Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
File: 9kixVYLTS9UXCp3RO4EyW6uuXjo.mft (raw, json)
Hash identifier: iu0bXjqaMPOprepcYhaYuG5NwLfzw+e3Sg3mH3B29II=
Subject key identifier: 9A:76:2E:2F:D6:AC:28:C5:13:BE:22:F3:5C:0E:A3:55:DA:EA:40:17
Authority key identifier: F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
Certificate issuer: /CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Certificate serial: 0199FB45AEC8D1E71D389C8D3BEF53E09FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:11 +0000
Manifest this update: Sun 19 Oct 2025 07:01:11 +0000
Manifest next update: Mon 20 Oct 2025 07:01:11 +0000
Files and hashes: 1: 9kixVYLTS9UXCp3RO4EyW6uuXjo.crl (hash: ovLicpnacvruq/ooiJUpYME1NPln/wIyexJJYl4qxlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ae:c8:d1:e7:1d:38:9c:8d:3b:ef:53:e0:9f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f648b15582d34bd5170a9dd13b81325babae5e3a
Validity
Not Before: Oct 19 07:01:11 2025 GMT
Not After : Oct 20 07:01:11 2025 GMT
Subject: CN=9a762e2fd6ac28c513be22f35c0ea355daea4017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:ab:e6:b5:b5:2e:a1:21:cc:6e:32:90:ba:
70:0b:3d:ba:9f:b8:4b:9c:12:03:95:0e:87:31:ce:
c9:3f:7b:71:3e:be:eb:ea:89:5c:65:a5:a5:e4:60:
62:72:89:72:08:b5:4e:bc:cc:77:78:29:d2:2c:2b:
1e:44:0e:03:74:69:48:88:c9:93:e6:f3:70:90:44:
4e:83:b1:54:99:1f:67:fa:51:ca:ba:1e:21:1b:91:
8f:64:25:0e:2f:63:ea:fb:f4:88:2a:88:eb:0d:47:
0e:48:43:43:ba:e0:73:d8:79:27:13:87:3f:c5:03:
3e:fc:ed:ea:53:4b:0d:d1:1a:63:9f:91:91:19:95:
60:a4:03:7e:82:75:53:1c:2c:2b:27:38:6f:00:4b:
94:59:ff:ec:6f:8f:2a:bd:59:c4:25:49:fb:af:ad:
fc:bf:f0:ae:f6:f3:eb:68:18:b2:9b:85:05:df:a9:
8a:7c:36:19:ee:93:cb:4c:14:9e:15:4d:e1:f6:ae:
37:bf:da:66:02:4c:39:79:79:7d:45:2c:96:50:fb:
01:31:70:a2:29:47:66:a9:b8:82:f6:76:32:7a:27:
2c:b7:91:4b:8a:67:08:79:ec:ba:40:9f:7a:88:9a:
b4:2c:ee:2f:1e:bc:3b:c5:52:1f:ab:1b:62:bd:76:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:76:2E:2F:D6:AC:28:C5:13:BE:22:F3:5C:0E:A3:55:DA:EA:40:17
X509v3 Authority Key Identifier:
keyid:F6:48:B1:55:82:D3:4B:D5:17:0A:9D:D1:3B:81:32:5B:AB:AE:5E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kixVYLTS9UXCp3RO4EyW6uuXjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d8f672-539f-401d-9dc7-62799b90231b/1/9kixVYLTS9UXCp3RO4EyW6uuXjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ba:ab:b1:c5:c8:47:55:47:ee:9e:a9:ef:25:b0:e4:88:19:
39:03:12:ea:79:ea:ca:a9:f3:43:c9:62:4e:1c:1f:f6:52:81:
68:f7:20:2c:c9:f4:31:ab:02:b9:2d:e0:1f:34:9c:89:28:7c:
43:67:d6:56:7c:44:09:27:67:cc:3f:29:00:34:82:89:09:6d:
6b:64:c6:9f:b7:13:ca:86:cf:39:7c:18:43:a1:f5:37:80:9b:
b6:61:1a:3a:73:4b:42:54:4d:14:0c:86:f7:72:ce:c3:8c:50:
06:6a:c8:eb:ae:30:2b:5d:98:e9:3c:47:6c:ec:4d:44:c8:81:
69:ac:ee:f8:4a:22:5d:71:3d:12:d5:45:17:f9:49:2d:70:ca:
8c:bf:69:5b:87:f1:09:db:74:3b:3f:96:32:e8:e1:13:8f:fd:
50:a9:1b:d4:72:5d:f0:55:0b:a2:94:f6:04:33:98:71:9c:da:
8e:05:3c:6b:0a:c2:a0:69:a1:e6:6d:18:c2:35:30:3d:b1:1c:
60:7e:bf:71:ab:c9:f2:f4:c6:06:47:25:57:fd:a1:65:66:ac:
b2:8c:77:92:25:1b:0d:15:39:e9:1d:be:38:18:bb:6f:d2:0c:
86:97:9d:1a:0c:4b:d6:ad:4e:27:f0:b2:0c:ab:41:a2:96:bd:
6e:63:7c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:24 2025 by rpki-client