Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: aU1/ZqQLxJu+sO5wBIU9O/jH1P3D8+fQoQVsm/XDlmw=
Subject key identifier: 3E:AC:68:10:33:FB:47:68:B9:84:A3:72:4E:9B:9D:92:D3:8A:2B:F0
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 0199FCC67A38122A5C0B9925550D5B0AF0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 14:01:29 +0000
Manifest this update: Sun 19 Oct 2025 14:01:29 +0000
Manifest next update: Mon 20 Oct 2025 14:01:29 +0000
Files and hashes: 1: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: BUah4CkQc5Olbxkh5799LCoko1v9KThES0z6z/BXmDE=)
2: HjzoahI6pyoFvP1ahRTakCdHZL4.roa (hash: gQHNv9As0iCn+ZAtcLVQ3zoAJ3Ne/2k5eR6SdkKMktQ=)
3: bH_KNyzPL_yx3OPEWTRFLsAi8nE.roa (hash: 72jCdlITtcwR18704/NTzfyeqmvwBsSw2iB9YQtGN+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7a:38:12:2a:5c:0b:99:25:55:0d:5b:0a:f0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Oct 19 14:01:29 2025 GMT
Not After : Oct 20 14:01:29 2025 GMT
Subject: CN=3eac681033fb4768b984a3724e9b9d92d38a2bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:26:b5:c5:e8:c7:57:1a:27:66:98:5a:dc:
53:e0:2b:7b:04:aa:31:68:c7:1e:3b:7e:84:ab:7a:
0a:a4:82:53:ec:a1:e4:e9:af:12:05:79:49:21:4d:
52:84:c3:d8:33:61:f2:0e:bb:50:7f:ac:fb:f8:9c:
8a:38:fb:3c:bb:ae:65:02:4b:d2:e4:71:64:d0:cb:
e1:57:95:eb:23:55:e7:c8:be:99:7c:a9:86:68:ce:
bd:00:49:72:5b:92:39:4e:a1:8b:a6:11:4b:bd:38:
98:b1:08:bc:d8:4b:c9:da:05:59:0d:9e:75:30:da:
11:8a:d6:b2:22:83:96:6d:40:fe:df:8a:1e:dc:7d:
f4:70:54:53:cf:30:a6:70:5f:30:39:3f:56:27:64:
bd:57:0b:b0:84:fc:b3:c4:e3:3a:92:f3:4f:73:09:
ee:de:56:c2:aa:38:b3:7d:03:36:49:23:29:f3:cb:
95:c1:13:c4:22:ab:2f:88:6b:59:78:52:66:3f:e8:
94:7e:3e:2b:1d:47:f6:d2:e1:ad:88:f7:44:43:51:
ef:af:13:1e:3e:8d:51:5d:e2:e6:64:e8:b0:fd:d2:
83:60:05:0f:a4:21:10:ac:3d:3b:69:b7:90:a6:1d:
4a:ab:f5:64:39:19:f3:f6:d9:7a:51:b8:59:42:cb:
08:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AC:68:10:33:FB:47:68:B9:84:A3:72:4E:9B:9D:92:D3:8A:2B:F0
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d9:f4:cc:bb:13:d1:64:d0:3d:bc:48:ff:eb:9a:c5:d9:e9:
be:d6:c9:4b:13:55:86:9c:12:6b:5f:10:f1:f4:43:18:f9:6e:
23:30:06:7d:2f:d6:38:18:d5:9a:a7:4f:53:5d:32:0c:a9:9f:
22:1a:70:bb:88:8a:c1:a0:29:23:71:82:6a:02:1d:d3:7f:95:
e4:65:75:1f:14:2a:db:f2:b1:2d:41:a2:3e:2d:fb:33:06:6d:
1c:b7:c8:af:59:04:db:d2:a6:d6:b3:b6:8f:a0:38:fa:41:e6:
38:a7:25:24:ca:b8:26:c4:e2:e4:95:c4:a4:05:fd:8b:11:16:
c5:e3:be:9e:b6:bb:6f:00:99:c9:7d:30:6e:7a:de:15:77:9a:
a5:58:3b:15:03:64:60:38:2e:4f:a3:4a:d4:88:3f:eb:f3:dd:
20:39:65:6f:4b:04:51:38:12:69:e2:5a:dc:7a:fb:ef:65:06:
8c:1e:ec:bd:45:8b:40:a3:42:bf:e3:24:a8:4d:9d:c7:88:a0:
e2:4b:7d:d1:10:7c:6f:dc:33:d7:d0:1c:34:19:13:fd:ed:3e:
40:7b:14:e5:23:ce:09:03:c5:8a:e7:a1:b1:28:8d:87:e7:e6:
17:2f:eb:2d:d9:59:79:0f:ac:e0:c9:3d:50:6b:78:a4:48:06:
35:b7:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:29 2025 by rpki-client