Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: HSDKNOROIV1WO+23uQ5MD0ul8p+LEcW2n4C9OQDZW50=
Subject key identifier: 69:59:61:E4:13:EE:C3:F7:02:4C:96:7E:22:78:39:32:D5:CC:86:9F
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 0199FB4631D8F5CFEF933A19CA5D47B1C0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 07:01:45 +0000
Manifest this update: Sun 19 Oct 2025 07:01:45 +0000
Manifest next update: Mon 20 Oct 2025 07:01:45 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: IZdVUdmAUTL+qcD9qgzUTd76EKOuulySpQYcZ5vaugY=)
2: QBvaKUProLFwUadr8JLWlBh2UrE.roa (hash: xpxsGWmbgKM4U5yVDwdEgOHu1jns29KEhnZ49U4Y2OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:31:d8:f5:cf:ef:93:3a:19:ca:5d:47:b1:c0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Oct 19 07:01:45 2025 GMT
Not After : Oct 20 07:01:45 2025 GMT
Subject: CN=695961e413eec3f7024c967e22783932d5cc869f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:ba:7d:6f:27:a1:60:be:3b:1f:d9:48:ab:
eb:76:a9:26:20:19:29:99:19:86:7e:c6:3a:d2:72:
6a:92:50:13:b5:0f:2b:41:03:20:53:13:9e:95:84:
1d:c3:1b:c1:08:f5:dc:4e:b5:ea:19:9f:6b:24:d6:
d3:cb:8c:fb:40:06:dc:41:57:5d:31:e6:38:96:05:
0a:4e:8b:40:b7:65:e5:cb:f6:fc:56:6e:38:ab:48:
d9:61:42:dd:fd:63:f6:ef:0b:b1:64:85:7c:c4:6c:
4f:14:30:6d:0d:44:a3:1f:62:79:49:5f:2d:a6:de:
0f:74:be:91:94:61:51:83:e6:f0:e5:68:42:a9:72:
6d:49:66:66:c6:32:56:dd:26:5c:e3:0f:82:6e:a9:
06:21:4f:bd:ef:e1:59:e0:de:47:01:4f:13:c9:8a:
c3:2a:e7:db:a1:08:e0:5c:b6:3d:3c:f1:3f:6d:f5:
98:94:8a:35:53:22:d1:4c:da:e1:59:07:94:eb:84:
3a:69:b6:de:92:d0:ff:33:3b:47:47:13:99:45:b7:
30:ac:17:fe:67:2d:74:52:4b:af:4e:bc:87:d2:15:
f7:7b:86:e9:77:5a:c9:4a:66:c4:8d:f4:4e:0a:84:
c1:26:cb:e4:a2:2b:0c:c0:5c:90:bf:9b:55:19:aa:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:59:61:E4:13:EE:C3:F7:02:4C:96:7E:22:78:39:32:D5:CC:86:9F
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:57:36:12:cf:64:f2:34:1d:92:89:d7:a7:4c:fe:b5:e5:bf:
3b:0d:1c:5b:8b:c1:4c:1e:51:4e:eb:5c:64:72:0f:8f:92:e4:
c5:43:89:c4:80:23:c9:76:78:72:11:2e:ff:2e:21:74:c9:b5:
02:20:d9:74:fe:ad:e6:0c:46:38:3a:8d:37:0b:c9:67:aa:4a:
0a:24:40:dd:6c:3b:cf:15:01:fc:85:82:68:6b:b8:29:91:2d:
c0:72:e2:30:7e:67:50:bd:9c:69:43:db:03:54:03:64:41:29:
fd:0b:02:9b:5d:35:c2:59:32:e5:80:b6:8b:5a:39:a4:44:a6:
61:3d:c1:8d:3c:2a:1c:70:61:4c:6f:30:b3:91:22:93:dc:7e:
f5:18:1c:3a:77:83:02:6c:f4:6f:44:ca:a3:2d:46:29:8e:23:
f8:85:4e:59:ac:78:8a:4e:b8:4c:c2:38:44:60:3f:d9:06:1e:
74:a5:4b:68:31:dd:76:83:3a:37:55:cc:94:15:b3:ed:1f:db:
97:db:4e:3e:09:68:97:e7:b7:e7:48:8d:94:d4:11:eb:0a:50:
e2:99:a2:96:20:18:2a:50:fc:f3:11:df:e0:53:f4:39:53:00:
7a:70:08:49:b5:5e:5d:4c:4c:55:94:66:aa:8d:33:de:de:e8:
49:00:48:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:31 2025 by rpki-client