Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier: Pnq4Lma6zaQ5MjzJeP0KKKhhkIiRvfCD/E85ydlWRGE=
Subject key identifier: BF:3C:89:DE:D3:63:18:0E:C4:DC:FD:4D:54:F7:39:EF:68:5C:62:3B
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 0199FDD8D50543B5B2F33221483994656959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number: 0E01
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: TuM13fhpkCxyA9d9X5GwR2HWZQ9pSwOV1A1m46e+fF8=)
2: qWXcfiQuPBHMjlQKkWiAfKgYZzg.roa (hash: Wc2JW8a4VkUPRVVW0ORvuNA6sC5FJWmi5KtU2JoA5R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d5:05:43:b5:b2:f3:32:21:48:39:94:65:69:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=bf3c89ded363180ec4dcfd4d54f739ef685c623b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:24:ea:9c:0d:87:13:f2:ad:a2:cc:d8:4e:d9:
3c:37:94:da:28:a6:11:8d:4e:b6:90:f3:6c:43:d6:
5b:f0:4a:62:e1:51:5e:a4:02:b2:90:da:73:9b:5a:
ec:0b:5d:29:ac:d6:bc:ed:ac:f0:42:87:8c:c5:29:
8a:75:f6:80:85:c2:c1:d9:59:6a:3e:ba:a8:79:c5:
bc:bf:58:58:a5:bc:63:7c:61:92:69:43:25:be:30:
88:75:07:9d:db:87:59:71:20:5a:da:0e:a4:53:e9:
db:2a:7f:dd:07:88:93:f0:18:cd:d8:3a:3f:6b:ad:
82:30:2d:03:96:6b:4a:57:d1:da:fc:f0:dd:67:0b:
c6:ae:de:c0:50:2e:22:9b:b8:a0:2f:e1:c1:23:fe:
e0:2a:97:3e:b2:72:5c:50:ca:9a:bb:50:f7:e6:dd:
e4:e8:71:dd:07:70:32:97:16:13:0f:f1:5d:60:89:
51:2e:70:11:e3:1b:66:b2:ac:8e:87:ce:85:02:7d:
36:dc:97:36:66:27:71:41:80:b5:30:9c:79:fb:d7:
af:dd:cb:2c:14:d3:e8:bd:5c:69:3f:a0:2b:a2:f3:
4c:c6:4d:51:44:3c:e8:6d:bc:bb:a9:dc:30:a9:0c:
b5:9f:1d:aa:bb:2d:c2:6b:e1:49:24:25:e2:ee:ad:
2b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3C:89:DE:D3:63:18:0E:C4:DC:FD:4D:54:F7:39:EF:68:5C:62:3B
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a5:c8:d1:08:47:a8:bd:64:d4:9b:32:44:93:0d:9d:ba:64:
bb:16:d4:2b:14:2d:61:93:9a:48:67:a6:27:0b:66:b5:79:2c:
0c:50:e1:c4:56:57:eb:0f:d4:cc:3e:20:b7:d5:b7:16:f7:6c:
6d:67:9e:ce:9c:73:e6:a9:6f:c9:74:50:87:f9:c7:c9:a3:d3:
2a:da:10:19:07:90:ff:21:d9:bc:bf:69:6d:ac:bd:f4:60:bf:
12:d1:ad:5f:34:3c:13:8f:21:5f:4c:3a:61:70:42:6f:7e:ef:
d3:36:c8:b7:b8:1d:79:41:80:8e:a0:09:37:a7:5b:2d:76:5f:
5c:54:06:02:42:04:10:d4:75:5e:1c:1e:50:b2:1d:16:ef:c1:
c0:5c:34:85:42:08:0b:20:f2:90:ae:32:a5:46:c6:1d:01:6f:
20:36:bf:cc:10:18:62:e2:61:8a:d2:b6:29:2c:15:a9:15:a8:
33:7a:0a:7c:76:6a:6e:41:24:b1:83:9e:33:e7:38:c3:9b:84:
a1:cb:4d:29:59:38:6d:e1:04:9f:c8:6c:87:8b:2a:29:77:98:
7b:6c:52:6a:7d:ec:a6:78:15:a3:3c:36:13:25:6b:cf:34:d4:
56:3f:e2:61:d0:f8:25:bf:47:2e:24:1f:80:55:9f:61:86:b2:
1d:06:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:20 2025 by rpki-client