Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
File: 9Is_DGqHwEW9z_q9kA24iSvnAuE.mft (raw, json)
Hash identifier: rY3oiGy3X2QACH5MtzH2HtQsiiqWip18xkIANPsDZLI=
Subject key identifier: ED:11:1C:B9:49:AB:67:A5:42:A1:55:37:7B:5F:35:0F:FC:B1:99:97
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 0199FCC685FF28C093D07B751D1D55A38998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 14:01:32 +0000
Manifest this update: Sun 19 Oct 2025 14:01:32 +0000
Manifest next update: Mon 20 Oct 2025 14:01:32 +0000
Files and hashes: 1: 9Is_DGqHwEW9z_q9kA24iSvnAuE.crl (hash: HpqfQCjfMkIDimtQPbvs2tyanjvVeBy/fa5L9IUbAfQ=)
2: Hg9ZafaXQ8rLTSt-HMnDH0lT2yU.roa (hash: 0HTHXkqvlWJxm74CgwKZLUkDjsOUoGNMgHyD7nKaILk=)
3: lPxrJNzTmXryV2F51IkQV9qfvk8.roa (hash: XwWZCOkUNT19TkGVL4DD1MLeNhROccVqsb63RsLA8Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:85:ff:28:c0:93:d0:7b:75:1d:1d:55:a3:89:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Oct 19 14:01:32 2025 GMT
Not After : Oct 20 14:01:32 2025 GMT
Subject: CN=ed111cb949ab67a542a155377b5f350ffcb19997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:bd:f9:0c:d3:bf:b2:8c:45:ee:3c:7e:e0:
da:25:0a:25:6d:d7:71:59:28:ea:9f:0e:b2:8a:55:
13:8f:e8:d5:74:37:ee:8e:62:da:54:30:c0:50:29:
f0:4c:e3:00:fd:38:95:e2:14:0a:a7:16:63:aa:ce:
2e:7d:4e:93:5f:7e:30:d4:e1:37:92:c3:69:bf:b6:
66:06:09:8d:ad:e5:ee:b2:11:4b:50:e3:60:0a:ae:
de:a1:55:ea:4b:8e:7d:65:ba:58:30:0d:8a:5e:b8:
27:bf:38:9a:f3:67:ee:55:05:dc:77:39:38:70:51:
22:d9:ed:de:13:b2:73:e4:be:a0:3f:ed:60:30:9a:
8d:d8:da:54:16:98:6e:9b:f4:83:0f:9b:15:02:13:
a6:38:c4:69:86:bf:70:05:62:58:69:79:e2:a0:26:
de:82:5a:8f:24:9c:63:0c:ea:6b:37:f9:b1:ac:3d:
4d:c5:08:dd:a3:d3:f7:9c:10:9f:3c:c0:68:a9:53:
52:1b:0c:49:ba:ac:b8:a8:9c:f5:e8:3a:f5:5b:81:
c9:ea:e8:b6:b3:7d:52:ac:9c:ff:2b:6c:9c:07:64:
cd:45:d1:57:91:c1:48:21:4d:ab:29:d2:83:5e:ff:
2c:44:37:6f:6d:9b:7f:09:f7:7e:5d:0d:08:20:3c:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:11:1C:B9:49:AB:67:A5:42:A1:55:37:7B:5F:35:0F:FC:B1:99:97
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0d:be:52:9b:f0:75:54:77:50:43:ec:29:be:57:6b:5f:bf:
65:d9:6b:c4:3c:b7:28:49:06:4d:78:41:14:48:72:86:a6:7a:
cc:20:57:7e:81:71:b2:0b:4a:27:e3:77:f2:58:27:84:b4:a5:
cd:cc:e2:5b:44:30:11:ac:85:29:8f:6b:d1:4e:c6:19:2c:6f:
e4:13:a4:db:45:5c:c7:17:69:b4:4d:b0:3d:cf:10:7a:a0:e7:
59:c5:9a:61:75:f5:57:d2:33:19:53:48:cd:1c:b3:b1:36:08:
cf:c3:79:4c:a7:82:8c:03:22:66:ce:3b:cc:65:5b:a2:fc:3a:
4a:0e:93:6f:57:25:d7:d2:a3:83:09:16:f7:18:84:94:7c:84:
07:29:1e:f9:c8:50:b6:37:e3:fe:1d:c7:54:40:1a:87:4e:48:
3e:10:16:57:2f:d2:05:90:b7:df:6f:d9:1e:fd:4d:9b:2d:0d:
ec:a3:e0:15:6c:a3:bf:2c:ee:85:cd:3f:4f:2a:f5:6d:6c:02:
5e:85:0c:43:32:35:56:b6:a8:af:d2:3f:69:e0:c9:ba:2b:a9:
04:27:1c:b7:6c:0a:02:09:f5:33:51:43:d1:fb:cb:46:77:1f:
33:32:81:e5:e1:a9:55:b6:0e:3e:09:5c:b0:61:ed:16:5d:fc:
f3:e7:93:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:34 2025 by rpki-client