Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: G3s4LsUN0lR/H5YgQHFswa5/EBf5lmfkSJNoOkhGSyY=
Subject key identifier: 74:B0:D7:EC:C0:2C:AB:6C:C2:A1:03:E9:35:9E:3A:8E:EE:8D:F2:52
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 0199FB7CCD85CA848A5575D10CD4EB796920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 08:01:24 +0000
Manifest this update: Sun 19 Oct 2025 08:01:24 +0000
Manifest next update: Mon 20 Oct 2025 08:01:24 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: qqB6CGJ7Wn55ly0BuiUwyRXKXodS+PKjDooiWJY1KYc=)
2: h04E6GUTfk7g-nszYeXV5v59Z7g.roa (hash: D0nODnBLfeAlBTbUkjxGcmmT4S/QYeiGnt9Aow5Sjx0=)
3: xJetAjXRbPTX957PRc-ZRikOCag.roa (hash: zIdEISxA+75bDRZATAE0MJ7G/Gr2I74NP3sEuTFZFW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:cd:85:ca:84:8a:55:75:d1:0c:d4:eb:79:69:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Oct 19 08:01:24 2025 GMT
Not After : Oct 20 08:01:24 2025 GMT
Subject: CN=74b0d7ecc02cab6cc2a103e9359e3a8eee8df252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:d3:e2:9c:8a:bb:d0:ca:95:39:5d:50:f7:
df:7c:53:be:3d:b5:5b:cc:64:31:66:ec:65:0c:70:
7a:ad:f4:3c:dc:cd:82:94:c2:95:a2:9a:8b:ea:2f:
e7:fe:df:c4:9b:bd:31:6d:4b:07:75:f4:11:c8:a9:
63:57:b7:72:94:fa:f1:4a:17:cc:7f:e5:28:77:56:
28:ef:56:93:29:b9:92:06:61:a2:eb:bb:ec:fa:71:
3b:39:1c:84:4e:42:8b:42:ad:2e:cd:a4:ad:2b:cc:
32:4f:1b:f9:32:dc:22:28:82:73:82:96:b7:99:c5:
b3:15:a2:c8:e6:58:09:b7:61:8f:42:fa:b0:f4:4b:
c0:a3:d8:b4:6f:66:5f:10:13:5b:6f:cb:48:8a:bd:
81:9b:cf:4c:2c:73:bf:91:ca:2f:b2:69:87:57:c3:
5d:53:46:5b:86:67:b4:34:69:ee:df:4c:5c:00:07:
f4:d0:94:bd:f2:2b:da:96:5b:e5:3e:b7:89:ff:76:
a2:02:ea:a5:fd:be:3d:96:4a:5a:7d:7f:00:77:9e:
38:b6:6d:11:84:4a:5a:7f:f9:18:00:53:16:59:23:
4c:7c:a2:b7:cb:86:78:bb:44:e8:50:b0:d5:69:5c:
3a:24:b2:2d:48:d0:1c:e6:ce:a6:7f:9a:d9:54:e1:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B0:D7:EC:C0:2C:AB:6C:C2:A1:03:E9:35:9E:3A:8E:EE:8D:F2:52
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:67:2e:ce:09:92:7e:a6:4c:a8:8f:b3:3a:3f:be:61:87:35:
33:73:7b:52:2e:70:d3:09:70:3c:6d:65:df:f3:8e:a7:7b:be:
d6:46:7c:65:6d:4a:9e:b3:c8:a7:c7:8b:14:50:3f:cd:6b:3c:
76:c5:cd:43:a0:48:15:e7:0c:1d:bc:c0:3f:57:93:62:5b:f4:
82:24:e1:6b:99:12:1b:4f:72:72:a8:fa:cc:d2:5e:a2:92:00:
bb:5a:0b:85:3e:1d:40:db:59:20:67:38:e0:d2:1e:98:37:e3:
0a:a7:eb:49:77:e1:a5:eb:f2:4e:8e:4d:9f:f0:ee:51:42:4a:
2c:89:30:e8:f3:03:0a:bb:6c:87:58:48:e9:fb:12:c3:9a:71:
64:fe:27:6f:5b:b6:61:d8:8c:1a:1d:c0:7e:22:a5:e1:75:75:
c1:dd:e1:4f:28:85:26:d7:38:b1:ff:d5:2d:c7:05:f2:3b:6e:
e0:07:5e:f6:7d:0e:84:ac:7a:46:03:f8:6b:e7:75:27:35:c8:
a5:5e:b2:cf:e0:ab:e1:01:7c:d5:51:8f:f3:4b:50:8e:98:e9:
57:b5:bc:62:76:3d:89:9a:cb:46:06:85:b4:7d:df:f1:4e:1c:
e3:c7:e3:47:71:18:20:62:03:46:a6:3b:36:8f:b6:20:81:2f:
e1:d0:c3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:28 2025 by rpki-client