Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier: MgHsaBLFYavQ/VmvWGeAmtVuo+rvulu5WQLJ6PCRAKY=
Subject key identifier: 03:96:76:8F:75:F6:9E:7F:08:AC:C4:6A:06:11:5F:05:00:04:B3:83
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 0199FB7D01140BC7871B6109C3005847AD7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 08:01:37 +0000
Manifest this update: Sun 19 Oct 2025 08:01:37 +0000
Manifest next update: Mon 20 Oct 2025 08:01:37 +0000
Files and hashes: 1: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: PNlwEM5jsuy74mZwPVqkEsrYxkrNK/gEWp17CPtRe5g=)
2: pauhzMvpgkVgNc366YpahktJW_E.roa (hash: CXLZhXqRNNwNQ9k+Lw14xdWMjm1xkv/Bk4H8O3Arf58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:01:14:0b:c7:87:1b:61:09:c3:00:58:47:ad:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Oct 19 08:01:37 2025 GMT
Not After : Oct 20 08:01:37 2025 GMT
Subject: CN=0396768f75f69e7f08acc46a06115f050004b383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:f6:76:73:9f:aa:48:c7:1c:90:3c:d6:32:
73:f0:65:40:82:94:f7:e9:a6:8b:3e:fa:79:bf:f6:
26:d3:06:64:99:6f:c2:27:dd:f6:e0:97:8f:48:66:
d8:57:8e:7a:ac:44:a6:ad:8e:56:0b:0f:50:61:fe:
69:5f:a5:e3:ad:7c:d4:4c:90:e3:f3:2a:f0:22:1a:
e9:ff:06:6e:0f:77:81:fc:d5:8b:2f:f5:a2:a4:df:
9c:13:ab:f0:bf:d5:7f:96:1c:14:84:ea:64:97:58:
5c:bb:f9:d6:55:0f:ee:9b:37:d8:9a:e7:fe:11:6d:
d5:6f:be:29:37:69:96:ec:59:8b:21:14:a9:72:a5:
15:ed:d4:32:d7:46:7f:14:03:cb:91:27:98:db:5e:
a7:fe:1c:29:06:f6:fd:5b:13:57:55:89:48:de:d5:
74:ee:50:b4:69:d1:fa:c1:18:14:e4:a9:12:5c:60:
02:bc:2e:6f:b1:ba:28:5e:e8:73:c5:fa:bb:8d:32:
e2:2d:67:74:ec:4b:a3:12:70:c8:cf:97:7d:80:2e:
45:cf:9d:f5:64:03:16:57:c0:7e:e8:68:44:45:7d:
47:ab:05:47:8b:78:e5:9f:ca:ca:bb:ad:4f:72:6b:
04:0d:93:bb:d1:84:b9:a1:eb:4f:68:62:4c:49:6a:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:96:76:8F:75:F6:9E:7F:08:AC:C4:6A:06:11:5F:05:00:04:B3:83
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b8:6c:01:29:60:c6:1a:3e:01:d4:aa:1c:98:c7:19:bc:c8:
0d:4e:f1:6c:60:23:ec:87:e5:05:8e:7b:f9:68:bb:46:bf:9b:
e6:47:04:25:df:78:75:3f:53:e4:d3:20:c0:25:ec:84:f0:cf:
33:14:d0:12:16:5f:b8:11:d4:c7:94:49:1a:85:5e:28:58:71:
b7:e1:c2:6d:3d:c9:10:4f:ed:84:92:f6:fa:eb:3b:b6:4d:34:
e0:24:63:ed:42:bb:0c:57:c7:1b:a8:1a:9d:c2:6f:74:9b:b2:
95:1c:b7:6d:04:10:03:3a:43:ee:3d:33:bf:13:09:bb:d1:28:
a0:43:31:05:e5:83:a7:e5:54:b3:7b:60:33:f3:94:d7:08:c0:
a4:a3:c5:57:8d:bf:80:8a:4c:e8:80:49:19:1a:29:76:62:2b:
6d:71:bb:6d:04:66:c0:d9:fd:35:f5:0c:62:21:5e:41:0c:43:
99:12:38:d3:2e:b5:26:38:dc:57:d4:63:77:62:a7:e4:b6:fb:
a5:ef:02:6a:1b:f5:bb:ee:98:77:70:8d:4b:26:b0:c5:5b:a8:
16:38:9a:30:af:06:02:7e:3f:2d:6c:65:0d:31:10:4c:03:a1:
f7:ef:57:bb:b8:6a:e4:ae:36:8d:bd:49:ee:a6:fb:53:4c:9f:
0f:d3:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:45 2025 by rpki-client