Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: 7R9UiZhJbR+clyrQKkCHjrADbVwsZAO1Bjf3cZcWw/A=
Subject key identifier: 25:48:94:2B:3F:18:6F:04:DE:E4:9F:E4:97:82:11:4F:4A:A0:B5:AB
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 0199FE1048777BBAC6A37A9C44E214554D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 20:01:43 +0000
Manifest this update: Sun 19 Oct 2025 20:01:43 +0000
Manifest next update: Mon 20 Oct 2025 20:01:43 +0000
Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: j2c/ZWYwZaM4l2uyTxxHUBcpM4CmmJRxG11/8DWGNHY=)
3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:48:77:7b:ba:c6:a3:7a:9c:44:e2:14:55:4d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Oct 19 20:01:43 2025 GMT
Not After : Oct 20 20:01:43 2025 GMT
Subject: CN=2548942b3f186f04dee49fe49782114f4aa0b5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:ae:00:97:e5:58:f8:41:03:07:3e:88:ac:
4e:85:83:d1:ef:e9:9e:73:95:4d:13:60:d9:0b:75:
49:8f:2b:f8:15:d3:0e:22:fb:3f:e4:2f:03:fa:48:
db:01:83:c6:1b:84:21:ad:d1:de:b1:83:64:2b:00:
26:4f:f2:7f:d5:25:c9:e3:de:b7:fd:ee:ef:2a:3a:
f9:60:43:6e:15:79:f0:3b:74:13:65:f5:bc:87:4a:
38:ee:ef:d1:33:44:31:30:64:ff:90:5e:7a:5c:6a:
7e:aa:ed:59:ce:f3:0e:46:f5:8f:5c:a5:06:c7:15:
22:ef:95:77:6b:db:30:e6:86:3f:4b:62:e8:0f:1c:
c1:05:64:d3:bd:35:de:aa:4f:38:c8:f1:00:07:80:
d4:4a:a5:c9:ef:09:0b:74:09:4e:f3:65:4b:00:9e:
aa:5e:38:3f:80:45:7f:84:11:c3:cc:8c:10:23:1e:
33:9a:3e:9f:bc:15:91:56:19:45:f6:95:e0:5f:f7:
95:b3:39:ba:c4:20:49:11:68:28:03:68:78:cf:29:
4a:96:af:f6:1c:5f:f8:d5:2e:2c:7b:f0:94:97:f8:
3c:e2:d5:32:de:00:be:1c:c4:52:74:4c:6f:d6:ab:
eb:cb:ee:95:e2:cc:37:76:31:43:5a:c2:f9:f2:5e:
6e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:48:94:2B:3F:18:6F:04:DE:E4:9F:E4:97:82:11:4F:4A:A0:B5:AB
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:09:99:c5:e6:48:0f:d0:11:68:42:c4:41:c0:57:e0:7a:0c:
6c:e2:bd:fb:e9:09:d0:bb:b7:13:fb:57:bd:f2:8f:78:d2:07:
5f:13:2d:7c:c4:07:e1:cf:e0:fa:c6:4a:ff:37:2b:d3:1e:17:
a6:58:12:3a:e4:c3:d4:93:8e:05:2b:9d:4d:21:4f:d9:e1:3e:
86:1c:1b:63:06:e3:00:aa:00:a7:40:43:0e:83:cf:84:83:0f:
b8:ff:51:c2:d7:9d:f4:8c:8e:3f:1a:08:93:ea:9e:3b:18:b7:
9b:1d:04:44:06:aa:9a:00:12:1f:a3:06:51:0a:87:c6:20:c5:
1e:b6:9c:9f:a7:e0:d8:a3:bb:3f:39:7a:0e:ce:8c:60:cb:5a:
9f:64:e7:62:5b:63:21:16:7b:95:ed:3f:7b:11:4d:67:63:70:
8d:90:63:9b:ff:c0:7d:4e:2f:99:e4:f4:77:4f:c3:f8:91:97:
c0:04:66:d0:83:97:8c:59:f4:a4:4d:a5:cb:cf:12:08:dc:d5:
ec:ad:f1:2f:73:be:aa:ec:a3:15:5c:86:60:5b:c7:39:cd:b8:
74:16:84:4e:b9:a4:21:10:ce:49:17:ff:9a:94:14:6b:cc:c9:
0e:ad:3f:0e:2c:e0:4e:49:f8:98:b4:ed:f0:a1:bc:df:49:51:
a6:4d:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:13 2025 by rpki-client