Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: vwaxRyOLt/XO2s7800TSJNX6WoVjKkapGk8HuABrKEo=
Subject key identifier: 6F:CD:38:0D:02:CF:B4:6D:9E:2D:3F:69:4A:06:2F:3A:F1:47:63:FC
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 0199FEB47D00B9FBC248EA59E8AD36ACAA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 09F3
Signing time: Sun 19 Oct 2025 23:01:05 +0000
Manifest this update: Sun 19 Oct 2025 23:01:05 +0000
Manifest next update: Mon 20 Oct 2025 23:01:05 +0000
Files and hashes: 1: QZlBG2kRh6vni73fkptkgN279c4.roa (hash: XJG4jHJv96gh6e1pmElIHEBthdc/xrtURDP4u20xHEU=)
2: jODSDZiB_9CDcQXiT4tsxNlR8Ac.roa (hash: JEMeTXjwzca2z04dyMlf/bVf4aF3EAXQNY7E1cjOdx4=)
3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: 7UAn+NI2WGPnaRDgtImqQN1bB1FmMPWrDQHeipWIJr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:7d:00:b9:fb:c2:48:ea:59:e8:ad:36:ac:aa:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Oct 19 23:01:05 2025 GMT
Not After : Oct 20 23:01:05 2025 GMT
Subject: CN=6fcd380d02cfb46d9e2d3f694a062f3af14763fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:e7:ff:02:ac:0f:0f:33:34:6b:76:22:be:
93:da:aa:f8:53:84:73:79:0b:68:8f:f4:81:7d:f1:
18:77:a4:3c:91:ed:f4:63:af:92:88:1b:6e:bf:eb:
1b:dc:42:e0:7e:9a:15:b4:1a:68:02:ae:a5:37:8f:
5e:35:cb:f7:b1:f8:1d:47:10:11:c5:d7:b5:1e:43:
9f:8a:d4:7b:08:60:4a:3c:32:8c:a5:49:a4:09:4a:
62:47:2f:83:bd:f8:01:21:20:97:e8:dd:77:d6:ca:
88:b8:0f:43:94:73:75:42:67:34:2b:1b:b1:e8:cb:
c2:63:31:a8:93:6f:8d:96:b9:f2:d2:8e:04:60:24:
5f:61:ad:fa:5f:d3:41:dc:16:a2:19:ac:14:a8:bd:
d1:67:a0:b7:f3:34:e4:de:8d:32:f4:89:13:eb:f9:
87:67:13:2d:c1:df:56:53:b2:62:40:bd:6b:a3:3b:
33:53:40:27:b4:6e:59:af:67:dd:3d:aa:aa:90:89:
b3:45:26:4d:c1:9b:49:79:f5:db:65:0d:51:53:f2:
bd:84:0e:22:fc:e2:43:ce:c1:a4:3d:b8:19:01:11:
82:d6:d8:19:df:7d:7a:2b:ab:5c:95:c1:b8:8e:ce:
60:4a:20:98:50:e5:69:d1:dd:2f:ed:6b:7d:c3:da:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CD:38:0D:02:CF:B4:6D:9E:2D:3F:69:4A:06:2F:3A:F1:47:63:FC
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ba:9f:9c:1e:9d:36:c2:df:a2:61:26:e6:30:3d:fc:ec:2a:
6c:2d:6d:32:58:dc:d2:53:de:e3:3d:7a:9f:d1:e2:41:60:48:
11:70:71:0e:df:94:03:51:63:e6:ce:51:57:60:bf:2c:03:b7:
75:fe:69:4c:4c:b5:66:d2:14:fa:e8:08:ce:fd:e9:84:43:28:
eb:ec:b2:12:0f:68:a3:84:3b:77:8b:1e:fd:a0:c6:c3:31:a4:
34:79:f0:18:58:39:38:be:0d:70:b2:f5:33:eb:c2:eb:a2:4d:
93:a9:30:57:10:7d:1c:7f:77:af:59:b2:1f:b0:09:15:32:46:
e1:95:65:4b:f6:9c:9b:36:78:ee:ca:df:cb:e1:ac:be:2d:66:
10:42:1f:35:0c:83:b0:af:91:14:fb:82:ee:69:8d:55:7f:12:
d9:91:31:49:40:f1:56:3e:34:c9:b8:f9:0d:78:ec:3f:ed:e4:
7a:3f:de:e3:fa:e6:37:ff:34:1c:d3:f5:9e:20:cc:65:78:47:
6b:10:9b:8b:f5:4d:ea:de:fd:a7:a1:bc:e2:c5:7b:31:b2:13:
61:84:4d:9f:3d:b8:5c:ef:d5:85:bd:c9:a5:7f:ff:27:53:13:
e4:e8:a9:68:b4:f4:d7:9e:0c:d8:fe:5b:61:b0:70:bd:5f:66:
b5:b8:ed:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:46:48 2025 by rpki-client