Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier: LS3fy6Ybwc3PgjniB9AQXYmwqGg7xxV9at7Z8aa/NNg=
Subject key identifier: 04:A9:90:00:1E:AB:DD:84:FD:31:3A:9C:3A:BA:B4:7C:A8:FA:AE:D8
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 0199FBB36B73613B29FEE83D4C55FCB5B8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 09:01:03 +0000
Manifest this update: Sun 19 Oct 2025 09:01:03 +0000
Manifest next update: Mon 20 Oct 2025 09:01:03 +0000
Files and hashes: 1: 4kRsEvvYS9vLgzT9RvhH3Igjm9k.roa (hash: I03jyb6kvpeR9AlCu8KypQT8GWzh4/aSh4au4iyy8+I=)
2: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=)
3: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=)
4: Fnl-4WGHpZ5LXFARfr2ATzp8vLk.roa (hash: ux6nyEJd1cHyE1av/8nhZIQD47mVZkeQGG+DrMwKlok=)
5: QX-JX3Qu6B9dGH2bgHRHXCFQSGM.roa (hash: Libk/j+UTy/9cJUk+hwXMnFM9cOquglWjTlufdsoMkE=)
6: bDPZ2IR6ImcRHKaCKb1DFYZSPeU.roa (hash: C/oWZRw0Dl261ZToD4X2GP0Mb4nYzslAlII1IzygPX8=)
7: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=)
8: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=)
9: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: UNr3fyLXTFme5jTMJUk0oOwYtCgwhb/faEPws0qEkGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6b:73:61:3b:29:fe:e8:3d:4c:55:fc:b5:b8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Oct 19 09:01:03 2025 GMT
Not After : Oct 20 09:01:03 2025 GMT
Subject: CN=04a990001eabdd84fd313a9c3abab47ca8faaed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:ef:46:81:76:10:1b:ae:e1:6c:2a:71:28:
a8:af:d2:5e:ab:35:a6:63:63:1b:8a:19:a5:03:f4:
32:39:73:60:d7:9d:2d:c5:53:59:6e:21:be:ea:ed:
78:b1:f1:47:69:bb:29:e8:fe:61:f0:eb:0f:0c:d1:
f4:e1:33:3b:59:fa:a0:f6:36:d8:71:e4:fc:66:7b:
99:02:74:98:09:b6:8e:5f:f2:09:91:37:ea:58:b1:
40:16:66:d8:06:00:91:7c:67:b4:ac:d3:01:40:74:
cb:2e:2a:aa:66:98:99:ab:a9:26:41:a1:b8:4f:7c:
5e:03:a7:7c:b9:a6:5f:85:56:89:76:a3:46:5c:e8:
ba:64:1e:90:70:04:c4:12:e2:2c:24:fa:1e:bd:ac:
aa:5b:36:70:9c:84:67:fd:79:4f:ef:e4:b2:49:7f:
7b:12:73:e1:1a:61:bd:a1:5d:a7:a5:94:7d:55:9e:
ad:44:b9:b2:7a:94:f6:45:b0:7c:f8:76:f9:f9:81:
05:f2:ea:5e:ab:de:50:a2:48:0c:3b:5a:0d:56:7d:
a4:62:30:4d:5e:54:50:42:82:68:75:f8:4f:ba:22:
82:c2:9f:be:cb:18:b2:4f:87:fd:e6:1f:e9:b7:7f:
b5:67:c1:7a:89:dd:0e:01:c0:d1:d6:f2:e2:b4:37:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A9:90:00:1E:AB:DD:84:FD:31:3A:9C:3A:BA:B4:7C:A8:FA:AE:D8
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:3e:19:91:fb:b7:97:96:c0:6f:8e:70:d6:79:85:28:d2:00:
29:84:25:25:96:69:f3:6d:8e:04:05:51:65:ba:be:cd:42:cb:
25:0e:df:23:d9:e7:0b:bc:32:9a:6c:73:72:a7:f2:60:fd:fb:
92:29:be:70:81:d9:d7:fd:ca:71:7b:11:9a:df:52:c8:da:87:
4e:0e:bf:af:09:55:a9:b4:e7:ca:3f:a8:73:83:49:23:b8:34:
4c:f3:45:cb:b5:14:1b:cd:f9:21:7e:e5:09:a7:f8:7c:89:fe:
81:fc:4b:ee:21:d3:2a:87:dd:f1:a9:f1:c8:b3:c8:43:4f:d3:
38:53:fc:7f:d9:89:3f:08:36:77:24:1f:86:66:cc:9f:00:3c:
7b:95:ae:93:fa:53:e2:ae:5a:c2:9b:03:cf:ab:63:65:d6:e2:
2b:15:e1:b5:95:7a:43:bd:83:1f:33:4c:e7:96:49:2c:8d:a3:
2c:de:47:21:7b:92:6f:45:82:37:24:94:c8:80:99:61:61:66:
0f:b9:9f:fa:38:e6:7a:cf:e8:c6:a0:f7:6f:d6:8e:32:fd:0d:
e0:d2:46:51:e2:15:50:ec:5e:a8:48:5d:b1:e0:01:2a:d3:c0:
fe:23:a0:6f:36:33:c9:1d:1d:5c:75:4d:40:65:b9:25:bf:ee:
55:e6:cc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:41 2025 by rpki-client