Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
File: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft (raw, json)
Hash identifier: v8wKB45bj2tr/EBxY//gNALlQQ59lqNMt/fYH+mLEGQ=
Subject key identifier: E9:A1:39:A5:72:B8:AB:28:8C:28:DB:B2:28:E0:B0:D3:CA:57:C4:F1
Authority key identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
Certificate issuer: /CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Certificate serial: 0199FAD82C6D9660D5683EC9BC056E958736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:34 +0000
Manifest this update: Sun 19 Oct 2025 05:01:34 +0000
Manifest next update: Mon 20 Oct 2025 05:01:34 +0000
Files and hashes: 1: HLzZYAURdW7ECuJc4fBvkEOMPUU.roa (hash: HLSzvw8EJ6C84Lk+YNRBmj8BE3yMR8wKB5nstwpxKJ8=)
2: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl (hash: sUD3AXmXIvDdfkEiWp2sYTLdWOjJG4kYcL3ij1p3wOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:2c:6d:96:60:d5:68:3e:c9:bc:05:6e:95:87:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Validity
Not Before: Oct 19 05:01:34 2025 GMT
Not After : Oct 20 05:01:34 2025 GMT
Subject: CN=e9a139a572b8ab288c28dbb228e0b0d3ca57c4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:14:6c:44:b4:d4:b9:74:bb:a4:43:30:54:
e7:28:5a:2c:4f:7a:58:0b:fa:13:20:ba:3a:8b:a6:
3f:27:00:c8:91:7b:e9:33:6a:eb:17:f1:be:3a:e9:
57:3a:ba:70:78:39:28:57:58:4a:7b:93:16:9c:fe:
f3:ad:87:83:9c:a6:46:5b:f2:df:81:cb:ee:3e:31:
cf:2b:34:05:d7:ae:34:6e:2d:03:ac:eb:2a:b0:e9:
af:8f:ab:75:25:64:a6:4e:24:a4:86:9b:54:59:a4:
d9:ef:dd:a7:5d:a8:81:0f:62:b9:4b:fb:f7:0a:6c:
13:ec:ec:e8:3b:c4:67:33:16:fc:72:d7:3b:24:84:
ab:a4:b1:57:d1:18:f2:8a:c1:d8:0d:fd:ab:61:52:
da:29:4d:ba:4a:c1:df:41:fe:f5:0f:61:ac:90:6c:
6e:6a:c6:b6:88:17:16:ac:40:6d:5d:a6:a2:12:e7:
fc:14:e0:cc:b0:c5:d9:db:81:3e:35:f5:b9:a9:db:
03:f2:db:34:25:f7:43:ec:9a:f3:2c:5c:cd:48:00:
7b:89:bc:10:96:91:43:9e:e2:21:83:b0:81:6f:92:
67:8c:9b:d5:bc:24:ca:80:cc:6d:9c:c6:61:1a:d3:
09:71:5b:78:7a:fb:8f:e6:3d:2f:2e:22:15:b0:e9:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A1:39:A5:72:B8:AB:28:8C:28:DB:B2:28:E0:B0:D3:CA:57:C4:F1
X509v3 Authority Key Identifier:
keyid:23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f6:7a:66:c9:83:8c:f1:c4:72:6e:f3:18:89:09:61:d0:46:
94:ae:7d:a4:67:c0:15:55:ef:bc:00:6a:dd:36:44:9c:ae:99:
52:e6:6a:d9:93:b0:f5:53:01:4e:04:cf:d1:a7:ba:1a:aa:79:
b2:b8:6a:6f:1e:fa:6c:50:74:79:52:92:42:1d:ae:95:28:c2:
e2:fc:87:5f:d5:90:ea:dc:b8:a1:9c:0a:a1:e5:b0:31:1c:67:
a2:ad:d0:ed:01:76:bb:77:7d:14:1c:63:a4:a9:a4:43:cb:db:
ed:87:31:9b:fc:82:72:72:6f:7b:65:af:69:1a:8f:41:cc:f4:
b1:68:7b:38:95:43:ae:44:5f:14:7e:3d:db:e5:35:e6:db:2d:
13:b6:ed:02:72:8e:60:dd:d2:02:31:4c:78:6e:91:33:21:e8:
1c:04:57:28:76:7b:35:18:45:ee:ec:62:77:ee:4f:0b:7b:d1:
60:a4:8a:f0:22:3d:bf:ab:11:c5:f9:3f:ed:d7:32:89:0a:0f:
da:66:92:40:e5:f0:0f:86:9b:c8:1b:21:4a:9d:f2:aa:25:9d:
de:b1:da:b9:5c:30:5a:48:c3:31:2c:bb:7a:d0:4a:29:17:c3:
dd:af:74:5f:7b:a7:d4:6a:d7:b7:49:9c:26:20:d4:fa:94:72:
2f:15:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:27 2025 by rpki-client