Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier: bDHDKHZoHWphS4GSva2DgAAFgIUdC3fXgMrt2rM5Zik=
Subject key identifier: 90:38:61:48:B2:38:36:28:E1:5B:B1:62:BC:F6:D1:29:66:3D:44:85
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 0199FAD7C7C9D69B19C5F2C014BA0251C8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 05:01:09 +0000
Manifest this update: Sun 19 Oct 2025 05:01:09 +0000
Manifest next update: Mon 20 Oct 2025 05:01:09 +0000
Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: 1WBH+CiAbrlVQjJcBmULm2LMAKuEaBA0pILdL3r6rXY=)
2: HFh_eeQijygIePsUO7KzM5bNq6k.roa (hash: f2J1YRSlfTR9F+Nhq15QjxHIC1sqOM+BN59BVcBlUfo=)
3: fCHzIX3PF5IX4vTpqhp12B4ANgE.roa (hash: 56hifj5pI9Tipd1DppPjnl4odiFdle6vhykV6J1DFck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c7:c9:d6:9b:19:c5:f2:c0:14:ba:02:51:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: Oct 19 05:01:09 2025 GMT
Not After : Oct 20 05:01:09 2025 GMT
Subject: CN=90386148b2383628e15bb162bcf6d129663d4485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:5e:da:bf:69:07:17:82:aa:ff:08:8d:8d:
3e:25:b7:a9:37:ed:93:25:ab:31:d2:2f:2d:d1:19:
b2:90:ec:f7:7f:4a:ec:ce:bd:ec:33:bd:b4:4f:67:
8f:be:b1:86:7f:b5:fb:fa:07:bb:06:75:1a:2c:a9:
9f:41:21:cc:e7:80:05:26:be:49:32:5c:30:30:15:
08:bb:dd:89:3e:24:56:c7:0b:cf:d3:af:88:ad:c8:
63:86:79:06:4d:d1:dd:41:d7:9f:34:85:96:fc:fa:
32:8f:25:00:a8:09:2a:03:a2:19:75:de:d7:e2:da:
05:6c:05:f6:49:23:4c:29:bb:01:b9:82:ca:a3:77:
cb:c0:cf:dc:c9:22:93:23:ff:f6:7e:41:11:65:c6:
44:fc:19:e2:8f:cd:58:6b:8b:38:6a:5e:b7:b0:c0:
86:bf:c4:a7:e2:78:17:93:d5:33:6f:d2:86:82:1e:
a5:43:50:10:eb:80:0c:89:f7:2e:ea:44:4e:da:a4:
90:d1:2e:0a:c1:aa:23:08:cd:91:11:c2:6a:90:ee:
69:9f:0c:eb:fb:6c:ed:00:d5:34:c6:99:ad:2d:1e:
40:e5:d7:9a:ea:f8:93:e7:4e:fb:fa:cd:a7:90:60:
be:4b:20:bc:58:cd:10:31:77:36:c9:e2:4c:21:d4:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:38:61:48:B2:38:36:28:E1:5B:B1:62:BC:F6:D1:29:66:3D:44:85
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:30:c8:a0:a0:46:1d:49:e6:6c:b4:bc:ed:67:e5:ea:6b:5d:
56:45:e7:0e:d3:14:08:ec:a0:72:80:cf:96:7d:5a:87:d0:26:
95:d1:df:ce:9f:9b:0e:c2:2a:61:18:51:17:8a:f7:b8:c3:2e:
d3:7f:55:ee:b1:0b:f9:8f:69:0c:b0:4b:3e:06:7e:ba:1a:1a:
4c:3a:f6:94:95:b9:0f:fa:bc:14:c3:4a:bf:04:b7:82:92:2b:
1c:0b:69:37:98:e3:cb:53:58:62:c3:c3:97:dd:4e:aa:65:1b:
fa:4e:d7:0d:9e:53:0c:d5:86:2c:64:22:64:d7:9f:0c:61:22:
ce:4b:6e:fc:48:52:6b:22:7f:92:41:16:9e:a4:24:89:54:2f:
46:83:a7:fd:f9:ae:27:2b:04:fc:34:a0:91:74:bd:28:e3:d2:
b1:bc:2d:a5:0d:6c:c7:72:f9:a5:96:95:c7:62:a9:70:57:3b:
ff:ab:1e:bb:7b:b7:19:9e:39:5d:f9:05:18:aa:14:14:bf:bf:
9c:a5:8d:a8:00:56:28:8f:d1:00:fd:6b:e9:ae:3f:b6:87:cf:
11:48:81:e3:37:4f:15:7b:20:b7:10:c9:37:9c:25:dc:05:62:
98:bb:93:76:ac:43:f2:b5:df:97:97:84:99:df:b2:39:d7:bb:
c2:ef:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:44 2025 by rpki-client