Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier: bW0sqrhic5OfkWDmHLbUOMgvz52OYbOx6a7b1WB9FxE=
Subject key identifier: 5C:9E:7E:98:13:A2:5A:0A:D0:37:FB:44:07:53:4F:80:FB:6A:45:5B
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 0199FB45EF829353FB457F532E34C598C4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 07:01:28 +0000
Manifest this update: Sun 19 Oct 2025 07:01:28 +0000
Manifest next update: Mon 20 Oct 2025 07:01:28 +0000
Files and hashes: 1: HSxOpF8LeaRif88_oEZ4y7MBldM.roa (hash: n8DGCpnE1FwgPJK7R+0dK8cIDb4XdG2XSYHd7OuwJKU=)
2: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: gn4ZUNlV4l1hDkCL26WWpPeKjd2od03LHlaeS80IjVM=)
3: W44szkVz920V6-JywE9vsVlLyvY.roa (hash: CydWhda8ET4rgRmemVZtuScSzfI/qh7Sm6ASW7UNUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ef:82:93:53:fb:45:7f:53:2e:34:c5:98:c4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Oct 19 07:01:28 2025 GMT
Not After : Oct 20 07:01:28 2025 GMT
Subject: CN=5c9e7e9813a25a0ad037fb4407534f80fb6a455b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:d1:e6:e6:1f:44:61:d5:91:20:07:f8:4b:
3f:b2:4f:47:4e:3b:1b:8e:1b:2e:f9:31:cb:6f:3d:
cc:dd:5a:9c:da:a4:e8:f8:44:9d:28:97:10:c9:1d:
84:81:c9:e8:56:fb:ed:52:8d:f2:d2:8b:15:62:ae:
7c:7d:32:18:41:62:cd:e2:52:12:96:3a:42:31:9a:
d0:9e:24:02:89:4c:2b:52:d1:47:59:30:8f:50:d7:
20:7d:6e:c8:7c:87:d0:a4:fb:60:cf:b4:52:4f:0c:
a6:a6:a1:b8:6e:3b:0b:56:b2:e2:9e:42:3d:83:91:
0c:05:34:42:99:09:92:08:73:d3:36:00:d9:f8:f4:
5e:8b:e1:33:3e:7b:ba:b7:e1:67:51:1a:a6:fd:15:
12:7f:fe:0e:7c:96:cf:e1:d6:79:68:9e:e0:b4:9c:
56:86:99:6c:ab:dd:1a:98:59:c9:53:ea:70:65:c8:
46:a6:99:49:d2:c9:4d:8e:37:9d:32:9d:60:d1:5a:
2e:ce:1f:4f:dd:b1:f4:0b:a5:5a:a3:fa:d1:80:f1:
88:2f:1b:cd:e1:d3:ca:69:c1:31:9f:50:31:b2:41:
52:d0:0b:4e:45:eb:46:28:a2:aa:73:bb:83:d6:45:
f3:21:50:28:d4:30:76:a5:97:ba:76:38:3d:7e:c4:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9E:7E:98:13:A2:5A:0A:D0:37:FB:44:07:53:4F:80:FB:6A:45:5B
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cd:5e:2e:de:ef:1b:2c:af:02:31:59:46:17:ce:c5:10:b3:
84:d9:cb:5f:5c:f0:25:e9:3d:28:f0:9f:c3:ce:4b:1e:23:08:
fe:2a:53:4c:ba:be:72:4c:73:5c:d9:71:74:cb:a0:e3:62:3e:
bb:54:51:37:73:97:1e:a1:82:f5:25:c0:22:da:75:b1:6d:fa:
6d:1d:b0:77:62:12:92:8c:7f:07:7c:a9:4a:c6:9c:ca:e5:74:
03:9d:da:d2:4e:c1:ba:9f:ca:cf:61:56:ba:7a:9c:54:b3:6a:
3c:2c:c6:cb:df:ff:6a:46:fa:d3:bd:00:03:f1:04:79:4a:6a:
bd:aa:fb:3b:60:44:d0:6c:8d:51:f1:7e:04:41:ec:d8:0f:b4:
a6:e1:f4:71:11:3b:84:dc:ea:83:df:f8:d4:44:78:30:3e:e1:
f0:97:31:1f:7d:b2:63:23:5b:65:b7:5e:0a:6f:fb:3a:99:16:
e7:51:ea:ba:3c:2d:83:1f:b8:08:8b:c5:18:63:1c:02:6b:f7:
03:10:f5:8b:6d:9f:a0:db:8d:07:fe:11:18:43:05:91:16:61:
61:dd:cb:c6:e5:81:fa:06:e0:27:ed:e7:19:85:8d:2f:aa:a4:
aa:c1:37:94:90:ea:84:9e:0f:7f:4d:3e:b3:00:54:4d:29:7a:
0c:72:13:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:31 2025 by rpki-client