Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: PUA/QFbzg2ew7+lHPQGaEjw38WrctrNL5VWMrt6cTpc=
Subject key identifier: E9:CE:1F:9C:60:36:18:7A:AE:C9:0B:DD:DF:F1:C6:9E:81:53:B1:88
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 0199FC8F4682E2445E422B6B3FC45A79E744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=)
2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: lnm/oWRtabBp+VfOIaheMK9I33Lojveoi8GkFZJmn+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:46:82:e2:44:5e:42:2b:6b:3f:c4:5a:79:e7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=e9ce1f9c6036187aaec90bdddff1c69e8153b188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:82:6d:75:bb:a7:39:b2:c2:5c:ef:d7:5a:
e4:6e:f4:ee:cf:25:29:69:64:b7:61:09:96:53:77:
34:cf:8a:04:08:b7:71:fc:60:a8:c7:9b:8b:fc:b7:
d0:33:5f:30:f4:55:21:44:0e:14:e3:ac:97:dd:dc:
03:1b:d8:42:00:ed:47:f6:ec:0f:9e:e8:a2:c3:58:
c5:50:ac:bc:ec:e5:02:7a:4c:2b:54:0f:c5:41:27:
88:a0:9a:fa:b6:ce:2f:22:e6:ff:38:7a:56:e5:58:
c8:5d:ce:bf:e4:21:b3:b7:e1:6e:b0:6a:65:37:10:
94:36:b8:ee:fc:79:9f:38:90:09:38:ec:af:8a:6c:
ad:07:76:8a:6a:f3:30:3d:b6:80:bc:fb:52:69:8f:
46:44:a2:3a:c0:2a:0e:a8:af:8d:31:88:54:05:39:
5d:69:f9:cf:a5:e9:eb:89:e3:9c:68:b9:78:25:7e:
80:e1:a9:fb:bc:60:5d:e1:4c:cd:60:e9:00:00:ec:
bd:fd:3d:4a:f2:fb:d6:9a:ed:86:e3:62:24:ee:1f:
99:36:6a:17:ca:7e:be:b0:ca:04:8f:f1:c6:3a:ac:
19:e9:b8:45:67:89:c3:8b:c9:4d:3f:3a:fe:cb:b0:
72:25:4b:30:77:e6:6d:42:cb:6d:e0:22:81:f8:85:
fe:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CE:1F:9C:60:36:18:7A:AE:C9:0B:DD:DF:F1:C6:9E:81:53:B1:88
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:50:b8:1b:51:0e:89:e3:9e:47:c4:20:55:23:dc:08:4f:87:
cc:d4:4d:d1:b3:c0:72:47:81:95:b7:ab:f3:1e:ed:1c:7e:e4:
78:67:1b:49:9c:41:25:c4:68:c9:91:ca:75:e1:f4:39:ba:34:
dd:3c:e1:76:b8:61:97:5a:f7:15:59:96:f9:1a:64:71:bd:6c:
77:dc:33:7d:f9:47:2a:d3:1d:9f:24:81:e7:98:d6:8f:90:52:
1b:d0:76:9f:60:a6:da:30:2f:ce:49:da:ac:cd:e9:b3:4a:39:
63:00:ef:bf:dc:6d:9e:39:41:47:17:3c:42:d5:5e:6c:fd:84:
0b:ef:77:b5:13:3a:a6:66:02:95:25:c1:d9:6e:5a:82:c0:b6:
ff:36:ff:1b:59:2d:c5:79:26:2d:b9:87:ee:b8:c9:de:f3:2e:
c4:4f:e0:79:5b:e6:ac:5f:bc:b0:a6:87:38:a0:5a:53:d1:df:
74:89:2c:ed:44:80:f1:61:f3:97:13:d6:01:ac:88:11:8e:4b:
82:ff:77:8c:f3:73:74:e7:c7:b5:54:8d:07:75:61:a3:30:a1:
4d:ea:02:07:5f:3d:a8:10:58:5d:54:3d:df:08:45:35:93:0c:
62:28:56:e8:df:42:a1:f4:15:87:38:74:8e:89:88:58:fe:84:
54:5d:9f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:52 2025 by rpki-client