Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
File: m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json)
Hash identifier: i07ttMUKvedDwEkra2ivjX9J3VSoqNJnpI5fia6tKO0=
Subject key identifier: 8C:F8:68:B0:29:91:BB:2A:6D:E3:C1:18:7B:DE:A0:46:A5:04:23:F2
Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Certificate serial: 0199FCC63C68DBED25921142804CF6AA80B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 14:01:14 +0000
Manifest this update: Sun 19 Oct 2025 14:01:14 +0000
Manifest next update: Mon 20 Oct 2025 14:01:14 +0000
Files and hashes: 1: U6nb6DpUzJV_xi4UhiA5O3aKdZE.roa (hash: at4iy2FPtAChzVS5IZxWuVWW9v3c10T2DEm7KMEtSwY=)
2: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: u4q9nOJIZ/rfMUt90i9SE/Pbv2SwNYyjJfPfDKIA8m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3c:68:db:ed:25:92:11:42:80:4c:f6:aa:80:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Validity
Not Before: Oct 19 14:01:14 2025 GMT
Not After : Oct 20 14:01:14 2025 GMT
Subject: CN=8cf868b02991bb2a6de3c1187bdea046a50423f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:e7:b5:d0:ff:02:a7:14:bf:03:c2:8d:a3:
55:46:54:0c:c0:e9:69:c5:f3:f1:7b:cb:79:1d:a9:
d8:2c:c9:06:08:ac:cc:2a:5d:67:fc:82:36:4c:f9:
e1:b6:fd:85:53:92:69:b4:bb:86:aa:7e:d0:45:fe:
79:3a:62:d3:52:cb:02:35:9d:53:57:18:79:09:f1:
62:e2:18:5d:4c:5c:60:6f:a1:66:8d:33:e3:a7:9d:
da:b5:bb:e4:d0:ac:f7:07:8b:28:7f:78:b0:f3:15:
4e:be:d9:c3:6d:0a:71:06:5e:9f:68:27:92:6d:10:
c6:0b:49:8d:77:48:fa:29:19:1d:d0:75:28:78:ec:
59:10:51:20:ca:45:ad:f0:53:f9:fa:ff:a2:19:aa:
25:d5:ce:5c:94:03:44:80:12:37:a8:22:d3:08:af:
3f:8c:6a:c4:8d:6d:e6:3f:e4:ec:d0:59:87:d6:16:
0e:e9:03:65:3f:5c:c1:ba:28:46:eb:7d:90:98:8f:
f2:3d:fc:f1:9e:b8:29:28:0e:8a:2d:9a:03:85:46:
8c:4e:9c:86:15:5b:9c:6c:c6:50:e8:03:18:e1:9a:
10:67:1d:0f:3e:0b:d1:e0:c0:85:cf:c6:1c:64:a1:
52:78:23:5c:e7:a7:b3:f5:d6:37:9f:48:ea:ee:89:
d6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F8:68:B0:29:91:BB:2A:6D:E3:C1:18:7B:DE:A0:46:A5:04:23:F2
X509v3 Authority Key Identifier:
keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4e:2e:fc:ec:8a:5d:e6:7a:07:1e:49:df:07:02:79:fa:0d:
a7:37:d6:57:03:23:6f:39:a1:5e:68:46:4d:09:fe:c1:ae:9a:
a6:b5:4a:d6:af:37:3d:84:ff:5e:0d:81:12:d5:32:6e:5b:bb:
a5:6a:ef:2d:dc:61:bc:e4:ea:75:ad:e8:5f:2f:88:af:ab:ef:
51:93:90:48:ad:27:2f:88:b4:51:31:d7:c9:9b:50:b0:80:d8:
44:4c:fa:ee:e3:72:7a:27:8f:97:cc:9d:59:20:c3:7a:a2:9b:
74:ce:f9:ff:ec:6f:5a:f9:70:ff:c7:d2:61:05:dc:23:b2:c5:
5c:ed:8a:b7:74:7f:6f:e7:1f:59:ca:00:61:7c:a5:74:30:31:
a0:da:b4:f8:5d:df:3d:e1:d5:79:7e:f5:35:56:10:65:82:7a:
d1:34:03:2e:5b:72:a0:a7:35:31:f5:42:90:3f:6e:f9:de:60:
19:48:30:17:c9:76:6c:74:10:bd:db:b6:7b:88:d9:50:97:0d:
da:10:65:3a:61:54:00:05:84:00:f8:3c:65:1a:66:9e:a6:87:
81:a0:01:ee:67:07:c8:98:bd:1c:5c:f1:af:dc:d7:ec:ab:4a:
c4:46:59:26:96:12:10:92:55:1e:20:c2:6c:ea:98:49:9f:5c:
c9:e5:3c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:29 2025 by rpki-client