Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
File: 9NavTeibuoEYlTzO6_s59FqO0bw.mft (raw, json)
Hash identifier: acZ44/LRlANPk29/CwQ8u+u4pQeqo7CuTrg8UTgJ3bY=
Subject key identifier: FA:50:6C:2A:12:43:8A:0C:28:60:B2:F7:EB:1C:D4:96:FB:3A:36:99
Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
Certificate issuer: /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Certificate serial: 0199FBEB2DC43B143220C702A6B77D8741B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:57 +0000
Manifest this update: Sun 19 Oct 2025 10:01:57 +0000
Manifest next update: Mon 20 Oct 2025 10:01:57 +0000
Files and hashes: 1: 9NavTeibuoEYlTzO6_s59FqO0bw.crl (hash: X0CfsT5U6kXLxx1ZYJlBGCcaz4NOeIS6fXHzupwJZzQ=)
2: RSBqMA8SK5hkaH899w74rpWOWzA.roa (hash: ZarbLd1gWH81UzY1+uoaATMpd5XCQStSn4LP/xfm248=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2d:c4:3b:14:32:20:c7:02:a6:b7:7d:87:41:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc
Validity
Not Before: Oct 19 10:01:57 2025 GMT
Not After : Oct 20 10:01:57 2025 GMT
Subject: CN=fa506c2a12438a0c2860b2f7eb1cd496fb3a3699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:d3:96:8d:0b:52:d9:bb:18:60:e1:91:c1:
18:1b:44:76:5e:30:7b:f5:22:38:31:76:b4:4f:20:
e8:9f:49:8b:61:aa:27:fd:a8:f1:79:71:6e:a6:6f:
4a:23:28:a8:26:ad:8d:75:3d:bf:9b:00:5c:99:ff:
7a:90:6e:84:ca:67:66:26:23:c3:61:86:ca:15:7a:
dd:18:77:43:37:3f:15:f3:47:9f:cb:88:b2:a8:e3:
4d:76:fd:ec:90:e7:02:07:b5:b0:65:e4:b8:a6:c5:
70:bf:b4:1f:0c:1e:4d:54:63:b7:3a:87:a4:9e:99:
1f:4b:33:97:9f:ea:8e:b4:49:4f:87:b0:22:02:d9:
ce:b6:d0:4d:c4:ac:ac:b1:81:2e:9d:cb:48:03:23:
b8:34:e0:4d:15:b5:9b:ec:f9:14:fb:5b:f5:0a:c8:
3c:c4:b3:dc:29:e5:83:08:66:95:02:6a:07:be:97:
f3:39:a6:8a:f9:28:e6:7a:77:b4:23:f4:0e:c2:8f:
74:88:2d:e9:fe:b0:c2:14:8d:d1:bc:36:bc:d9:08:
3d:6e:17:7d:01:26:0d:8a:b0:e2:26:fa:70:7b:b7:
33:82:93:b4:ff:14:d4:c4:a3:3e:2e:71:ac:0f:3d:
8b:2e:59:ee:97:28:99:49:1b:b7:58:c7:e5:30:78:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:50:6C:2A:12:43:8A:0C:28:60:B2:F7:EB:1C:D4:96:FB:3A:36:99
X509v3 Authority Key Identifier:
keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b6:16:e1:ab:7b:8e:1d:ef:78:d8:07:d3:cd:5a:f8:70:f2:
27:3d:68:78:67:1d:71:bf:e8:1f:67:bb:a3:5e:fc:e3:d2:9e:
99:c7:cf:ac:70:cf:4b:23:a2:2f:0e:3e:c7:3d:da:61:ba:b8:
cb:a5:ba:94:92:13:25:5b:ff:5f:9d:01:1a:33:86:19:e9:58:
a6:d3:ac:45:60:d6:4a:bf:ac:88:31:96:47:89:4c:e7:bc:50:
5a:ff:0c:03:f8:ae:06:05:fe:56:00:72:ef:fe:50:a2:df:11:
2a:ca:4f:d5:b9:f4:28:18:33:31:53:a6:26:19:fe:7c:a6:9d:
fb:2f:4a:27:db:17:d5:54:d6:f9:93:c8:7b:43:90:88:03:26:
ad:28:ee:6c:88:3f:8f:82:d7:40:d9:e5:55:34:c2:6b:3d:f7:
10:ac:af:4f:37:d2:cc:87:ba:42:3f:97:4f:cd:d9:5a:77:fd:
48:8e:da:f2:e0:44:5b:7a:2d:d8:0c:64:41:b4:03:40:9f:e8:
2d:2b:53:1a:f7:5d:80:ca:6f:a3:b9:0b:56:38:3f:99:f1:8d:
d9:a7:4f:1e:43:0f:92:56:7f:e7:9d:f0:9f:e6:03:91:00:13:
b5:97:79:96:44:c2:71:83:ab:46:c5:ab:5e:cc:10:7d:8b:19:
d4:d5:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:05 2025 by rpki-client