Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: hA7Uw5fzJnvVV6do1to+fcfVDUNXhKeW3Lo2DYEKP7g=
Subject key identifier: 84:C9:36:C9:35:F2:7A:7C:D2:E9:E2:27:8B:3D:DF:86:3E:65:D8:D0
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 0199FE469788B4B75B073A09D17EA1AE12EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0A4C
Signing time: Sun 19 Oct 2025 21:01:02 +0000
Manifest this update: Sun 19 Oct 2025 21:01:02 +0000
Manifest next update: Mon 20 Oct 2025 21:01:02 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: 9lbI6+xJVN8EhJeXzauNZdQkwKRcUAPr7CjHvf4XTl8=)
2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:97:88:b4:b7:5b:07:3a:09:d1:7e:a1:ae:12:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Oct 19 21:01:02 2025 GMT
Not After : Oct 20 21:01:02 2025 GMT
Subject: CN=84c936c935f27a7cd2e9e2278b3ddf863e65d8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:26:7e:d3:a8:69:aa:2f:4b:64:85:ee:35:
2f:3a:31:53:e0:36:ea:94:ac:3d:52:28:cf:5f:e0:
d9:cd:26:b1:a9:ab:64:06:ee:ef:28:99:ec:4f:03:
94:72:75:72:76:e9:29:8c:aa:b6:e3:da:31:a4:eb:
cb:b5:cb:89:06:82:b9:dd:88:52:dc:67:e4:b6:c4:
6f:f1:d6:b2:cb:70:51:0a:c4:bd:55:6c:13:17:12:
74:2e:50:f5:68:a2:4b:3f:3c:ee:49:ca:df:71:84:
4b:47:e3:e3:f7:a3:12:b0:63:9f:5e:5d:61:30:c7:
ad:77:4d:82:00:5e:30:1a:bd:1c:9a:2a:0a:8b:0e:
42:3d:ce:28:21:03:2f:c2:16:43:29:73:84:2f:45:
54:b6:4e:94:88:c4:59:01:a3:fa:5a:bc:b2:e2:55:
d8:8a:ca:ba:f0:5b:a9:79:bc:37:1e:5c:c2:e7:af:
97:8e:74:78:86:ac:db:c2:02:8e:ec:2c:4d:45:5f:
51:3c:8a:b5:ef:44:17:17:23:67:bc:63:83:5d:61:
28:71:91:d2:69:0a:36:eb:b8:75:1f:40:29:15:ec:
f0:fa:79:ab:63:82:45:3e:85:15:e5:25:78:46:8f:
81:cd:e8:51:a7:55:55:14:f4:eb:57:8b:20:0e:fd:
75:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C9:36:C9:35:F2:7A:7C:D2:E9:E2:27:8B:3D:DF:86:3E:65:D8:D0
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:86:47:54:5f:c6:e9:ec:41:90:80:10:45:11:ee:eb:26:d0:
ec:6c:3e:77:cf:e2:5f:88:39:cc:00:37:8f:de:6e:b5:eb:e4:
22:8b:27:ce:24:41:b4:a3:34:28:36:c4:e2:45:b8:d6:ba:5e:
13:7a:a0:73:69:18:56:38:fc:eb:2e:3e:2c:4e:86:8a:27:8c:
31:bc:96:99:5e:5f:3b:32:e2:e5:12:99:9c:9f:6c:98:5c:b7:
dd:21:c5:24:04:33:6e:bd:ac:66:62:cd:9a:e8:44:c1:d3:cf:
e7:40:e3:96:9b:72:f3:3f:c7:d0:7c:c6:7d:e5:48:44:5b:d7:
de:a6:b2:dc:10:d3:48:2f:fd:56:0d:b8:fa:9a:05:4f:41:cb:
a3:62:d5:0f:41:3e:c9:4e:35:21:cb:2b:ba:34:fc:36:5e:82:
3a:d7:9c:be:7a:21:d8:26:bd:49:5d:67:be:70:ec:a8:90:67:
b5:22:50:75:b8:6d:19:3d:10:0f:70:f8:8e:af:f3:76:44:07:
a4:c3:19:52:97:e1:1e:57:66:3c:88:20:ca:ad:29:ae:55:3f:
ef:52:ba:64:75:4d:83:09:54:77:1c:70:38:92:1b:1f:47:2a:
98:63:20:bd:91:98:39:89:c8:61:2e:5d:c9:0e:b4:a0:bf:72:
6b:bc:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:39 2025 by rpki-client