
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
File: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json)
Hash identifier: RKeIbFBcT184ykVySIJTDsLF8Mt+Flx4gN0w0wtc/NQ=
Subject key identifier: 34:7B:4E:08:A1:0E:E3:88:2F:6B:16:8A:00:77:23:19:E1:1F:51:7C
Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
Certificate issuer: /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Certificate serial: 0199FB0F23D6D0E9DAF07C71781773C4AA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
Manifest number: 0304
Signing time: Sun 19 Oct 2025 06:01:37 +0000
Manifest this update: Sun 19 Oct 2025 06:01:37 +0000
Manifest next update: Mon 20 Oct 2025 06:01:37 +0000
Files and hashes: 1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: sPldhhyp3DeUyU2SubNNCZ0jBm5qmIkqisbR7dpJEM8=)
2: wD9ir4CCy4E7zOefD7Z-y5RvpRY.roa (hash: 7sn9k3wlZ/27RuueZ6o2qKtcwJI5H5fdnvFFf1ud6xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:23:d6:d0:e9:da:f0:7c:71:78:17:73:c4:aa:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Validity
Not Before: Oct 19 06:01:37 2025 GMT
Not After : Oct 20 06:01:37 2025 GMT
Subject: CN=347b4e08a10ee3882f6b168a00772319e11f517c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:34:93:68:15:d5:ce:9a:3b:e9:e9:90:a3:
f4:28:65:1e:fe:e8:6d:6e:f2:b6:79:af:7f:cc:53:
53:87:bd:43:0a:5c:2f:24:c2:ed:3f:f2:ad:8b:21:
d5:b1:11:82:d8:f9:4e:79:46:ca:34:22:49:11:6c:
f1:6d:30:2d:9b:10:b6:ba:d7:d9:74:37:b3:58:f9:
7f:22:7c:e8:60:34:76:bf:a7:e9:4d:4b:3e:e0:10:
33:b4:d5:a4:46:90:8a:0e:e4:46:8e:f5:77:84:e6:
35:4c:08:b6:c7:6f:2b:e7:57:b8:4a:52:32:2e:7f:
8d:82:73:70:32:24:61:84:43:db:43:4c:97:41:1e:
e7:17:94:d6:fd:15:86:60:1b:6c:bd:f6:33:30:77:
f8:fc:0a:05:05:b7:1f:bd:aa:14:b8:1d:f8:87:d3:
79:4d:1c:4c:e3:a8:dc:b5:9e:7e:2f:0c:ab:08:d2:
21:05:81:1d:5d:8d:4d:5b:39:75:0b:28:88:65:a6:
9f:e8:dc:d8:25:f8:6e:f0:03:0f:f2:a6:c8:e9:23:
6d:64:f4:20:6d:dc:35:02:ff:78:79:b0:65:a6:01:
19:19:ac:87:c8:16:66:25:e2:27:2f:71:54:15:e0:
7b:a6:a4:66:ce:fa:30:1d:d0:b0:3d:71:ce:d3:4b:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7B:4E:08:A1:0E:E3:88:2F:6B:16:8A:00:77:23:19:E1:1F:51:7C
X509v3 Authority Key Identifier:
keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4d:12:12:ea:d4:22:0b:83:cf:c5:91:83:ad:47:9d:d3:ab:
28:53:85:8d:ae:1e:44:76:53:69:68:d8:2d:54:59:eb:b9:bb:
a6:bc:99:8b:f9:20:b2:43:60:30:c5:00:99:79:58:57:de:9c:
45:26:73:4d:45:ed:c3:3b:e7:b1:28:aa:36:7c:15:c2:ca:25:
2f:97:56:7c:5c:f0:be:5c:d1:aa:84:d9:e6:7e:aa:06:ef:97:
5e:14:61:7a:f8:11:7e:f4:fc:f3:2c:9b:ca:c9:58:d0:d7:39:
c3:52:f5:19:66:61:8d:7e:3a:c5:e8:36:91:79:9d:36:d2:5b:
a4:20:5d:d2:f5:65:6a:fc:59:01:b1:ad:7f:60:8f:d9:62:9c:
ed:46:eb:82:b3:19:d2:2b:c4:e3:6f:e0:d2:30:dd:6c:bf:88:
8e:f1:51:1f:50:cb:0a:63:bf:46:74:11:ba:59:f4:16:7a:f8:
7c:85:01:91:59:44:8c:85:30:68:08:34:18:e9:2d:75:f8:ad:
e0:d6:f6:dd:7e:4f:be:e3:92:c6:f0:1b:10:ab:93:4f:df:c5:
21:8c:ba:54:a5:9b:ae:9b:dc:be:55:05:0b:51:0a:0a:e9:3c:
88:8a:3c:54:bb:a8:d6:49:0d:2d:bb:89:e6:69:88:ce:ac:f2:
76:8f:09:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:23 2025 by rpki-client