Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
File: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft (raw, json)
Hash identifier: is8PLbgdEWTLno/5Rz/GvR7vLnESTni6KCsMQ3BxTcI=
Subject key identifier: 80:9C:95:B6:BD:B7:E7:8F:9A:CE:E4:44:6A:EC:01:80:73:3D:1E:7A
Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
Certificate issuer: /CN=f50e225bfb45218b997719804ea287f1751cf20e
Certificate serial: 0199FE7E27C39F284CC8B3AE8FC4F31E82F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 22:01:44 +0000
Manifest this update: Sun 19 Oct 2025 22:01:44 +0000
Manifest next update: Mon 20 Oct 2025 22:01:44 +0000
Files and hashes: 1: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl (hash: BMCX35Zd6oplDWjTq4TvJxxkBdI/mwVgU5eyooC1thk=)
2: tCReBQEfist-xvNAig7wcNT_kFY.roa (hash: eAnNRfWeMAKf3K2opw1l/ihLmhFWT1Klsp1nr6sdAiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:27:c3:9f:28:4c:c8:b3:ae:8f:c4:f3:1e:82:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e
Validity
Not Before: Oct 19 22:01:44 2025 GMT
Not After : Oct 20 22:01:44 2025 GMT
Subject: CN=809c95b6bdb7e78f9acee4446aec0180733d1e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:27:12:4a:21:c2:43:8f:ca:16:6d:ad:e4:
90:ba:fa:a6:75:3b:40:cc:4b:e8:32:1b:0a:78:63:
02:d3:66:2f:a4:14:3c:8f:02:1b:08:ab:e1:0f:06:
e7:8e:33:41:1d:1a:bc:de:69:3c:2e:ca:3b:74:36:
85:1d:4a:03:3e:3b:f7:50:67:37:93:07:cf:81:86:
a9:94:17:85:bd:2c:6b:2a:79:2b:7f:a3:ad:9d:c7:
30:6c:ce:6c:3c:eb:cb:1c:54:dc:8a:6a:87:e9:67:
8b:5f:dc:5d:30:2d:b0:12:90:ca:13:95:cf:c4:9c:
bb:99:07:52:fd:4b:e6:18:97:2b:7c:e6:d4:ed:5c:
b2:bd:5f:18:1e:b8:87:82:01:a9:7d:88:ed:93:26:
2d:0b:f0:d5:8d:93:2a:90:1e:32:3a:af:16:14:17:
c0:df:7e:05:b1:97:7b:bd:b7:ff:9f:6b:0f:23:85:
36:21:f2:cc:9c:56:41:12:0c:e4:e1:06:bd:01:36:
1c:69:ef:61:1a:ed:fb:a3:5b:97:a9:e1:4e:55:6d:
65:f8:90:40:dc:81:eb:1f:6e:da:a2:e5:9f:ff:66:
ad:95:9b:6d:51:6d:40:39:e6:9b:cd:43:f0:2a:dc:
ad:00:55:b4:fe:15:bb:c4:82:a5:3c:8d:30:ec:76:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9C:95:B6:BD:B7:E7:8F:9A:CE:E4:44:6A:EC:01:80:73:3D:1E:7A
X509v3 Authority Key Identifier:
keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:72:6b:c3:9d:f5:70:77:69:1c:6f:56:d7:90:c2:e5:25:cc:
70:ea:49:f0:fc:20:4a:17:b3:1a:e5:cd:08:46:e4:ba:04:4f:
b2:d3:1c:15:c0:5c:36:b8:08:0e:e0:ef:6d:ee:80:d4:26:8c:
97:53:67:8d:a8:41:93:81:32:69:d3:c8:f4:12:72:7b:f4:bb:
08:25:0b:0d:d1:5b:1a:af:a0:c4:dc:f3:ae:67:2b:e5:9e:22:
61:76:71:c2:cc:80:ae:9d:9e:a1:84:ef:09:e1:c3:30:de:98:
77:f1:61:81:0f:40:73:eb:3a:cd:1e:c5:81:ae:3e:5f:f3:a1:
e5:bc:fd:0e:47:26:c9:fa:17:0a:93:d1:46:9b:f6:95:c2:c2:
d1:86:fb:b3:ca:5d:2c:a1:6c:8a:b3:ec:81:47:c8:ec:ff:32:
c0:1f:bc:7a:f3:74:17:b0:56:56:80:b5:39:75:d4:81:83:ad:
be:7b:60:8a:8b:9e:1c:a3:42:f7:4f:9a:84:d8:2e:c1:ec:ff:
c2:e2:59:da:cc:d0:c5:46:e7:33:d0:b6:28:cf:dc:7f:97:45:
b3:13:a6:d8:d9:f5:a4:96:63:99:38:64:91:70:bd:51:9b:a7:
97:73:0b:12:29:1f:0f:35:e3:bd:e1:9b:82:55:cd:2b:64:eb:
ed:d9:4a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:54:21 2025 by rpki-client