Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: rNRgzE0Jg91iMn419TpMJGk+6wgh8Te4LV2aMOtoPqI=
Subject key identifier: D9:6C:93:78:32:EA:94:0D:C4:EF:48:4A:AA:B8:C0:AC:1F:64:F3:FD
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 0199FDDA3936792B1EE04EBE298A067B2357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 16F8
Signing time: Sun 19 Oct 2025 19:02:41 +0000
Manifest this update: Sun 19 Oct 2025 19:02:41 +0000
Manifest next update: Mon 20 Oct 2025 19:02:41 +0000
Files and hashes: 1: 8YTLS_1mFrh55A62a2mBS518iAg.roa (hash: b+QiLic550TpA6gu3XGSKkJ7N3n9C2SCnWL5+/s9Vr0=)
2: W7Jge6ghVHbAsdaSdITf8b_3aVQ.roa (hash: eGgmHuw9ea32mMeNaCzUMNBUiaRSSoMmW6d0dFZkj5k=)
3: cOy-CAvP6otn2DzWCwsJGJTydS0.roa (hash: 0R2NVVpBG6pXvGjfU3eH+cXTry9Vt5bvO9CjIpEY18Q=)
4: oz-gpVKEUvOG9fOS01I-1A1aI-Y.roa (hash: 0NG9CVuIlSmbnaNtm7cZXsbOMNvpcIJrtm880P+NpNc=)
5: q9IaYjcr5RObBrW7hey_hpAIvpg.roa (hash: 2MfulwyVlfgKmQicfk78T3sq4tPTxMleY1Rp41M0dbI=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: Vp2Qr3P9RzyU8DOFedE6AexuI3tDxNU1bvms7RVmpqM=)
7: vcy7WC8JEz9GH2wrI2xSRGFOQ8M.roa (hash: ppq+e7eDeIpGmxTNUn9DHommsEQqQfIeqXbSiT0TQpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:39:36:79:2b:1e:e0:4e:be:29:8a:06:7b:23:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Oct 19 19:02:41 2025 GMT
Not After : Oct 20 19:02:41 2025 GMT
Subject: CN=d96c937832ea940dc4ef484aaab8c0ac1f64f3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:6c:b3:0f:e9:75:d2:58:8a:0a:04:cb:17:
f9:6c:6f:f8:d6:d7:4e:e3:ea:fd:7f:ae:90:78:db:
60:7d:04:d4:25:93:f8:1c:d5:f1:bc:c3:f1:b7:74:
f6:6d:54:96:02:36:67:f8:03:61:98:14:78:cf:9e:
21:3e:44:f5:6f:c6:d6:be:93:21:01:1e:70:3f:ff:
6d:3f:aa:18:97:03:0c:a5:8e:85:0a:0c:05:0e:1c:
cf:63:ca:97:72:de:4a:75:e4:63:30:67:5e:e5:14:
85:c4:e0:b0:c0:ca:cf:68:8e:b0:2e:a8:9b:1f:7f:
9a:3c:68:6d:30:1f:e0:cd:0c:27:16:fd:05:50:7c:
5a:f5:12:c2:cd:17:5e:76:47:e9:e8:be:fa:9f:7d:
20:42:e2:6e:83:ef:23:1f:73:4d:e7:05:9a:94:4b:
6f:d8:8f:da:a0:d1:9c:1e:21:95:fd:a4:86:de:b7:
7c:de:f5:43:ff:54:41:e0:d1:b6:02:87:24:e1:81:
c9:1a:76:48:1d:96:e6:02:7e:25:77:b2:e7:80:4e:
17:99:35:11:c9:ee:58:d6:ca:9d:a1:7d:6e:a8:b0:
52:00:b8:40:3e:00:61:69:50:1c:c5:8a:26:d1:b9:
cd:d6:cc:cd:de:be:a3:97:06:d3:ec:a6:0b:17:02:
26:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6C:93:78:32:EA:94:0D:C4:EF:48:4A:AA:B8:C0:AC:1F:64:F3:FD
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:19:c9:a4:cd:e1:f4:f3:27:0c:9a:e2:5b:30:72:2b:a6:54:
54:2b:90:79:c6:81:37:3f:8c:e7:27:72:95:b7:ea:d1:ef:29:
6c:ac:27:d5:e1:47:9a:82:47:33:a2:0c:68:66:6a:dd:70:c1:
22:8f:e7:27:42:a7:c8:16:c2:cf:c8:3d:83:c1:a4:fa:bf:d3:
53:e0:7d:b5:ed:01:2c:62:08:0c:c1:a1:22:e6:36:24:a2:bf:
76:9e:0e:65:fe:b6:4f:75:fa:8b:f4:1d:63:cf:8d:9d:a3:2d:
39:c2:bf:ca:01:37:07:ce:3d:c7:40:7e:ba:5a:ae:c7:ef:1e:
21:f0:ef:42:81:b5:86:17:d6:8f:e0:14:8e:33:e9:3b:a7:cb:
0b:ea:a5:02:72:aa:f5:a2:eb:38:74:c7:51:b3:e2:21:35:bc:
a6:53:ac:df:4b:cc:aa:dd:23:e0:31:db:ab:31:03:ef:ec:de:
68:a0:c9:12:dd:ab:e6:d9:68:25:87:55:75:5c:9f:31:f2:85:
89:8e:43:e8:e4:8f:a0:7f:98:50:85:f9:f8:4c:5a:36:ed:7c:
20:f4:9d:c9:00:ba:c5:f6:24:ee:17:fe:46:b2:b2:87:b2:54:
55:5d:dd:1e:8f:3f:48:ff:5b:65:01:86:52:7f:8c:51:cc:b3:
e0:69:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:34 2025 by rpki-client