Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: rHXKCoWkRdanUS85LmI4E4Qwsns2oR2c6XtNepqFVu4=
Subject key identifier: D9:DE:0D:8D:FE:B0:11:DB:E0:62:F4:96:17:0F:28:29:51:88:A0:82
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 0199FFC7D14CA9134A4359BB593E6A07BFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 04:01:49 +0000
Manifest this update: Mon 20 Oct 2025 04:01:49 +0000
Manifest next update: Tue 21 Oct 2025 04:01:49 +0000
Files and hashes: 1: 9KjqbMoowr4zIwC0vIDCLJx3OPk.roa (hash: P/sEcAl8BwOGFXxtB8+HWMsFUjWpgx7ANde/4kLha4c=)
2: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: v5ErE2gIjEnnt2FuRQMhrOCoxLx85F6PrIZJZzXHBvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:d1:4c:a9:13:4a:43:59:bb:59:3e:6a:07:bf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Oct 20 04:01:49 2025 GMT
Not After : Oct 21 04:01:49 2025 GMT
Subject: CN=d9de0d8dfeb011dbe062f496170f28295188a082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cb:e1:58:5b:f4:12:7a:14:39:0d:8b:34:06:
d4:60:26:06:e4:1e:fa:f1:33:db:ae:c2:9a:95:63:
53:aa:ed:4f:5f:ba:80:89:09:47:c3:c8:28:d3:0c:
f5:a6:f2:95:76:79:43:d8:80:17:ac:3e:c7:ee:e8:
a2:eb:20:d8:27:89:32:c0:0e:30:b9:69:77:d1:a6:
7e:c2:f5:1a:a8:6c:fe:66:af:14:c1:23:15:75:5d:
8c:07:78:44:bc:d6:5e:e1:97:b1:70:d3:52:dd:bc:
64:bb:69:7e:b9:a8:33:17:98:8b:3b:da:1a:9c:9d:
2e:52:87:f5:7a:bf:ee:89:d4:34:c0:b9:e4:00:0f:
98:d5:6f:03:1f:c9:06:c2:2e:9f:b5:59:26:83:68:
25:26:57:83:f3:62:ee:93:dd:88:94:32:3b:c8:e4:
0e:83:34:c5:a4:77:c1:e5:7c:24:ac:7a:58:b3:95:
2d:51:22:ac:ce:7e:4e:1c:f7:da:7a:d7:2f:df:d2:
2c:05:1f:9f:c1:13:8d:bb:9b:94:39:5f:a8:f9:b9:
1a:6f:15:86:b7:a0:4f:2d:f5:f5:f9:37:2a:39:d1:
40:75:6d:5e:6d:6b:fb:67:08:f2:4d:fd:5a:c5:6c:
30:d5:b4:b9:2e:52:82:ac:9d:96:dd:69:a9:0a:f9:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DE:0D:8D:FE:B0:11:DB:E0:62:F4:96:17:0F:28:29:51:88:A0:82
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1f:ab:80:db:6d:8d:95:00:6b:e6:b9:c2:18:37:5f:a9:3c:
75:08:ce:d0:18:21:50:75:2f:ec:25:88:35:49:9f:6f:0f:cb:
9a:97:4d:f6:a9:13:c1:6e:b4:cd:33:b2:d2:e2:71:4f:ed:5e:
d5:6e:9c:a8:dc:dd:b8:55:c4:83:67:f1:2d:51:07:60:11:d5:
29:85:9d:41:89:9f:91:34:06:2c:1c:99:f1:1e:a3:cf:5b:e3:
07:d7:8f:f1:4e:0e:5b:2f:3b:d7:83:14:f4:ac:8b:01:69:4b:
d7:4f:10:0f:e8:b0:e2:7f:41:ca:ac:cf:95:08:b5:25:0e:8f:
2e:98:30:55:15:d9:35:47:70:40:63:80:c1:e2:b5:6d:ea:25:
0d:04:1b:1d:b7:6f:07:0e:db:3e:f1:42:50:4e:52:ca:ba:68:
16:96:cb:a7:72:0c:ae:44:32:79:57:77:57:e4:1f:35:04:0d:
ab:db:ec:2a:83:17:82:4c:f9:77:f3:21:8e:18:77:b3:dc:9e:
13:21:8b:9e:a1:5c:a5:e3:d1:c8:00:c3:d7:ff:5f:46:6f:f8:
a7:c1:17:ba:82:06:c5:d3:b7:6e:78:7a:7b:32:39:c2:a1:f6:
c9:99:1c:4e:6b:e4:45:c3:a7:f5:21:66:fc:0d:c5:97:cd:27:
99:46:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:36:15 2025 by rpki-client