Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: vkV5RU/7Rn9JXRG1cG4E2GHUHHmX6Gi0pTPKPVZxn0M=
Subject key identifier: 77:C0:23:96:CF:1F:C7:72:47:DB:D8:15:EA:9D:0B:F6:82:77:D7:64
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 0199FCC66369469B930347D329BCCB860AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:23 +0000
Manifest this update: Sun 19 Oct 2025 14:01:23 +0000
Manifest next update: Mon 20 Oct 2025 14:01:23 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: w4imRpE54M1bozcawKZCKA+/dzfQVx/kZY0rOmOaZ5g=)
2: fGeYBTeIqUGlzWkeYCJZuXTV3NA.roa (hash: NVWcI0sfwe5T87MmDN6gYp0EndXzVclJkGdW6buL8Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:63:69:46:9b:93:03:47:d3:29:bc:cb:86:0a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Oct 19 14:01:23 2025 GMT
Not After : Oct 20 14:01:23 2025 GMT
Subject: CN=77c02396cf1fc77247dbd815ea9d0bf68277d764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:bf:03:ac:0a:1b:59:2a:8e:b9:9b:c3:c3:
51:06:99:05:21:49:93:41:ed:ed:4c:60:42:bb:12:
16:7c:0e:a5:c4:9e:f0:f8:fb:c7:0b:28:3f:ac:8e:
4d:02:85:46:58:38:01:1d:5a:3e:44:75:65:fd:79:
03:74:03:2d:0c:41:4b:c7:bb:5a:05:c6:42:1e:bf:
e6:56:95:8a:98:55:40:5a:b0:a8:2f:3d:e4:23:4a:
ee:0e:00:cd:47:14:d0:ad:73:a8:dd:2c:b9:eb:7f:
38:de:40:0d:35:95:6b:8c:cb:e6:04:22:7a:46:e8:
72:fa:3e:79:30:22:8d:b3:67:0c:f8:e6:67:99:7e:
73:71:c2:2a:a4:f9:ea:d3:9b:d0:da:a7:a4:34:5e:
b7:68:3f:20:f9:4b:9f:2c:5e:79:44:c1:9b:bc:e6:
34:e9:43:b0:9a:31:7a:1b:6e:e2:66:27:82:ea:33:
97:16:f7:8f:8d:a1:ea:0a:22:32:c6:d5:c4:7d:5a:
2b:18:86:7b:1e:60:b1:f8:70:5f:67:a5:d7:1a:47:
4a:75:d4:cf:1e:16:30:eb:f2:09:4b:15:3f:44:05:
4f:e6:3f:00:9d:b9:f8:21:cd:7f:6c:27:fe:76:66:
dd:80:94:c0:c7:86:ef:be:e3:f4:d8:0e:1f:97:ed:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C0:23:96:CF:1F:C7:72:47:DB:D8:15:EA:9D:0B:F6:82:77:D7:64
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:61:ba:ab:8c:e6:17:67:d1:59:00:91:6c:36:b9:f5:5a:1a:
0d:88:09:d2:0f:27:93:3f:17:26:dc:c6:57:9d:cf:00:41:7d:
3e:66:3c:df:b9:4e:50:0e:92:c1:c7:57:63:44:81:b7:a9:1c:
4a:32:7f:d4:fb:38:5d:c8:1c:22:83:92:c2:98:ee:fd:ae:57:
26:d3:b7:48:8e:93:03:8a:a3:6e:05:9d:38:db:17:a1:ee:28:
22:5e:91:8c:a3:9a:b0:18:c4:ac:6a:18:44:53:7e:ff:6c:05:
20:de:16:bd:73:e7:c4:83:c6:ec:8b:4e:f2:0d:d2:4b:1e:7d:
34:65:f2:0c:6c:28:af:ab:2a:5c:be:bc:11:b8:c9:e9:58:a2:
8f:77:c5:59:5f:37:43:56:e9:07:ed:6d:0a:4c:02:4a:98:af:
2b:14:0f:51:b5:aa:fe:35:4e:db:cd:8a:56:58:51:24:bf:f4:
b3:56:75:41:21:8b:9c:30:5e:6e:5f:32:30:6b:61:01:06:99:
82:e8:de:ed:68:a6:32:f0:f9:d5:b9:e1:e5:a8:51:98:eb:ce:
87:6d:fa:88:59:ce:be:90:83:6c:76:00:47:63:e9:67:9d:52:
b7:4f:2e:80:e9:68:79:0f:09:8d:3d:5a:4e:65:17:c7:62:26:
16:b3:c1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:54 2025 by rpki-client