Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
File: 9rLInTH2F1Fqhgp4IrumgkinaaA.mft (raw, json)
Hash identifier: XqvK/3U2KnzyeEvh8PId7w/j7mLMyA15Of46IcPv1Pg=
Subject key identifier: 9A:7F:39:DD:F6:41:4B:3A:E1:0C:D7:78:56:13:65:A0:9B:40:B8:92
Authority key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
Certificate issuer: /CN=f6b2c89d31f617516a860a7822bba68248a769a0
Certificate serial: 0199FDDA4A12C62D5CBF25A624D72D59FC7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
Manifest number: 08D1
Signing time: Sun 19 Oct 2025 19:02:45 +0000
Manifest this update: Sun 19 Oct 2025 19:02:45 +0000
Manifest next update: Mon 20 Oct 2025 19:02:45 +0000
Files and hashes: 1: 0iYjHA4kyW6qTATWGW_TDJUOsEk.roa (hash: EaJ38giyluinl93rwFdYFKbOjiJmuj1tUHU09V9bmYM=)
2: 9rLInTH2F1Fqhgp4IrumgkinaaA.crl (hash: DCmWEJfhsd9NcLFHFLA8PXNM//3aAfrrWmYmdk49h9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:4a:12:c6:2d:5c:bf:25:a6:24:d7:2d:59:fc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b2c89d31f617516a860a7822bba68248a769a0
Validity
Not Before: Oct 19 19:02:45 2025 GMT
Not After : Oct 20 19:02:45 2025 GMT
Subject: CN=9a7f39ddf6414b3ae10cd778561365a09b40b892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:ff:f3:85:37:e3:e6:d2:dd:98:f9:e2:30:
86:b4:9d:91:02:9d:ac:d8:0a:7c:a8:83:78:5d:be:
39:e4:34:55:1c:6f:43:4f:e6:c9:d5:9c:8c:4e:92:
a6:93:8b:22:1a:98:d7:e1:07:e9:b5:6e:95:7e:e0:
ef:67:51:39:d1:c1:30:2f:25:d4:d1:b5:fa:67:51:
21:ae:7f:eb:2e:e4:fc:7f:45:9f:f3:43:25:57:af:
5c:43:42:08:a0:df:cd:f3:87:91:58:60:90:74:07:
ec:5a:de:a9:24:84:b9:5f:34:b8:df:2d:3a:9c:47:
12:2e:c2:75:c7:c4:5e:1d:7a:d7:62:38:38:67:2a:
a7:a9:87:2a:a1:a8:90:86:40:f5:e1:f6:06:97:b2:
db:57:ce:55:c0:eb:ed:b9:8a:16:2c:0b:88:5f:9a:
fa:fe:63:38:d4:a4:5e:6d:39:6a:d5:a9:a2:04:c3:
5b:9b:30:79:18:5d:5b:d5:9b:2e:9a:d1:6a:06:9e:
07:70:22:5e:61:f9:b4:c3:84:d4:35:6f:09:9d:8e:
05:73:02:0d:67:d2:cc:78:7b:10:dd:5f:4b:71:aa:
75:78:f5:4b:76:ea:9f:a1:72:f1:c0:44:e7:8d:69:
e4:ad:96:45:56:e0:9e:b2:cd:2d:75:56:1f:f1:42:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7F:39:DD:F6:41:4B:3A:E1:0C:D7:78:56:13:65:A0:9B:40:B8:92
X509v3 Authority Key Identifier:
keyid:F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:07:0a:19:9e:ad:4b:74:d6:e3:8f:1f:bf:73:a9:62:66:3f:
f2:f9:b8:ed:90:f6:40:82:cf:d8:b4:3a:2a:78:d3:9d:a0:7a:
16:52:25:74:b5:d0:6b:9e:4b:24:26:5f:66:6d:c0:4b:eb:f3:
27:ea:0d:b7:cc:dd:36:e3:b1:1d:46:6c:0d:a3:71:4b:c5:4b:
ee:13:48:98:92:c1:06:23:66:5d:e6:47:9f:6b:fb:28:52:7f:
6c:c7:eb:73:63:ae:f9:fc:22:4a:a0:e4:5c:1a:b2:4e:15:aa:
48:b5:70:8f:51:5a:1f:0b:56:14:6a:52:fa:8e:f4:3d:a8:fe:
00:61:84:54:f2:3e:b8:6e:e4:e5:70:e0:df:d5:b3:73:ea:f5:
4e:23:5a:a5:9d:8c:d0:5a:e3:d5:4b:49:67:ab:83:9a:24:93:
08:d8:9d:95:2d:64:c1:11:04:e1:95:1c:bf:94:d1:8c:38:c4:
30:a4:0b:37:14:cc:65:fa:45:e5:7e:7f:1e:a6:69:74:6c:e9:
20:ae:15:01:08:bc:c7:79:02:e2:ff:20:9d:86:6d:83:53:ab:
3d:d2:6d:3c:ff:ea:59:ea:50:8e:6b:ca:85:b8:b8:ec:47:00:
5b:2a:4c:c3:02:c6:7a:73:89:31:a6:88:cf:53:b3:d3:bf:64:
3c:f8:0a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:37:08 2025 by rpki-client