Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File: 9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier: 6mcXkdu4bZVHRnnOBmkS15kmr4iHArU0PY/Czp7D1Ms=
Subject key identifier: FD:D7:E5:13:B3:47:E1:AB:67:6A:7F:CF:EB:AE:27:23:37:32:39:EC
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer: /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial: 0199FBEBC37E51BF230F6D41A90ADF16CE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:36 +0000
Manifest this update: Sun 19 Oct 2025 10:02:36 +0000
Manifest next update: Mon 20 Oct 2025 10:02:36 +0000
Files and hashes: 1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: SZX6zSy4RuyWn3JLWwx3jwFUbXDV2RHJ+NY5cwMvQLk=)
2: A8TukvgDm2_mAvbO8Qh2ldXZd9Y.roa (hash: /JIMryvixQaluB5n97mezkD1EyPJinxMba0OGSdEKhE=)
3: vP5uRCtVJRUJyzhFaWsuhTzkTw8.roa (hash: y1OFWyB3EPXzoJcEAkwbjykFdh6ALTnHBPCo+2KwzSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c3:7e:51:bf:23:0f:6d:41:a9:0a:df:16:ce:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Validity
Not Before: Oct 19 10:02:36 2025 GMT
Not After : Oct 20 10:02:36 2025 GMT
Subject: CN=fdd7e513b347e1ab676a7fcfebae2723373239ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:37:e1:b6:b2:af:3d:b3:ac:5b:19:0e:65:
e4:df:74:f1:cf:3f:4d:69:03:05:15:33:64:a5:ee:
b4:3b:9d:55:ec:56:61:26:94:94:0d:c3:d8:9c:9b:
09:3c:24:aa:2b:87:86:15:54:eb:cd:5e:13:6e:e5:
74:29:77:53:ba:6a:48:c6:ad:55:4a:02:00:df:fd:
ee:3a:aa:d3:95:b1:56:bd:37:bb:ac:cf:ee:61:f1:
22:9e:85:6c:09:fa:bf:f3:c9:fc:13:cd:2b:0a:a5:
77:16:66:74:ad:02:da:69:fd:58:b4:2c:ab:0a:4b:
89:0b:93:4d:91:b4:62:6e:cd:97:3e:5f:c8:39:fa:
8f:45:95:2d:ff:d9:fa:0e:f4:95:b3:08:fd:47:59:
dc:aa:1e:63:53:2a:e6:e9:ac:52:db:ce:7f:45:b4:
b4:fa:54:89:8b:44:42:c7:73:aa:2f:a1:3e:8d:dd:
e6:ac:7e:c3:2a:52:2b:1e:92:27:6e:68:c6:82:47:
e8:e7:77:ed:16:7f:95:8f:43:28:0c:34:4f:0e:88:
97:ee:7e:91:28:86:5e:38:65:4c:4c:33:da:2d:1a:
81:25:c3:3e:8b:d5:22:6a:5d:27:c0:a6:e0:96:d4:
d7:fe:a5:04:06:96:a9:80:12:d8:77:f4:1d:c7:25:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D7:E5:13:B3:47:E1:AB:67:6A:7F:CF:EB:AE:27:23:37:32:39:EC
X509v3 Authority Key Identifier:
keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a1:fa:46:55:0d:5d:f0:08:a8:bf:58:4a:c7:9c:49:13:ba:
f6:ea:2c:dc:0f:ea:e4:36:e6:18:38:de:5d:e3:10:e5:61:0e:
fc:85:fd:e7:7e:90:b0:1e:55:d4:64:86:22:96:e6:27:05:d0:
e2:74:aa:0b:28:42:0a:6f:1f:aa:fc:09:ba:d8:58:1e:0e:5d:
75:fc:1b:c4:eb:d4:64:5e:6e:63:74:03:34:3f:57:57:fa:56:
0c:47:4b:8e:83:6f:77:be:c2:93:d1:5c:31:b1:3a:12:c7:db:
1c:d1:c4:57:d0:75:1a:ef:7a:85:e8:ad:69:62:75:ee:63:b5:
60:4b:16:fe:39:d3:ff:90:ce:66:82:5a:86:8f:ab:4e:45:e3:
bf:3d:21:b9:ba:eb:7b:48:30:83:34:b5:81:9e:e8:69:bc:d7:
2e:a2:ad:9b:e6:9b:77:9e:c1:de:cd:1c:b3:4c:0f:aa:e3:2c:
e2:24:39:0e:eb:a2:bb:20:7d:17:62:37:bb:e8:cb:93:24:6c:
35:4b:bf:d6:15:79:90:fe:3d:ee:67:e7:a3:a8:24:4c:af:75:
53:23:87:d5:c5:b7:f4:cb:a5:d4:45:b7:fb:3f:7f:2b:99:03:
4f:88:d1:22:cc:ac:a5:83:a8:c6:73:1b:0d:07:8e:9b:0e:59:
9e:e3:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:55 2025 by rpki-client