Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier: jNfY5Nrj0hK1POHsZTAS7VRQkd5pa2dn8VE/GbXukXs=
Subject key identifier: E7:70:68:4E:E4:F6:E0:DA:0F:13:52:10:45:5B:95:FF:05:A2:4F:32
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial: 0199FBEA96B43780B40B760D5E067BFCD065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number: 11C3
Signing time: Sun 19 Oct 2025 10:01:19 +0000
Manifest this update: Sun 19 Oct 2025 10:01:19 +0000
Manifest next update: Mon 20 Oct 2025 10:01:19 +0000
Files and hashes: 1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: sydTdEsN4X6pu0cSK13nye6jDSz14MWh3wHKMpKNELk=)
2: cwCE2hhjusn86QvOu2pcA9KTbHA.roa (hash: NxYhK1mgxO/73LOxU0Rf/stDIA61i1imewNDavbu5Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:96:b4:37:80:b4:0b:76:0d:5e:06:7b:fc:d0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
Validity
Not Before: Oct 19 10:01:19 2025 GMT
Not After : Oct 20 10:01:19 2025 GMT
Subject: CN=e770684ee4f6e0da0f135210455b95ff05a24f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:89:5f:b3:17:4d:c1:a4:04:4e:4a:bc:2c:
04:6a:05:eb:b8:2d:68:b1:b9:1d:a5:8b:39:9e:a0:
52:11:61:c6:26:fd:58:04:0c:9e:f0:08:c9:0a:01:
90:9b:14:e3:13:03:69:48:43:6a:81:9c:9b:bd:f3:
08:f4:20:35:e5:90:52:b5:55:2a:35:24:43:8e:05:
8d:24:bf:07:5a:54:43:b1:76:8a:38:20:c1:6b:4f:
b1:89:04:27:67:ea:05:93:f0:40:8b:8b:2a:03:8a:
fb:b4:18:16:58:04:e2:05:a3:7b:09:b2:b1:db:f2:
fb:1b:ce:51:d4:37:5c:61:13:64:d5:d5:75:38:d9:
f7:96:38:8e:9e:32:aa:9e:3e:1a:fb:e2:ad:61:0b:
32:51:a0:2a:35:b8:ba:01:60:38:22:49:92:56:40:
e2:2a:3e:6e:c0:9f:3b:5e:5a:32:7f:df:6f:3e:8c:
d6:c8:26:b3:ab:a9:d2:f7:15:77:a7:d6:4b:a8:f8:
0c:e3:8a:2d:4d:f5:39:fc:74:96:c9:94:b6:7f:21:
81:9c:02:49:4e:3c:15:a1:07:c7:18:17:74:a2:05:
19:8c:4c:a7:8f:dd:de:d6:36:c0:43:3c:9e:e0:55:
8e:e0:91:1c:98:99:80:9c:f6:7a:dd:b1:9f:5d:f0:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:70:68:4E:E4:F6:E0:DA:0F:13:52:10:45:5B:95:FF:05:A2:4F:32
X509v3 Authority Key Identifier:
keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d0:ff:5b:84:d5:6a:3c:b8:57:41:94:e8:6e:73:d8:1e:af:
3e:64:07:6b:4d:86:0f:b0:9d:51:06:5b:76:8d:1c:43:27:7b:
83:65:b3:8e:00:37:32:ae:32:59:10:6b:51:94:9d:51:9b:e3:
2d:ed:a0:8b:24:b0:22:9e:da:86:c5:5b:52:8d:a7:e6:62:e4:
d7:9b:aa:5c:e9:fd:1f:e6:cd:3c:04:35:b5:03:91:b4:70:2d:
83:ef:0d:31:2f:44:28:0b:51:6e:d7:61:f6:ee:92:5b:3d:38:
51:11:c2:de:19:55:b0:47:7a:81:a7:f2:47:28:31:4b:1a:84:
7e:5c:dc:94:40:68:46:3d:a5:6b:25:fa:f5:a7:98:42:17:92:
40:de:1a:bd:d9:37:67:36:61:c4:6c:27:21:c6:fa:2d:8c:f4:
36:ae:66:27:a0:f1:3e:05:74:54:74:25:e4:85:f5:3b:18:39:
73:73:8b:02:af:6a:57:68:5e:7f:b8:2b:4e:ff:6a:32:d8:5c:
0f:2e:c5:4c:09:06:39:1c:61:d1:68:65:60:16:38:a7:9b:8c:
df:0b:92:50:d0:c6:7c:7f:69:29:4e:31:0d:84:47:2d:8e:4a:
22:94:14:ca:45:d9:77:31:16:d8:e9:45:6a:6d:63:bb:d0:a9:
92:01:e2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:18 2025 by rpki-client