Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
File: d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft (raw, json)
Hash identifier: LG261iB2Rr3ZIz1JFiLyuUt68eRsdF4g6jM3S48HXAo=
Subject key identifier: F6:57:8B:64:E9:C6:13:42:88:68:51:31:CF:35:30:E9:DD:48:AD:48
Authority key identifier: 77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F
Certificate issuer: /CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
Certificate serial: 0199FD6B22093B263C74B3480C6A5BEEB12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 17:01:20 +0000
Manifest this update: Sun 19 Oct 2025 17:01:20 +0000
Manifest next update: Mon 20 Oct 2025 17:01:20 +0000
Files and hashes: 1: d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl (hash: UTyeJLpZQrEq0tLiZkLSyptepiYsNu8gj57AvBOA6mg=)
2: xYbOIUhhi8f6Ezx2QKpd4kQNixI.roa (hash: sEUW5djd1NzJ3pooD+mv2egmXyQ8A1sExKT4CHNq2Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:22:09:3b:26:3c:74:b3:48:0c:6a:5b:ee:b1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f
Validity
Not Before: Oct 19 17:01:20 2025 GMT
Not After : Oct 20 17:01:20 2025 GMT
Subject: CN=f6578b64e9c6134288685131cf3530e9dd48ad48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:6d:58:7f:a9:4e:7d:91:40:5e:cf:f6:e5:
83:1e:9d:77:f4:a5:d3:c7:b4:df:7f:16:8d:8a:a3:
30:41:c9:6c:21:50:20:16:51:ff:33:98:6e:65:ff:
f4:7d:58:56:ec:46:eb:46:9e:ea:b1:85:58:7c:0a:
6a:94:63:09:e1:cb:c8:05:79:49:96:8d:f8:76:6d:
96:f2:78:bd:ce:dc:89:5d:3d:1b:ab:b0:93:37:0f:
87:21:a6:1e:76:e9:fe:ac:eb:a8:c7:ae:f5:4f:a2:
c2:0b:69:71:f7:7d:52:83:5f:3f:66:02:91:61:f8:
27:3b:33:01:1e:a4:4e:ef:8b:9c:21:af:47:4e:08:
81:c3:b9:74:c5:ec:2e:0d:e9:36:67:e7:b9:91:74:
d5:68:2f:fc:70:22:e5:a8:78:33:3c:56:fa:25:39:
76:29:d1:76:d9:98:0c:d9:10:7d:8a:e3:ca:de:4b:
81:32:fc:a7:23:08:01:f5:37:ea:e9:a0:0b:b4:c5:
f9:05:92:24:ed:7b:ac:b1:26:10:15:54:e2:f3:09:
65:5d:ab:9f:3d:b2:08:ff:5c:45:89:71:f4:89:cb:
c4:f7:9e:98:ce:4c:d6:10:4b:6f:94:c2:32:4f:4d:
21:5c:46:05:6b:51:e2:eb:ac:9a:02:3f:0a:fc:d0:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:57:8B:64:E9:C6:13:42:88:68:51:31:CF:35:30:E9:DD:48:AD:48
X509v3 Authority Key Identifier:
keyid:77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:94:ad:bb:22:8a:ee:56:a8:d3:9f:e0:ea:7f:d0:4c:b9:e6:
50:24:22:95:1b:77:1d:ba:3d:f1:86:08:f5:c4:3e:a3:0b:29:
12:39:64:41:91:c0:30:f5:a5:d2:cc:3c:b1:33:17:d7:3c:59:
17:21:68:72:8e:46:48:c8:e9:66:e3:11:9c:97:9f:a8:dd:04:
f3:7e:1d:66:80:55:86:3a:56:45:bb:33:d4:c8:fa:ed:f1:de:
29:c2:46:6c:90:a5:4c:15:c9:b0:da:68:02:49:02:00:b8:e7:
35:df:74:1d:a7:5a:fd:66:b9:f1:9e:46:95:d0:c1:01:2e:3d:
d6:d1:ac:de:b6:f8:5b:4c:bd:3d:67:cb:df:78:e9:ed:94:37:
be:b0:51:92:d8:6e:e7:5d:be:41:cb:cb:fc:9d:56:10:7a:b9:
97:2b:3f:aa:60:8e:15:bb:0d:a9:6e:5b:4b:76:ef:eb:b7:05:
e8:50:4e:4b:83:5b:d0:11:74:03:2f:eb:9a:f3:af:76:17:6e:
59:9d:e6:9b:a7:7b:99:29:c4:3c:6d:63:2b:7d:e5:0b:2f:eb:
8a:75:39:c8:24:16:07:4f:8f:d4:f1:1b:c6:8d:57:88:86:a0:
f7:d5:d2:d8:77:d2:70:e5:d8:58:cc:b7:c2:4d:d2:d7:1e:13:
d8:6e:1a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:16 2025 by rpki-client