Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
File: 9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json)
Hash identifier: yJuG+q0OmAykzt7Vcf5hoHZOZ9PYDX9yugEVuBTIacU=
Subject key identifier: 53:CD:57:6A:88:20:58:C1:FC:D1:2D:CF:05:DB:BF:1C:F3:60:E7:0A
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 0199FB0F1D76EB04D4E175BAA0EA076E44D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
Manifest number: 094E
Signing time: Sun 19 Oct 2025 06:01:35 +0000
Manifest this update: Sun 19 Oct 2025 06:01:35 +0000
Manifest next update: Mon 20 Oct 2025 06:01:35 +0000
Files and hashes: 1: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: k2eJcHO3pccqJCU1j575gaO1BNp0RU9OsY0DQQpi5nY=)
2: AmSXBHT3ckJxS__llRle1pOg_Gk.roa (hash: NGUzsrMFkYpqygz3V48C568ROl1XZloZCRkdB8fnGRs=)
3: RqMgMpdcD54HUHiiovgo2_7eo94.roa (hash: eRUbOt1afNalKvV81WeaR6eAgifd6J7LvG2r3czI9hc=)
4: gzBqFqX-GOiBCBUlEgTsEnHuXvM.roa (hash: d9Lvaxwm2cOVNLGx1WtIoyEgpf/MLPQzSYnTj875od0=)
5: wdTC4RawEs-5fFZUa4R_HIRxO2U.roa (hash: Rtc4DEopTsErPd8Vo2cqobz/fHQCAfYf819UnyzhAlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:1d:76:eb:04:d4:e1:75:ba:a0:ea:07:6e:44:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Oct 19 06:01:35 2025 GMT
Not After : Oct 20 06:01:35 2025 GMT
Subject: CN=53cd576a882058c1fcd12dcf05dbbf1cf360e70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:17:3d:b3:53:3b:15:6a:2a:8a:e1:1a:69:
ee:a5:c7:0c:05:c6:5e:8c:82:90:6b:d5:0e:ae:4f:
8f:f3:47:d2:60:42:c2:1c:9e:23:4f:19:00:90:e4:
b1:d2:bb:75:7e:40:47:6f:65:ee:e8:67:ff:8e:88:
a0:a9:ac:6c:e1:2f:9d:64:58:6e:b0:ae:92:2b:fb:
1b:04:27:41:31:bb:ea:92:77:5e:64:11:17:da:c9:
c8:aa:a5:44:32:5d:e9:3c:d9:68:71:8e:e7:d8:0e:
78:6c:01:ad:76:16:bd:c2:7b:79:a5:03:a1:aa:01:
a1:50:51:0b:5a:b1:11:2e:a3:a9:74:77:a9:66:7d:
8e:7a:5c:58:f1:f7:9b:72:fa:7a:58:d6:f6:80:9e:
d9:7a:73:5c:a6:da:8c:f1:5c:87:80:c1:68:16:5f:
22:46:70:3c:39:98:bf:39:d9:50:6f:09:8e:cf:42:
9f:6d:9d:63:e7:99:50:0d:a2:4d:e2:73:21:75:7e:
09:ff:e1:6c:fe:21:1f:d1:e2:89:de:88:ab:d7:99:
67:9d:40:7d:ef:24:c4:fd:bb:d4:30:9f:f7:72:68:
48:2a:ef:0d:c8:03:a9:20:6c:6c:d2:bf:75:42:c4:
fe:50:9f:62:2d:24:84:ce:c8:f2:3f:37:98:10:69:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CD:57:6A:88:20:58:C1:FC:D1:2D:CF:05:DB:BF:1C:F3:60:E7:0A
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c2:ae:16:f9:11:21:90:d6:3e:c0:4d:96:79:ef:87:e4:1e:
bc:8e:b0:ce:4d:ca:1c:94:d8:b9:31:87:a8:fb:8f:cd:f0:e7:
dc:e1:ae:ac:9a:f1:74:09:23:90:ab:d0:bf:66:aa:c0:90:68:
66:9b:99:8b:28:e3:28:1a:02:08:8b:96:31:7f:b4:8a:96:98:
02:6c:8b:4f:89:89:a0:ef:5a:c8:e1:ba:6d:8a:62:f9:77:48:
f3:1d:2b:b1:a9:0b:42:07:29:71:89:39:30:5c:73:e8:47:84:
1b:e8:50:03:21:22:48:00:e1:7c:1e:d8:a6:0b:72:39:c0:ce:
65:46:db:f4:2c:fd:08:0e:ca:cb:d3:10:a7:f9:0c:bb:d7:ea:
a6:41:0c:fc:80:7f:10:fa:46:39:ac:05:91:37:40:a8:21:cd:
00:99:68:1f:89:03:1f:05:e0:38:30:c2:b1:b7:82:b2:bb:cd:
51:05:06:b4:17:1f:82:16:6f:ac:f4:5b:cc:7d:f8:26:76:a7:
21:2b:cc:6c:86:ec:7f:1d:6d:39:b9:b8:35:5c:5b:87:40:c3:
89:bc:6a:b6:de:80:b7:41:e0:7d:53:a3:9e:c1:a7:f1:43:94:
bc:25:17:24:e2:61:af:f6:eb:8d:40:35:c8:ac:72:54:92:b6:
27:ac:ee:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:53 2025 by rpki-client