Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
File: u9Qr14Mqar4W4VIqLX5OQNProKI.mft (raw, json)
Hash identifier: 9HzVkGZiHuWjqnRwURmknDAUu0U4AMhnf4fpV9br9e4=
Subject key identifier: 9E:11:EC:6B:8B:46:60:69:63:3C:DD:F1:F1:9D:97:82:64:A8:9C:57
Authority key identifier: BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
Certificate issuer: /CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Certificate serial: 0199FC8FBB0C8FF0C77EAE66CA2833CD3F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 13:01:41 +0000
Manifest this update: Sun 19 Oct 2025 13:01:41 +0000
Manifest next update: Mon 20 Oct 2025 13:01:41 +0000
Files and hashes: 1: u9Qr14Mqar4W4VIqLX5OQNProKI.crl (hash: RVbMCeRB0sIcLQ18Ije0cp6pJcp6Y6byUsJtLISceKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bb:0c:8f:f0:c7:7e:ae:66:ca:28:33:cd:3f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Validity
Not Before: Oct 19 13:01:41 2025 GMT
Not After : Oct 20 13:01:41 2025 GMT
Subject: CN=9e11ec6b8b466069633cddf1f19d978264a89c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:6f:f1:f8:40:c0:a5:f4:6a:3b:73:ee:0d:
13:62:ae:81:fb:fa:b5:45:ef:91:a7:b7:84:2e:8c:
cd:03:31:bc:27:fe:4b:8c:1a:8b:22:a5:84:be:58:
dc:e3:de:79:77:4f:cc:9b:15:85:d1:3c:1d:4c:ba:
32:d0:5c:73:c9:b6:d8:a3:3a:e6:08:23:5e:f4:3b:
35:33:b0:f3:09:25:74:ba:8f:9f:54:1c:5c:ea:80:
ea:31:6a:74:b9:68:db:f9:36:eb:50:d4:1c:ba:0b:
2d:3a:64:57:99:b0:31:87:28:5b:d4:69:01:b7:48:
59:15:5b:ca:75:0c:5f:52:9c:b5:61:53:67:8c:52:
e2:eb:a7:98:03:62:14:95:8a:c6:51:c2:37:8a:db:
47:38:ba:87:e2:ed:b0:29:e2:ed:93:da:8e:95:20:
0f:f6:26:b2:3e:9c:67:bd:49:19:43:44:e0:aa:87:
e7:ea:64:75:b8:5a:29:1f:80:e5:9e:d5:98:53:a5:
6d:1f:e7:d5:41:8e:78:1c:44:e5:f5:25:d7:72:b6:
f1:46:54:71:45:8e:f0:7a:3b:2a:ba:2d:9f:9f:23:
26:ce:ed:db:3d:2b:b6:cd:79:8b:e3:31:6e:73:99:
bb:e1:04:31:23:9a:f1:33:5e:76:78:2a:b5:5c:78:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:11:EC:6B:8B:46:60:69:63:3C:DD:F1:F1:9D:97:82:64:A8:9C:57
X509v3 Authority Key Identifier:
keyid:BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0c:54:d9:dd:cc:1a:87:c2:7b:b8:f7:2e:3c:cc:24:4b:77:
51:4d:9f:46:4e:af:63:b5:31:24:76:f4:e5:33:34:05:ff:0b:
fc:5c:0f:4b:b5:6e:99:31:69:f7:1a:91:3c:f7:f8:b3:02:23:
08:a0:2e:3e:ac:63:37:4d:78:be:7b:19:af:1d:a4:bc:94:2d:
e9:83:5c:2a:91:f9:9b:06:8b:cb:0b:a0:b7:43:0f:72:8e:4d:
6d:c2:6f:ec:30:57:34:13:30:fa:45:b1:e7:07:0c:70:9b:9f:
25:40:4f:3d:f0:d2:e5:11:7a:6b:12:16:f9:50:e5:1e:32:3c:
3d:56:45:61:60:50:aa:d0:95:62:4f:f3:10:e2:2d:e9:f4:c8:
b0:72:44:16:ad:e2:a9:ed:8b:da:0d:09:d3:b6:aa:5e:8c:ac:
b7:a6:0f:4a:d6:70:83:92:10:2e:c5:e4:26:47:de:84:30:01:
4d:77:9c:74:df:9e:ee:a1:83:43:9b:24:32:f3:f7:5e:70:64:
04:a8:f6:04:1a:18:7f:df:97:ad:7d:e5:e3:40:4f:dd:86:d0:
6e:89:13:dc:41:50:b1:55:60:92:4f:96:4e:a4:dd:d3:53:21:
69:ab:27:52:c0:b9:66:db:8f:b6:fe:41:14:b8:2c:37:d7:c4:
e3:8d:13:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:57 2025 by rpki-client