Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: +Wizp2kGG5S0wVK1EHO7ENIHq3+T6R9HuQCez1mNhZs=
Subject key identifier: C6:16:ED:BC:C3:96:D8:DD:66:71:4A:D0:83:4A:A2:3B:53:BA:55:3F
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 0199FAD7EB830C778ACF26607A672829B1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:18 +0000
Manifest this update: Sun 19 Oct 2025 05:01:18 +0000
Manifest next update: Mon 20 Oct 2025 05:01:18 +0000
Files and hashes: 1: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: NITcbKlUXLPT2VKMoiLX2l3b0fPCbIx3US6It9hmzYU=)
2: B9CXmyFJNB3NRKLw7pcYD1T3USA.roa (hash: o1kjShDcQ5C/vUtm9CAhci51t+PYFYlIsERtctgtwmA=)
3: R22iI1mywVUVnDgDeyudtXDFOv8.roa (hash: EJnfxzuCupdtpPIwG2LRwVFupOoF9Zl3laDZ5Fu0Lzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:eb:83:0c:77:8a:cf:26:60:7a:67:28:29:b1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Oct 19 05:01:18 2025 GMT
Not After : Oct 20 05:01:18 2025 GMT
Subject: CN=c616edbcc396d8dd66714ad0834aa23b53ba553f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:76:fc:b9:98:95:2f:2d:7a:63:eb:71:7a:
57:bc:a1:e7:e5:37:0c:91:47:ba:e3:43:fe:2e:db:
ad:b9:45:c1:e9:e3:e3:93:21:9b:68:80:60:69:a6:
ae:9a:04:3d:54:b7:1d:9c:a8:8c:ca:f0:db:e4:93:
ce:c8:8f:c8:ea:cb:61:58:63:82:f1:82:16:d0:9e:
e0:e9:36:bd:5c:74:c4:05:21:53:e1:ff:ce:27:15:
e8:ae:a2:67:14:bb:e1:a2:3d:13:ae:60:68:5a:3b:
1b:92:9e:ad:27:57:3d:b0:6b:74:87:fe:f9:8a:e9:
5e:81:2c:7d:a2:61:2a:ec:25:09:83:20:ce:0d:75:
45:21:09:38:7d:c2:cd:50:2d:e8:6f:0f:75:c9:f8:
8a:23:35:4d:99:6e:21:35:d3:ce:a6:2d:93:2e:5c:
1b:e0:5d:45:c1:b8:2e:9b:5b:0a:d3:34:60:aa:9f:
9b:99:d7:e6:cb:8e:5e:3c:3f:11:5c:d0:12:c5:46:
ee:ef:39:33:da:6f:15:22:a7:47:e1:28:9a:92:45:
8e:a0:2a:f7:af:e4:81:dd:45:33:3e:32:ef:41:b8:
b5:93:6b:6f:2b:a8:38:79:f1:7b:2c:16:c1:c8:2b:
67:0b:60:68:aa:b1:e3:f9:d3:ff:be:6a:34:7d:9d:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:16:ED:BC:C3:96:D8:DD:66:71:4A:D0:83:4A:A2:3B:53:BA:55:3F
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:47:a2:18:7f:a1:24:41:a1:04:17:2d:16:20:2e:58:92:04:
7c:d8:2c:9a:5f:63:3b:3d:17:02:b7:b1:be:8c:9e:2a:76:4f:
9c:2c:ac:81:df:9e:ac:9a:c2:ab:47:da:33:94:d6:b3:69:2c:
39:30:ec:0f:b5:8c:f5:5e:b7:c1:55:a5:93:9a:b6:7d:de:b9:
4b:14:0c:e8:59:db:ad:94:e8:18:d9:33:8d:6d:47:2c:98:f8:
df:12:6c:35:7a:2b:81:46:9d:2a:e1:47:2c:12:f4:07:87:72:
39:06:10:6f:6c:69:3f:b4:21:9b:02:1c:87:1c:32:56:56:97:
5c:2d:e7:3a:3e:a4:41:d8:b8:4b:85:5e:09:6e:da:fb:fd:63:
f5:a2:eb:ba:78:e9:a6:ac:1a:db:1c:11:c5:0f:da:03:34:1e:
ba:4d:ff:dd:1e:59:e5:44:a7:f5:dc:8d:b2:9a:93:b5:99:00:
ad:b5:71:b0:0d:4a:54:6c:c4:d0:5d:59:85:eb:50:f7:88:60:
92:7f:52:23:d2:bb:11:d4:78:11:21:9f:8c:3d:24:ff:1d:c9:
8b:8d:11:af:32:7b:cf:36:e9:67:99:ee:3b:55:b7:12:71:11:
11:15:19:21:4d:52:58:6f:1b:83:d4:48:3c:11:71:8c:48:60:
81:43:cf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:08 2025 by rpki-client