f:15:03:96:df:3f:57:36:8f:
3c:d2:73:cf:1a:c2:3e:39:47:ec:29:7b:31:d7:0a:a8:ed:95:
9b:bf:40:07:e0:3f:a3:b5:8a:38:dd:ac:87:64:2b:b5:f4:67:
68:71:08:fe:f0:31:e1:84:c5:3b:27:04:16:b7:aa:3e:8f:7c:
98:01:2d:42:d7:40:e7:33:1f:fc:0d:80:3f:7a:9c:e8:c9:cc:
1e:e8:a6:18:37:19:15:26:1a:38:28:d2:90:1b:a1:69:fe:c9:
2e:17:b2:a1:5b:7e:d6:3b:06:30:2d:0d:fd:4c:e2:49:8d:df:
14:96:a3:03:91:7e:33:4b:b5:e2:1d:d2:9c:13:06:3a:cd:9c:
6f:18:36:45:c9:79:44:4e:10:6a:63:48:c7:52:ca:26:8f:89:
7d:f2:db:d5:66:8f:74:71:a8:58:c1:f2:41:6c:3d:be:50:2b:
ed:c0:7b:75:cf:6f:3c:9c:2c:04:f3:e9:76:64:3e:dc:ae:5d:
da:2a:81:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:53:27 2025 by rpki-client