
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
File: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft (raw, json)
Hash identifier: B1OA+7BL1NDjSM43jltIDTG9QKFl/TTDJFeev+yBOYU=
Subject key identifier: 71:4B:97:CA:52:D2:1F:DB:52:3C:59:D4:E3:6D:75:73:83:6F:AF:86
Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
Certificate issuer: /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Certificate serial: 0199FEEB8B288B6AD4A3B177EE0A5D165630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 00:01:13 +0000
Manifest this update: Mon 20 Oct 2025 00:01:13 +0000
Manifest next update: Tue 21 Oct 2025 00:01:13 +0000
Files and hashes: 1: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl (hash: Kx0+ptiK2pIW12tV/mnOGDn/kAdAQH/9Nr1y/Sqerv4=)
2: cZzu9h7JCSpAe7ubMeZNqvU_k-M.roa (hash: 9lLGwap+wzAcsgGorlbM31Osi8VLCiKaPunG1+P2vww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:8b:28:8b:6a:d4:a3:b1:77:ee:0a:5d:16:56:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Validity
Not Before: Oct 20 00:01:13 2025 GMT
Not After : Oct 21 00:01:13 2025 GMT
Subject: CN=714b97ca52d21fdb523c59d4e36d7573836faf86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:dd:f9:1d:67:18:df:00:da:6a:f4:5d:ac:
3f:eb:ee:32:d2:be:31:49:33:5d:5a:36:8f:53:04:
11:39:c8:f6:cf:3f:d4:60:31:1f:eb:71:f1:e8:cb:
d8:52:03:df:85:0b:02:20:cb:ef:8c:73:70:35:ea:
d5:aa:df:46:42:69:59:b6:90:f2:a0:36:2b:8b:0f:
76:7f:57:ff:ca:ad:30:5f:d1:46:6c:cc:4a:d6:a0:
d4:d6:8c:d2:0e:59:d0:4f:c4:dc:28:70:1e:79:77:
0e:65:df:5d:9e:fc:a2:f8:2e:2b:c3:e7:21:76:46:
74:70:fa:55:d9:1f:37:48:a8:24:3a:70:00:6e:6c:
03:78:f9:bc:60:01:8c:f2:82:2c:a9:b8:86:c0:b1:
71:90:be:2c:1a:ee:fc:ff:89:34:ee:ee:e7:7f:d6:
f7:67:97:10:00:54:98:88:40:6c:87:8b:f0:68:1d:
b6:50:45:f8:36:77:9f:4e:2a:58:d7:7b:1f:73:bf:
93:f4:f6:74:a4:92:a5:c4:d4:b1:a8:70:9f:f5:de:
db:17:fc:a1:ae:74:cb:50:4e:64:a8:ae:61:80:fa:
8a:50:76:c8:45:f7:56:51:4b:ca:dd:43:b4:e9:e7:
b6:44:b0:bb:31:83:08:98:e3:5c:f7:d8:b7:48:32:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4B:97:CA:52:D2:1F:DB:52:3C:59:D4:E3:6D:75:73:83:6F:AF:86
X509v3 Authority Key Identifier:
keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:bd:5f:fe:49:c1:48:c8:cc:c4:bc:cb:10:00:98:a8:85:43:
44:88:19:9a:2a:80:82:e8:41:dc:7d:a1:19:7e:d9:86:b4:46:
d1:06:cd:a2:fb:de:2d:28:fc:24:fe:be:dd:71:7b:f0:a7:1e:
2e:4a:a7:ea:c3:90:69:d3:bf:8d:a0:24:66:c4:81:e8:9b:28:
b4:f5:7a:70:e4:c0:ca:8a:23:ff:b9:20:32:91:12:a2:d8:95:
24:b9:8b:04:b4:ea:68:44:1b:54:df:82:f6:6c:12:9e:3a:a7:
86:d5:8e:79:ce:0f:57:ed:30:fb:d0:77:e0:8c:10:a6:0f:e3:
d6:26:a0:ee:1b:6b:70:ff:1d:5c:0b:3f:15:a4:57:80:5d:4d:
6d:5d:c7:fa:8c:60:95:52:5c:87:22:29:42:d7:89:7d:7a:34:
41:8b:dc:1e:7e:ea:16:27:e0:a9:1e:84:a6:f6:5a:e3:52:0f:
cc:cb:da:0b:8a:ad:b3:f2:be:10:e3:c9:71:6b:96:6c:d9:f4:
a3:0e:b7:11:68:95:c2:a1:f3:69:23:cf:ce:09:eb:e5:ed:32:
15:86:83:72:7e:c4:5a:4a:d8:11:fa:61:2f:4b:69:5f:2b:31:
d4:6d:e1:3e:2b:36:de:22:09:72:3f:9e:22:52:ab:60:3a:ae:
4f:d1:b3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:05 2025 by rpki-client