Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
File: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft (raw, json)
Hash identifier: SB+4Q49ORumCU7teW1tlMBAEM79pI9o3YUB6ijDxmGQ=
Subject key identifier: B4:5C:AC:19:B4:A9:DD:9E:4A:75:50:BB:13:A4:CD:78:C7:CA:64:3A
Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
Certificate issuer: /CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Certificate serial: 0199FDD9A0C2F06AB9A55CC02ABFD4698024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:02:01 +0000
Manifest this update: Sun 19 Oct 2025 19:02:01 +0000
Manifest next update: Mon 20 Oct 2025 19:02:01 +0000
Files and hashes: 1: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl (hash: lOXMoTEu1d91HuGo56Q67Kybqi6lf0y4cRfQGPuR5Dw=)
2: iZXergsmx3c-YFSPwK1duaC7zXE.roa (hash: ux75uK3r8KWiMZRMZNyHuR7X45YAulKv87yeHOUi7Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a0:c2:f0:6a:b9:a5:5c:c0:2a:bf:d4:69:80:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Validity
Not Before: Oct 19 19:02:01 2025 GMT
Not After : Oct 20 19:02:01 2025 GMT
Subject: CN=b45cac19b4a9dd9e4a7550bb13a4cd78c7ca643a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:af:39:80:7d:4a:23:2b:07:a2:4a:b7:95:
78:7d:10:ce:a9:02:15:a9:6e:78:70:c7:aa:93:58:
c4:ee:b9:80:58:10:e1:4f:a9:d0:8a:7f:2e:d5:7e:
1d:49:35:f8:1a:51:0f:51:7a:db:87:34:3f:5b:45:
1e:fb:dd:d9:46:bc:b1:ea:b6:88:94:7e:8c:64:b6:
7a:12:a0:3c:51:2c:67:02:a7:c4:93:3d:b4:e7:6e:
e3:33:0a:3d:3a:63:77:29:5b:b6:77:94:0a:8e:cd:
00:3c:f4:b5:20:b4:78:e1:02:c0:d3:47:30:49:f8:
24:09:0d:ab:97:84:2d:c8:29:0f:84:f0:b5:a3:28:
7d:87:76:37:ce:40:9a:22:ff:61:6b:fd:92:b1:d3:
9a:38:90:ec:ac:8c:67:ef:50:45:65:34:ee:75:0a:
80:cf:22:2b:c8:9c:24:f8:fa:13:f2:12:ef:b1:87:
7f:94:e6:8f:a1:37:63:39:55:2c:75:96:22:6c:71:
ca:6c:71:15:de:93:dd:c3:33:d6:70:54:02:0f:07:
64:c9:86:ac:2a:1c:d5:c0:ea:cd:ac:f8:fe:d2:0e:
e7:f2:d9:5e:3d:b2:e8:37:64:f4:58:69:33:fa:4b:
61:9f:74:e7:11:0a:1c:50:12:cd:53:38:0a:9b:b7:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5C:AC:19:B4:A9:DD:9E:4A:75:50:BB:13:A4:CD:78:C7:CA:64:3A
X509v3 Authority Key Identifier:
keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:77:eb:60:14:80:c8:b2:fe:ca:d9:cf:a1:40:25:c4:bc:4f:
9a:97:56:b6:e7:67:5e:7f:0b:01:c0:2f:59:2a:fe:d6:fa:df:
25:2c:eb:55:d9:6b:a8:65:1f:74:2a:58:1c:23:ec:a9:5a:f2:
91:a0:30:d9:cf:8b:f3:94:9d:3e:ea:04:98:87:74:4c:4a:8c:
4f:1b:fd:5d:ce:09:46:1a:06:ef:50:b2:7d:4f:f8:73:7d:b7:
d3:ff:4d:29:e4:7f:22:5c:df:16:f4:2b:08:b1:2c:e2:17:e3:
fa:eb:fd:7e:5f:a1:1e:db:5e:c9:2b:0b:e1:35:de:ad:71:54:
07:bb:31:ee:16:98:b0:9f:90:7b:7c:4f:46:c8:4f:37:f1:0c:
8e:e5:37:5f:bc:97:05:4c:23:45:82:17:ce:c6:6d:5e:e7:58:
0b:84:d1:db:dc:f9:18:42:b4:b5:f4:f0:59:77:fe:8c:7c:c7:
ba:56:e5:39:0b:76:0d:d7:ec:aa:d3:3d:0e:a8:62:2e:90:44:
12:e2:ad:48:83:84:09:6b:df:c6:d3:94:82:39:de:d9:f8:c0:
b0:56:31:f5:3f:4d:93:c7:36:de:9e:0e:51:0a:f6:9a:73:5c:
47:cd:49:79:02:e8:68:2f:69:a6:ff:e9:f5:5f:26:a0:0f:a3:
c6:67:45:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:42 2025 by rpki-client