Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: qLx7GID5zWZ39+6P4d42UZErPTAv4PGHGupwTTxGyDQ=
Subject key identifier: 45:FA:3B:B1:DB:F8:6E:EA:18:83:7B:03:5A:96:05:AA:99:56:62:99
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 0199FC5911579FBEA308D6C8A9FD7987395E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 0699
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: 67zW8t21om1pTXvyuagS0QWX12s.roa (hash: arwG9XkQ/+2dVagELL/zq8/mCR4dYaym8bqyA1sBk4A=)
2: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: L9qHnoad69Fb7M3og26aUAYZIlsOEjfhhxYSBAUzdGk=)
3: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (hash: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:11:57:9f:be:a3:08:d6:c8:a9:fd:79:87:39:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=45fa3bb1dbf86eea18837b035a9605aa99566299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:64:bd:a1:6b:db:39:b5:f7:a9:ae:19:1e:80:
e9:ca:5b:29:2d:dc:b8:ac:f4:df:7d:8d:42:02:c9:
79:5b:98:76:93:0b:a4:7a:a2:c0:79:40:79:a5:f9:
c6:7b:c7:d7:07:50:bd:8a:33:5e:aa:87:46:5d:3a:
52:63:86:ad:58:c5:93:ae:24:02:32:ce:53:88:53:
3f:2d:31:f4:1c:36:89:cb:c7:08:3b:c0:5f:e4:23:
87:23:f7:51:43:56:d8:c2:a5:f1:9f:37:9a:60:66:
17:e5:1f:ec:21:4b:ec:3b:01:66:b0:4a:0b:8c:e2:
12:9c:db:24:8a:63:72:95:a7:c7:21:65:99:bd:59:
2e:ba:93:69:48:1f:ac:03:11:31:c5:d8:22:87:56:
04:3c:ad:7b:cc:a5:08:cc:98:87:71:1a:c5:9a:61:
74:fc:fd:31:6e:ca:c1:02:e4:c9:85:6e:19:d6:38:
49:28:35:59:d4:44:96:2a:c7:15:1b:e0:6d:19:1b:
ca:82:a6:a7:71:a5:ef:4c:54:95:63:04:11:ae:b7:
f7:36:d9:db:9d:51:33:16:5d:9c:f0:d8:fe:cf:7b:
d0:5f:74:42:d3:71:4e:be:1a:a1:3b:5f:dd:7a:7c:
c1:49:f6:9e:29:ef:e3:a8:8a:f3:d3:95:ae:b6:db:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FA:3B:B1:DB:F8:6E:EA:18:83:7B:03:5A:96:05:AA:99:56:62:99
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2e:53:ad:1d:53:28:43:bf:22:db:d5:c3:6b:e3:1c:c3:ae:
c4:26:77:ec:38:f0:58:3c:54:fc:0d:18:6f:63:3e:8c:c4:10:
10:1d:d4:20:35:4f:63:cb:87:49:83:6f:28:fd:5e:c0:f0:57:
95:89:9b:cb:75:2d:e0:b5:d0:b3:3e:f4:3d:e4:ee:c0:a5:0a:
b8:6b:5b:d3:52:01:51:db:f3:00:64:19:15:3b:f5:0c:77:d8:
56:9f:08:6b:49:c9:4e:fd:a8:40:e0:b4:99:d1:a5:89:93:b1:
ce:00:4b:73:c0:0d:f0:de:14:7b:84:55:c2:f0:36:b5:0f:23:
e6:d4:28:af:d3:f2:dd:76:12:96:0c:52:c5:57:47:d2:b2:ec:
83:14:04:52:11:ff:5a:16:a1:41:15:87:b2:09:e8:7f:4b:81:
14:e3:28:af:5d:c1:e3:a7:8d:05:14:b2:b4:c1:da:ca:ba:28:
0a:00:6f:41:96:db:0b:54:0b:d9:d8:fc:b4:bf:a5:92:bf:2a:
b0:a1:6e:c1:93:5c:e4:01:90:c1:5d:25:6a:1d:3c:72:fe:2f:
58:e4:3c:e2:ec:97:69:c6:cf:74:e8:87:c6:ef:eb:14:89:ef:
fe:f9:1b:f9:87:fe:bd:b3:5b:30:8d:c3:ad:c7:9a:04:0b:77:
b9:c0:84:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:08 2025 by rpki-client