Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
File: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft (raw, json)
Hash identifier: VA5SMEpSFBdkvAuDAu22RLLZ72WiQ35uHHk+gXX6lt4=
Subject key identifier: A1:68:AA:4B:9F:91:D9:98:B9:B0:2F:9F:0D:3F:62:7E:95:B5:91:EF
Authority key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
Certificate issuer: /CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Certificate serial: 0199FCC6CE66447F0F825232E1E6ED71DB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
Manifest number: D5
Signing time: Sun 19 Oct 2025 14:01:51 +0000
Manifest this update: Sun 19 Oct 2025 14:01:51 +0000
Manifest next update: Mon 20 Oct 2025 14:01:51 +0000
Files and hashes: 1: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl (hash: ifN/P9qEYUxibXF06og4XoDXBuLLsNIgqdePPAboVWM=)
2: mNqIiIsivK3RH9-qHlJI1-YYSi8.roa (hash: H9Eh88q+8mpDx8ZuUb0d9LRmXaGpIblFFe9crHh272Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ce:66:44:7f:0f:82:52:32:e1:e6:ed:71:db:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30
Validity
Not Before: Oct 19 14:01:51 2025 GMT
Not After : Oct 20 14:01:51 2025 GMT
Subject: CN=a168aa4b9f91d998b9b02f9f0d3f627e95b591ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:09:25:1a:cc:1f:36:9d:b5:6e:5b:92:ca:
1d:af:8d:9c:aa:9a:0d:b8:5f:b1:80:ab:97:62:e7:
38:75:3d:e7:17:33:bd:71:fc:ab:78:14:69:27:fa:
20:23:52:9e:71:1f:74:38:62:83:30:76:5b:cb:8b:
8d:5f:7c:1d:d3:22:fd:d0:b8:51:45:5d:ac:fe:a9:
26:b6:87:43:93:1a:d6:49:4b:02:f3:f1:95:83:b2:
bb:c1:7f:de:31:26:42:fb:31:6e:03:e1:ad:aa:1a:
02:66:99:9d:55:14:04:51:04:55:04:e5:6b:f4:86:
78:df:e2:89:90:e5:70:69:64:6c:29:a0:08:e4:e2:
a5:c7:15:db:9e:98:38:ca:3d:74:bb:e3:21:10:6b:
54:ad:d2:2b:40:e6:4a:a1:c4:19:5a:89:cf:d3:b7:
ab:c8:f1:43:9f:f0:cb:35:6f:d4:1c:96:3e:17:1d:
99:29:95:83:5a:db:de:a3:b5:d4:d9:32:aa:76:f4:
50:65:01:61:b1:56:eb:c9:37:74:f0:39:fa:c8:17:
07:e7:dc:8d:55:db:08:a7:7c:4a:4b:87:bc:39:35:
be:dd:7c:7f:53:aa:34:dc:6c:80:02:22:43:ac:10:
8b:12:87:12:85:bc:a2:c5:89:d5:54:09:cd:af:32:
a0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:68:AA:4B:9F:91:D9:98:B9:B0:2F:9F:0D:3F:62:7E:95:B5:91:EF
X509v3 Authority Key Identifier:
keyid:F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:95:73:b6:80:41:4f:10:a5:94:f5:6d:ec:ec:0b:70:36:9b:
e8:6f:d2:d4:39:c2:a3:3b:b2:bf:7f:2d:fb:10:73:29:80:40:
2d:00:f4:03:5e:52:88:c1:31:8a:bc:a6:d6:fa:8c:fd:1e:0f:
ad:e0:30:52:bd:05:ef:7e:c4:37:b2:d8:6a:3a:9b:12:f4:c1:
ba:5a:5b:20:d5:2a:05:31:4c:59:c9:48:f4:65:da:e3:fd:07:
c6:65:7b:89:09:b5:18:0a:03:7e:66:bb:98:03:f2:fa:4f:9b:
3e:88:64:15:9c:ad:ce:cb:ec:20:d0:e9:f8:47:55:1e:d9:d5:
ab:9a:1c:2a:fd:ed:bd:1c:05:c3:57:21:45:6b:9e:67:6b:db:
e2:31:66:c7:4f:aa:af:0f:40:af:4f:07:dc:b3:73:ca:f6:7c:
6e:57:12:b7:59:ca:84:58:f6:50:4d:c2:ea:23:bd:70:bd:23:
04:47:b3:98:61:1e:9e:da:15:bf:93:ef:36:23:f9:4b:68:9d:
06:0b:20:47:7a:ba:5d:63:7d:62:0b:24:83:1c:da:7d:6b:30:
85:b0:1b:6d:2b:6d:80:f0:27:40:4b:b3:0d:a2:42:9c:c3:68:
5d:fe:49:f8:6d:a3:30:8d:dc:9a:21:22:8e:03:8e:eb:83:a3:
92:84:5a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:55 2025 by rpki-client