
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json)
Hash identifier: KYWbhumEEfk65UtraBYJjn1r11+ooblYeB0INYaW4vU=
Subject key identifier: 5D:75:AE:E4:E2:90:8E:BE:69:27:E6:E5:A5:2B:72:E0:BC:D8:82:F5
Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
Certificate issuer: /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Certificate serial: 0199FC58C0D240BDE0C5F66D9B5F286FC10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:38 +0000
Manifest this update: Sun 19 Oct 2025 12:01:38 +0000
Manifest next update: Mon 20 Oct 2025 12:01:38 +0000
Files and hashes: 1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: dso89RhpblpnbnowtbZZY4Ty3OlKlat+3zxMO/9zoAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c0:d2:40:bd:e0:c5:f6:6d:9b:5f:28:6f:c1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Validity
Not Before: Oct 19 12:01:38 2025 GMT
Not After : Oct 20 12:01:38 2025 GMT
Subject: CN=5d75aee4e2908ebe6927e6e5a52b72e0bcd882f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:c7:23:79:38:38:fe:2a:9d:06:d2:ea:71:
61:de:8c:c1:6a:f6:12:01:53:c1:5b:05:82:ac:4e:
a5:06:01:92:ce:03:e8:85:c9:37:be:ea:d9:dc:13:
72:63:b0:47:3d:09:70:51:ab:b8:78:e6:32:88:44:
09:0f:cc:d9:db:1e:20:ec:ae:9d:f5:d5:53:cf:70:
3e:f4:cf:2a:ce:07:79:f3:d3:04:9f:d9:94:a7:9e:
29:55:3c:19:20:ee:92:d1:b4:87:03:82:d5:8b:89:
81:05:19:a2:95:ab:ef:cb:6e:df:0e:80:f7:e6:31:
53:83:fc:fc:b9:7a:14:ae:7c:19:52:52:3c:13:aa:
47:da:30:f9:6d:c1:23:6e:1e:39:34:9a:66:9d:72:
1d:9a:19:a3:ab:0d:5b:3d:af:f5:c7:d7:74:16:af:
63:75:e5:e5:3b:4e:35:8b:5e:ac:3c:5b:89:3a:b0:
48:11:0d:aa:4b:82:2c:b8:75:76:16:79:97:bd:fe:
e6:e9:9e:72:ff:4b:89:44:b2:2d:72:28:cd:8a:56:
55:e4:29:d8:90:24:48:2d:e2:75:64:a1:07:4e:33:
fb:10:35:3f:ab:8f:c2:66:b8:24:42:ae:d0:5b:f4:
4d:b6:9c:ba:0c:98:f9:40:96:80:eb:33:b0:2a:02:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:75:AE:E4:E2:90:8E:BE:69:27:E6:E5:A5:2B:72:E0:BC:D8:82:F5
X509v3 Authority Key Identifier:
keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:66:25:66:46:7c:bf:ea:8f:d2:3f:61:d0:56:2f:3b:da:ef:
ce:df:31:b1:8b:36:89:38:d5:c6:ac:d4:65:7d:16:1f:dc:3b:
12:d2:40:f4:da:30:aa:ff:37:10:70:22:58:e6:b2:a5:24:a3:
bf:05:c7:2d:08:4e:b1:15:e8:a2:f4:23:6f:b7:f0:3c:1c:3c:
5c:4f:84:46:84:11:44:f3:e9:ef:73:47:cf:32:a7:63:f4:d9:
62:08:67:a0:e8:3c:b5:1e:78:02:a3:20:6e:5f:60:d2:62:b0:
47:fb:04:7a:ef:73:5d:75:0e:24:7e:16:ae:e7:56:63:46:19:
3b:b1:c0:1f:fe:26:4e:62:8b:18:de:c0:8d:1f:be:02:5d:15:
98:4d:45:4e:be:bd:49:4f:94:c9:62:1b:80:13:10:0e:d8:5a:
86:17:55:8b:76:a4:62:14:6f:20:b4:fa:be:5e:58:f9:5a:b3:
d9:57:81:29:b0:93:83:b4:93:3c:66:0a:d1:6a:99:f2:a9:e1:
1e:39:6b:59:df:31:5f:92:82:d2:bf:66:f2:c4:e6:8a:68:23:
05:6f:f9:7c:f5:32:2f:84:98:c7:08:2a:66:67:ff:47:34:bf:
0f:1d:36:f3:74:f7:78:0f:da:f8:75:6e:51:e0:5c:8b:13:0f:
8f:6a:68:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:06 2025 by rpki-client