Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File: B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier: b4d+UdGuyTcxIMaqm/JczEfCuAYvnCvImP/MbSj3Jz8=
Subject key identifier: 79:73:11:D6:E9:F8:EA:5B:CB:36:3B:41:DD:2E:54:21:4A:3E:52:70
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 0199FEEB9309D70AF3102FD69B04FA435F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 00:01:15 +0000
Manifest this update: Mon 20 Oct 2025 00:01:15 +0000
Manifest next update: Tue 21 Oct 2025 00:01:15 +0000
Files and hashes: 1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: 3nxWmQ4JGs0umkFTrCVtlUzIrvdB+t0BV89hmhoy0FM=)
2: f3raIBer4Wbe3buOh8JkfhD4mEA.roa (hash: B9RYB76x05XWJNka7NBoycDREl2ucTVGVKrV+eIK26g=)
3: hfYnlizg3MwR5qQug8OaGFYUftA.roa (hash: DTFlk5aAr3e9+sYI7V08QHNOE3ZymaaIt731TRyJnHQ=)
4: tBNDimUXEukADWJF9dJCQTAu8Xs.roa (hash: xy9pbAco54L3WlU6x7baSUsepcCgwp7AyR8Cg3prULc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:93:09:d7:0a:f3:10:2f:d6:9b:04:fa:43:5f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Oct 20 00:01:15 2025 GMT
Not After : Oct 21 00:01:15 2025 GMT
Subject: CN=797311d6e9f8ea5bcb363b41dd2e54214a3e5270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:59:98:f5:57:a7:35:b2:7f:5a:57:e6:c5:
c7:67:0c:7c:a2:c1:56:d9:5b:c8:42:86:0c:01:58:
a8:64:5a:c0:ea:21:c2:ee:be:99:3f:48:31:8c:df:
d5:91:b1:44:b1:e4:05:92:0b:ff:7a:4e:6f:3e:aa:
d1:15:d5:e1:61:c6:a0:02:1f:8e:1d:ae:81:3f:dc:
00:45:59:b6:15:a6:35:b1:89:b0:8e:03:88:39:86:
d9:11:79:6c:1d:2b:1b:f9:59:45:83:8e:b9:e7:18:
49:f3:36:78:1f:a5:e3:d0:a0:ec:63:ff:fe:1b:64:
87:a2:32:29:b6:94:6f:ab:ad:a4:97:7d:fc:06:9a:
1c:76:7a:de:f3:19:d0:34:32:6b:2d:45:33:d3:e4:
c3:de:f6:cc:cf:78:10:e7:20:ad:d6:1d:b5:c2:a0:
81:06:66:49:69:e2:a1:1a:9c:79:a2:cf:92:79:1c:
0b:53:03:a2:99:94:08:72:e6:1e:c7:15:13:a0:8f:
d9:39:b8:01:2b:3e:db:5f:c7:4c:ea:c5:3b:61:56:
83:db:ad:06:19:24:0c:62:cb:d6:55:5c:c4:d8:11:
42:00:ca:4c:66:2c:a2:fa:72:18:02:dd:09:9a:4e:
25:a5:6a:ab:3d:1d:e5:84:44:09:dd:b3:3e:44:da:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:73:11:D6:E9:F8:EA:5B:CB:36:3B:41:DD:2E:54:21:4A:3E:52:70
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:d9:85:21:45:1f:f5:97:1d:08:1b:5d:8c:a3:15:c8:5c:ca:
89:65:45:c7:1c:70:b8:64:7c:e5:ca:e5:64:60:7b:46:55:db:
29:9b:18:22:52:0a:72:6d:76:26:2a:ce:f2:44:bc:c6:af:34:
38:d7:7d:dc:b6:3e:87:9e:04:cd:b9:40:5e:fa:a9:a3:63:74:
98:70:17:57:68:0f:a2:73:f4:ec:9f:4e:ff:eb:d0:d7:0c:05:
78:0b:d2:b9:61:9e:27:f0:b2:cb:3d:7e:be:09:e5:a0:ae:e9:
43:51:82:55:8b:43:81:a5:d1:73:56:da:c6:0e:7f:e2:9d:40:
64:d5:df:86:56:ed:bc:7f:6f:de:7d:92:87:27:09:b8:23:77:
52:e7:37:ae:25:d1:b0:04:fd:8a:a3:df:e8:48:e3:40:c7:55:
d5:3d:4a:95:d3:db:29:88:5f:fe:e3:04:9a:e3:ba:56:22:5b:
bf:c9:2e:29:df:96:be:cc:ef:a0:24:e4:36:a9:a3:5f:ed:1b:
a5:34:44:12:86:fe:46:01:6c:8c:65:c9:b2:32:04:c4:7a:cc:
fb:8a:7f:c7:de:c7:91:35:ef:92:d6:79:4d:af:aa:a6:00:8f:
c7:1b:32:04:b5:d3:88:36:28:0a:15:bc:e6:e4:dd:0c:10:cc:
0f:1d:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:26 2025 by rpki-client