Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: IQ0xc7gBszFyGDwo5wgX3lFxTHthO1Irprtqxe3nQx8=
Subject key identifier: C6:A4:85:69:D9:DA:47:68:89:92:20:34:CF:AF:7C:A3:D5:21:58:63
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 0199FEEC0061C45E0BD96C42735B38BEF102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 085F
Signing time: Mon 20 Oct 2025 00:01:43 +0000
Manifest this update: Mon 20 Oct 2025 00:01:43 +0000
Manifest next update: Tue 21 Oct 2025 00:01:43 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: 86J20unpRaASa5r3wBmYZLjq4bVzH8r1Zu2cmxRx16k=)
2: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (hash: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=)
3: jPbAHMtRmOOxtXFxyDN1-qXJjZI.roa (hash: rubF/nUj1Sxv+4U25Wjdi1dZZsv1ydBfmLAqRQsECUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:00:61:c4:5e:0b:d9:6c:42:73:5b:38:be:f1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Oct 20 00:01:43 2025 GMT
Not After : Oct 21 00:01:43 2025 GMT
Subject: CN=c6a48569d9da476889922034cfaf7ca3d5215863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fb:7e:93:f4:c3:71:20:8a:62:1f:77:d6:d9:
36:cc:78:a5:81:17:46:4c:0d:13:97:b5:57:90:f9:
c6:3f:87:34:e9:70:9c:7e:8c:ac:ef:2d:0c:d1:db:
58:a4:79:29:63:ba:5f:87:a1:11:85:84:59:b3:33:
3a:06:1c:56:85:72:0f:ed:e9:e8:b1:fb:df:6d:8a:
54:56:d8:91:a5:24:8c:f1:bb:c7:b4:cf:ca:db:f8:
63:de:06:f5:6f:b0:93:fc:d0:4a:60:1c:1e:d1:13:
42:02:c8:95:8b:05:34:c1:9c:b9:5c:12:97:fc:97:
26:11:d3:c3:94:bd:57:22:1b:68:e7:b3:c7:13:0a:
4e:5d:2a:f0:b1:b1:bb:b4:57:41:ee:f9:eb:6c:c4:
33:2a:e5:29:08:7f:ab:04:35:e6:e3:0e:ef:a4:2c:
8f:37:c7:12:29:24:23:9f:1c:6e:f4:ab:46:a9:62:
6f:d1:2d:e7:35:b5:a2:21:98:af:02:60:1c:15:a0:
66:25:7b:d3:49:5d:44:6a:a1:51:13:b8:dd:aa:39:
2c:f2:ac:1b:48:9b:63:06:b6:7b:32:19:45:de:f7:
a7:58:67:ba:e4:95:30:2b:a2:fc:6f:16:cc:7a:0b:
70:53:13:2c:1b:62:df:31:ab:e9:4f:fe:79:c8:26:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A4:85:69:D9:DA:47:68:89:92:20:34:CF:AF:7C:A3:D5:21:58:63
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:49:1f:fe:44:00:1b:c0:ca:7c:2d:f8:aa:f6:82:ac:81:67:
b4:00:e2:01:43:87:7e:da:4e:ca:30:d1:f6:8b:38:a3:b6:04:
5d:2f:9e:8e:f0:d8:6e:18:4b:06:2b:e4:58:62:82:49:4c:5a:
28:d6:8a:08:a4:21:e8:fb:ba:68:ec:55:ae:f1:ab:c1:9d:2b:
58:df:39:e0:ee:ce:d4:ac:f8:cf:63:1c:15:f1:80:1e:41:98:
2b:4c:31:4a:44:e5:d1:12:55:43:6e:db:f5:4c:41:6a:75:28:
a3:60:0a:6f:07:51:ea:74:d3:fa:60:c2:27:0d:7e:30:b9:3b:
87:20:ed:91:8d:a1:23:f3:6f:12:5b:ff:10:f6:82:2b:31:6a:
13:e0:e0:06:42:68:5e:97:d1:e2:db:44:57:da:6a:78:98:59:
a9:dd:98:f5:8d:6b:9e:bb:0c:7c:87:e2:10:3e:4e:fd:a0:d4:
74:a6:7d:e8:65:c4:0c:a3:26:e7:09:1f:ed:9a:d7:3a:5c:b0:
65:01:32:9c:8a:b7:33:98:49:dc:33:de:4a:70:05:03:93:af:
43:c0:a7:6c:d0:42:97:65:6f:65:78:ce:40:37:a0:cb:29:f8:
8d:51:13:f1:ba:1e:71:85:4f:d6:36:a2:ad:fa:8f:0b:e7:b6:
50:f6:d2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:57 2025 by rpki-client