Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: 4TN+c7qD6esM0FUBAxWMAJxUO9WgJn3dx3RIVtqaDyU=
Subject key identifier: AE:25:CE:AC:E6:63:4C:B7:52:BA:2B:45:2A:97:F1:B3:DB:88:DA:9E
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 0199FC21554BFAC0EECE0E734E3AC4F53C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: 6BtBuV+SFBREqbVbj8zoIaw6Hqs7KX/XFewjyvSe1Mk=)
2: WMejWLM-fXx9J5hQgJ4TNGxlL40.roa (hash: 9oO47gALmpiotO1VgFePsYnaYk2I9wrq424pEV3SiMU=)
3: n5VL-9G7-YZixQJP-BPKVSDqpR4.roa (hash: t+3M+svFb4/LG8WrDBM3x4yGiPVd0ez6gYqaJNLI3Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:55:4b:fa:c0:ee:ce:0e:73:4e:3a:c4:f5:3c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=ae25ceace6634cb752ba2b452a97f1b3db88da9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b0:f9:37:34:74:d6:64:6c:fd:85:2a:6d:51:
6c:bd:05:ea:29:04:25:76:7c:b3:91:6a:83:6c:52:
c5:0c:04:c1:40:59:f6:83:b0:fd:02:49:9e:d3:3b:
3d:48:78:6a:78:04:ea:32:76:6c:09:da:e3:c4:f2:
5f:4c:79:c9:33:26:76:d5:e6:28:42:58:25:37:07:
74:c0:91:60:e0:56:1f:64:dd:5c:25:e6:b5:bc:46:
a9:46:46:c7:f9:f7:67:98:96:49:73:6b:7f:fd:6c:
84:78:ce:12:ee:6f:bf:3a:06:82:03:74:68:40:96:
48:21:d3:8f:72:0a:18:87:51:6b:24:5d:ff:4e:d9:
c7:cb:0c:50:ff:db:5e:7c:c8:d9:c8:b4:e4:b1:8d:
84:36:db:7b:55:25:6d:eb:f5:c1:8d:78:ff:7f:34:
54:25:3c:23:02:8c:cb:e4:72:f3:0d:ae:33:d6:c6:
ac:a6:e5:24:9c:09:ce:da:d9:b0:9f:0a:b5:5a:4e:
36:b4:67:a9:94:64:19:c8:e0:05:fc:0a:06:81:44:
e6:20:8a:3b:71:b4:1c:e8:5e:46:df:9f:19:99:f0:
2c:76:8e:69:15:e4:f6:fa:cb:fe:bf:ae:c8:25:4a:
25:12:57:16:91:59:0a:3b:7c:52:b5:43:a3:7e:55:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:25:CE:AC:E6:63:4C:B7:52:BA:2B:45:2A:97:F1:B3:DB:88:DA:9E
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:35:ee:b4:89:1c:bc:1b:d6:76:7d:52:98:63:4b:c1:7b:b9:
52:b4:d6:4e:d6:c8:aa:56:07:68:f7:51:d9:a0:20:1d:74:a7:
ea:62:c7:bb:fe:29:d7:dc:52:ed:64:1d:57:b8:68:4e:a9:00:
2c:42:3f:4e:f3:b9:39:c7:cf:0d:3d:b2:7f:43:2c:d0:4b:49:
0a:4c:cc:6c:9f:85:01:ef:50:05:b2:59:71:06:be:af:17:2a:
6a:a2:95:0b:55:0c:8a:a4:34:c4:4a:7a:e2:39:9f:d5:50:dc:
36:01:14:29:e8:4b:cc:79:b9:a7:7a:92:22:5b:b1:71:61:e6:
0a:de:3f:28:a8:56:0e:eb:69:5c:dc:44:3b:f2:65:f0:3a:3f:
26:92:1e:2c:ba:55:14:46:cd:6b:03:97:c5:c3:b2:f9:13:5d:
d2:79:de:1b:18:1f:fc:d3:7a:4a:62:84:f8:6e:64:71:52:8e:
e7:32:ca:92:3c:61:8e:38:93:3e:fe:a7:e1:a5:c3:5c:72:80:
b7:d1:07:19:70:dc:4f:26:42:27:89:8a:22:dd:e8:0c:50:aa:
52:09:f1:13:6a:ac:76:d3:b4:49:42:b5:18:f3:5e:08:66:e7:
46:e0:c0:51:68:0c:23:33:e9:b0:00:53:83:a6:2e:97:e7:b9:
6a:ef:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:18 2025 by rpki-client