Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
File: 9r15bwtjNc_hKKXPm5fudoCC7Y0.mft (raw, json)
Hash identifier: CvJYpukyuqCZANR9xDHyd9cnWos3jzxzEyzCL2OYtrM=
Subject key identifier: F4:CB:68:17:70:0E:4D:30:1D:A6:C7:AB:2C:B1:DD:72:D3:23:38:47
Authority key identifier: F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
Certificate issuer: /CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Certificate serial: 0199FDD8BABBE1AA3C57F08AEE7436905349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
Manifest number: 01DB
Signing time: Sun 19 Oct 2025 19:01:03 +0000
Manifest this update: Sun 19 Oct 2025 19:01:03 +0000
Manifest next update: Mon 20 Oct 2025 19:01:03 +0000
Files and hashes: 1: 9r15bwtjNc_hKKXPm5fudoCC7Y0.crl (hash: oKxCv6c8U9NMUih244tXm7m4Ws43drE8+RgMu8rJyKE=)
2: RIbTLj7txNwoYxh7oe27Ga8iD9g.roa (hash: b58BSl0OG9Cy3uXrPooEMPlzPzUnf3IVg7gnhdmepqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ba:bb:e1:aa:3c:57:f0:8a:ee:74:36:90:53:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Validity
Not Before: Oct 19 19:01:03 2025 GMT
Not After : Oct 20 19:01:03 2025 GMT
Subject: CN=f4cb6817700e4d301da6c7ab2cb1dd72d3233847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:43:c5:2e:41:d7:a5:df:ec:41:5b:78:c0:
7a:69:67:95:e8:eb:35:24:d3:c5:ec:13:9a:d4:9c:
e2:b5:70:ce:5b:e2:4f:4b:ea:98:26:76:87:35:06:
fb:0b:81:4c:e9:a1:cf:f8:40:91:d0:c3:da:cf:46:
ea:99:96:4f:15:c5:73:51:e6:fb:2c:0e:fe:c2:98:
e4:e0:49:4e:83:bf:ca:c8:0a:06:f5:fc:3d:c6:7e:
4e:0c:04:c8:01:e6:d9:6d:58:00:0b:5b:18:ee:28:
44:a6:c7:ad:42:60:5b:68:d4:7c:75:29:65:a3:43:
a2:d1:8d:a0:02:7d:a0:f8:78:78:c8:9c:d4:23:b5:
df:b3:16:65:af:97:fc:4a:41:0d:07:92:93:da:67:
9f:4b:0c:7b:7d:8f:cb:a7:9c:51:9b:24:43:91:bf:
dc:b0:eb:3f:90:3e:b3:83:d0:7a:44:ee:a6:8d:6b:
7c:f6:73:d7:0d:f5:0b:b3:0c:dc:b0:c2:61:41:ce:
2c:b5:08:7c:ce:b5:be:72:97:a5:68:58:a3:ab:f9:
d7:9e:2f:b8:32:90:59:81:41:30:04:6a:60:9f:31:
da:29:ec:c9:7a:60:23:9e:d7:f5:98:60:c8:68:98:
9d:ab:2e:7b:f4:c7:b2:ba:86:58:cf:e8:dc:1a:1c:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CB:68:17:70:0E:4D:30:1D:A6:C7:AB:2C:B1:DD:72:D3:23:38:47
X509v3 Authority Key Identifier:
keyid:F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:04:07:76:e4:21:74:2b:b9:42:1a:73:f0:e1:02:35:ff:77:
3a:f7:06:cf:1b:ce:8e:97:82:55:30:a4:e0:dc:f0:8e:d7:4c:
3e:ca:c3:e3:67:1f:17:2e:df:09:7e:60:2e:1a:88:29:21:d9:
47:cb:ff:a2:59:84:58:d9:ff:52:a4:cc:6c:38:e2:46:b6:ad:
df:85:11:2f:50:4f:1f:a2:b3:f1:42:f7:e6:8f:e9:e5:2b:b0:
5d:4d:86:f1:35:8f:fe:03:98:7b:43:c3:d4:9a:69:d7:ad:b6:
5d:65:76:10:97:90:b6:2c:d6:4b:08:7d:e7:65:85:e1:70:03:
bd:e9:10:92:67:39:9b:95:25:52:90:05:17:8a:5f:c2:73:4a:
5f:03:ef:19:f8:b9:6b:d8:80:3b:86:dc:9e:a9:eb:b1:7d:64:
3f:9a:4a:70:eb:ce:e6:45:73:52:b1:96:86:ca:c2:dd:25:d6:
d5:18:f0:73:3f:7d:28:04:71:16:19:1f:e6:fc:42:46:0e:db:
17:47:cb:fd:82:18:06:61:96:7e:3e:56:65:f2:84:93:68:ea:
d6:28:7f:54:8f:e6:0e:ca:64:d4:f2:75:e0:28:d5:bd:dd:fc:
5e:85:b6:d7:d1:f0:70:2a:94:2e:ac:ad:2b:3c:fe:d3:eb:19:
cf:02:a8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:03 2025 by rpki-client