Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
File: 9MCqez48v_iCYq3ZKzOeNQUc4aA.mft (raw, json)
Hash identifier: 7HmuVGBXHzwAj09hhJxb+pHwnkyDGtMPQH8jTA8xaog=
Subject key identifier: 0D:04:CC:71:ED:6F:4F:17:31:C7:9C:5F:E1:36:73:9D:F3:03:85:9E
Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Certificate serial: 0199FDD8D9DC119C3F2D7ACE6A914D21A251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
Manifest number: 16F1
Signing time: Sun 19 Oct 2025 19:01:11 +0000
Manifest this update: Sun 19 Oct 2025 19:01:11 +0000
Manifest next update: Mon 20 Oct 2025 19:01:11 +0000
Files and hashes: 1: 9MCqez48v_iCYq3ZKzOeNQUc4aA.crl (hash: 53hytMup8Ng8yQEBL2FiVuPnIrpPXDv6tHMfa73dvcY=)
2: UpoRaRKUM_cxz1mUcVdpf2dzj0g.roa (hash: gkhONxi+R49OF3RZKp/33aStKf4NqX/Hm1mDh0fRR2U=)
3: _deNM6L0-gRjzB9Oru0BeDNyfHo.roa (hash: LDo7rHt3sUV11VVSTI9bz2qFEysdcQXIsvCOfT9GJ88=)
4: zWuO-GBcqklRByFpP-KvyxqlmHA.roa (hash: mMGoMj1kmRHV71swlSc1+k5tBlzbfdxCQQL7QyHaoc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d9:dc:11:9c:3f:2d:7a:ce:6a:91:4d:21:a2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0
Validity
Not Before: Oct 19 19:01:11 2025 GMT
Not After : Oct 20 19:01:11 2025 GMT
Subject: CN=0d04cc71ed6f4f1731c79c5fe136739df303859e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:e4:6f:eb:6e:2b:c2:26:21:8d:eb:ce:08:
8b:2f:7a:27:ae:e4:13:aa:03:34:db:6c:20:30:b7:
d0:70:82:bc:ec:8c:90:5c:b1:dc:3d:f8:04:0f:fd:
e7:6c:35:a3:f1:58:ed:20:d3:0e:f7:3c:30:fd:b4:
38:8e:a2:c6:cb:c7:3f:13:fe:9e:8d:8e:32:d0:ff:
8f:13:d0:35:9e:cc:3f:0e:3a:34:36:61:90:be:ca:
de:14:b2:99:fa:f8:88:26:f9:60:18:f4:1d:71:9a:
f7:fe:5c:ef:c8:1b:3f:4f:da:f3:e2:73:5c:54:c3:
d9:27:dc:fc:b1:11:ed:ee:b0:52:fc:96:e6:56:4f:
ee:fd:e0:94:f5:c3:23:e4:9b:cd:00:d2:b3:50:a9:
79:39:22:e9:a3:07:72:61:8a:fc:d7:b6:bb:e6:31:
64:0d:d3:60:fe:12:c9:c5:97:3e:4d:3a:15:46:28:
10:87:97:f5:1a:75:e5:a4:78:32:9f:ea:be:1d:18:
ee:ba:64:41:33:c9:f5:61:fa:3f:70:bf:e2:a9:94:
94:3c:f6:25:e1:0f:33:11:a4:e2:bc:6f:37:03:b1:
59:c4:5b:2c:a1:2b:f1:a6:0f:3b:2b:79:6b:1f:e2:
87:03:c5:9d:60:0e:f0:f3:de:de:89:0a:9a:5f:ca:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:04:CC:71:ED:6F:4F:17:31:C7:9C:5F:E1:36:73:9D:F3:03:85:9E
X509v3 Authority Key Identifier:
keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:89:ee:98:ce:76:ef:ab:5a:62:16:b3:73:22:e8:ff:89:75:
5d:6d:f4:cd:3f:26:df:18:98:e3:6f:19:de:51:37:93:1a:8f:
00:c7:a5:4e:91:fe:36:a6:fc:51:e7:4e:fe:24:0b:a4:10:33:
d2:c2:63:89:19:f6:a3:c5:f4:86:97:e5:ab:c3:67:2d:b1:89:
a2:49:2e:8b:be:5a:53:ed:88:c4:e9:8c:26:92:b1:83:0e:b3:
37:57:9c:53:6c:2d:72:31:fd:9a:e7:0b:32:9f:01:b2:bf:c5:
42:f6:20:d3:7b:67:76:bf:35:c8:55:25:94:18:b7:d7:69:4b:
5a:1f:ca:fc:2f:ce:b4:4e:92:9e:03:28:c0:99:06:c8:94:5a:
46:b4:b7:73:71:ae:bb:35:55:03:20:6f:96:65:7a:46:77:89:
7c:f4:a9:fe:df:4b:14:f7:7e:94:37:73:f1:e9:32:69:b3:00:
97:ff:01:67:7c:ac:c7:c9:2d:c8:75:da:ba:e8:b0:38:e5:40:
b7:ca:34:96:9e:34:34:ee:00:b9:f7:95:2e:a8:45:e7:e5:27:
b7:a0:6d:27:e9:df:df:7e:9f:05:b3:1b:0b:2d:b2:f5:4d:12:
0a:75:c0:e3:98:db:56:8e:6a:8e:19:2e:54:ce:98:77:83:e8:
40:0c:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:25 2025 by rpki-client