Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier: aWAe7iUfp/kholaXzXoRb3O2AENLQ8E+9E2CI/kP0pk=
Subject key identifier: 2D:1A:F8:B3:DA:54:6E:C3:45:55:E7:6B:CB:DF:BA:49:1D:4E:42:FA
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 0199FF226555F95FD84139A34864922B6649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number: 16F4
Signing time: Mon 20 Oct 2025 01:01:08 +0000
Manifest this update: Mon 20 Oct 2025 01:01:08 +0000
Manifest next update: Tue 21 Oct 2025 01:01:08 +0000
Files and hashes: 1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: cqoX3G6WjzSQ5eXy0SyQoit3Fc9nSd0jIl3N5xKITFo=)
2: VThOfYn2yicDk7nCFvApHsO86Wg.roa (hash: mej7dGpuagdDYe3wWlS5P2O07cvlpo15DDfF6tOHiTI=)
3: tTfX1pe5RTBDA8rpWDL9o3SrrsQ.roa (hash: 0Boop2PPC+Kquo+edf/AvMEIcfKlqZO/IjiPFQIbjyo=)
4: uOIlSnTF6fTtDAo-t67l55RoI68.roa (hash: dB5cropfobX2xCE84HM5iEAEEedSs1cybSdhKv0KvQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:65:55:f9:5f:d8:41:39:a3:48:64:92:2b:66:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Oct 20 01:01:08 2025 GMT
Not After : Oct 21 01:01:08 2025 GMT
Subject: CN=2d1af8b3da546ec34555e76bcbdfba491d4e42fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:c9:9c:22:b1:e7:f0:bf:d2:c1:19:c6:6d:
57:6e:39:71:c0:c3:e0:15:2b:bb:e5:02:bf:8b:ee:
f3:56:2d:4f:99:83:43:49:a0:e0:01:fb:3f:eb:07:
56:c9:df:b2:a3:06:27:c2:86:72:84:4b:ef:09:26:
3b:84:17:84:a0:ac:98:7c:59:5a:c4:8d:0a:1a:e5:
49:34:09:64:be:7e:a5:9e:c7:e0:1a:1f:58:54:3d:
e9:03:44:48:25:9d:d8:a0:be:cd:cc:41:c9:8e:72:
e0:83:94:61:48:1c:0f:fe:75:ac:99:f4:08:c6:60:
85:85:c8:03:3d:17:ab:28:40:a2:a4:41:37:0b:86:
f2:c0:48:8e:d5:b3:cb:6f:3e:6d:a5:0c:68:a9:2d:
ff:9e:1c:71:65:41:36:41:07:9f:af:5c:c9:f3:ca:
61:39:0e:1a:5f:07:b9:6d:ea:e3:11:5c:2c:a8:36:
3d:fc:2a:a7:10:d1:b3:56:5c:3c:e3:b6:19:d8:69:
54:0d:c7:d5:8e:f5:43:a9:e4:7a:ea:51:8e:53:63:
3c:d0:77:f9:66:79:fa:e9:0e:04:1e:f8:fe:b6:9e:
31:5e:49:4f:56:d9:65:46:fe:0d:49:59:0a:94:9c:
cd:86:80:28:2e:89:92:09:5e:c7:ce:78:66:42:82:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1A:F8:B3:DA:54:6E:C3:45:55:E7:6B:CB:DF:BA:49:1D:4E:42:FA
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0f:94:b7:c9:58:c8:b4:65:c9:2a:d6:ee:d0:55:2f:fd:24:
6b:e8:95:db:26:cd:09:ec:67:3f:15:a7:1d:9a:d9:c3:42:82:
8a:41:56:79:ed:66:3e:17:f1:d0:8b:b2:2f:20:09:be:ae:ce:
c5:a9:bb:f4:7f:d4:17:51:c3:f9:fc:8b:70:eb:a8:ec:ba:38:
bd:72:9b:f6:d1:65:85:30:b2:90:00:3f:30:ac:33:44:7c:fd:
96:4d:d4:39:58:d0:59:35:11:05:df:96:18:7c:b8:12:19:82:
aa:af:9f:d5:e8:af:ca:05:bd:eb:37:f2:83:d3:77:6d:cd:e1:
b9:c4:d9:9a:47:5a:3f:0d:7c:d5:ba:dc:cd:90:39:7f:d5:91:
9b:40:65:86:6c:12:d5:a8:a6:2e:f0:1c:af:2e:f2:f2:e1:34:
1d:ae:c6:27:bb:9c:e8:c0:45:af:89:d8:20:86:32:d7:71:16:
a1:05:31:88:84:d3:1a:b4:f5:4b:64:75:44:4e:65:14:5c:d2:
00:5e:23:85:73:6e:54:02:62:76:0d:b2:98:26:99:bf:a8:e5:
bf:f3:bd:d4:4f:7c:4b:7e:e2:aa:04:b4:15:1b:54:20:bc:00:
82:06:64:49:71:5b:ce:a0:34:18:17:5f:74:1f:73:ad:50:cb:
c3:f8:fc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:07:16 2025 by rpki-client