Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier: ARpBjrIr0Kf5c1umAsh2IiH0aqpJEI8rjeTpnM9RtVU=
Subject key identifier: 68:FF:2E:85:B1:99:B2:42:72:CD:20:DE:69:7D:D6:66:2F:C1:21:85
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial: 0199FD33FDDD04B091D0DD0D6302B30495B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number: 0DC0
Signing time: Sun 19 Oct 2025 16:01:06 +0000
Manifest this update: Sun 19 Oct 2025 16:01:06 +0000
Manifest next update: Mon 20 Oct 2025 16:01:06 +0000
Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: BnwzdoAx/mNglvF61a/DScBLZoKY0MNPkEchBRoyCGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:fd:dd:04:b0:91:d0:dd:0d:63:02:b3:04:95:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Validity
Not Before: Oct 19 16:01:06 2025 GMT
Not After : Oct 20 16:01:06 2025 GMT
Subject: CN=68ff2e85b199b24272cd20de697dd6662fc12185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b8:c6:ee:3f:0b:98:a0:d9:26:db:1d:30:cd:
07:0f:1a:7d:4b:28:5f:de:2a:c2:2a:86:db:d1:6e:
20:2d:f6:b7:c5:c3:85:88:d6:67:b8:64:26:ae:84:
7e:e7:df:db:90:49:4e:38:fc:e0:e6:a7:c5:a7:99:
75:fb:64:80:a7:f0:77:f3:a5:0e:85:3c:6c:3e:4b:
91:ff:51:e2:e5:93:76:21:7d:e6:8f:80:3b:82:e7:
f8:f8:a0:c1:22:5b:62:79:6d:16:c2:dc:1b:19:00:
64:ee:0f:24:d6:d2:86:31:39:53:21:3e:cc:ea:d5:
34:5a:84:ba:9d:e5:8d:d0:60:c6:c9:48:f4:7a:19:
f9:f1:23:48:17:10:16:4b:98:e5:5b:bc:8f:fd:a7:
86:9f:65:d3:57:36:dc:36:f5:5d:f9:90:f3:cd:47:
f1:1e:5c:5c:75:59:01:22:42:43:7e:c8:6d:83:60:
30:35:0c:53:ce:66:e8:f3:98:81:03:ab:f1:90:d1:
0c:5d:9e:c4:3a:92:da:9c:41:76:fd:8a:97:5c:1b:
8c:4b:33:76:65:aa:08:8b:a8:c2:df:59:5e:6c:da:
5f:72:b6:48:1f:d6:dc:ea:c2:ee:d6:8d:b8:e8:43:
ba:fe:f8:77:1d:43:9e:d7:92:87:ef:e3:76:b5:2e:
81:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FF:2E:85:B1:99:B2:42:72:CD:20:DE:69:7D:D6:66:2F:C1:21:85
X509v3 Authority Key Identifier:
keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:83:0b:8e:46:91:5b:e4:ea:cb:f9:87:3e:36:89:25:f4:ac:
62:53:3d:67:72:7c:b4:65:48:15:5a:3b:27:fc:ff:30:a4:5a:
ef:b6:39:d6:fe:41:f7:c7:21:b2:34:e6:b7:3a:7b:42:0b:18:
b4:5d:ac:34:2d:05:f4:c1:29:83:6d:03:29:51:08:d9:fa:37:
33:d1:da:7d:ca:c0:ba:2d:c6:30:91:ff:50:6d:ab:78:33:92:
1f:f9:71:2e:94:73:4a:fe:19:09:2c:48:d5:cb:e5:cd:6a:c4:
e7:fb:f2:bd:32:98:cd:bb:02:63:26:2e:8e:0d:d8:ca:c9:8a:
a0:cf:0c:2a:54:ad:32:95:2a:c2:59:7d:6e:4d:1c:8e:40:16:
64:ca:c7:1e:bd:07:ca:1c:3b:89:77:cf:a3:f9:3d:79:51:48:
26:65:d4:43:fe:43:52:76:69:4e:96:fc:d6:2b:c5:4c:e9:e0:
f9:04:cc:b1:89:67:c3:77:5d:b7:c2:51:8c:19:b8:b5:4d:36:
ec:7c:16:06:62:b8:09:8e:28:7e:3d:3c:e5:63:0a:ab:61:6d:
af:94:ef:c3:62:b2:00:8a:5f:58:ed:2e:e4:da:79:cd:86:f1:
f4:b6:e7:c6:bb:7b:f9:a7:ca:09:16:74:95:48:77:3f:6d:d7:
bb:70:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:25 2025 by rpki-client