Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json)
Hash identifier: WgKi9+fr23ZlTu+vyshDFt00qjHSmRCf84u5dPhaNps=
Subject key identifier: FA:4E:57:84:25:DE:BC:AF:4A:89:A2:24:9D:1B:B2:8C:D8:8B:AD:B9
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 0199FCC69C3413779BEF36447BB54E338D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
Manifest number: 1581
Signing time: Sun 19 Oct 2025 14:01:38 +0000
Manifest this update: Sun 19 Oct 2025 14:01:38 +0000
Manifest next update: Mon 20 Oct 2025 14:01:38 +0000
Files and hashes: 1: 2I_gyEpNZ4JuV81yJRUXBVu-KOA.roa (hash: r49ywNskr+Vb41Ou7x0XARQgE2G5ZH5biPRfE9u4cAc=)
2: 2tZ8QlZM2m2IpNLIvJ0W7pbf-Z0.roa (hash: 9Uhvy9O+l0zHDpQPVkCj98q8JIdj7ZhjiR3rxLVvfII=)
3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: /d0f90WtSWdWW3Dc9bT7z11986y7aRRzN8u3jWrspcw=)
4: Cqe38rpbTYcW3IBIj3GE-axW20k.roa (hash: rFb4HKGqgMrSh0TmO+Kz12Dni5W90nAeu/GsQNE5QbI=)
5: RW6wxE8PmfS_l7583dlKYTuULiM.roa (hash: NA5N2aFRPb0HCLNpvXiULoI8i28V3/zHm+oTFj2hW9U=)
6: XViXWtM4Qca08fEngqnKAjV8_6k.roa (hash: FX1LXPYDV9yZbUiSRuPd/ffSUdla1CU7pMstvEpaovA=)
7: cg5wyW1XUiTE1cAkUrbH-_fslDk.roa (hash: zkUw4K8Y/lRpRyDIEZKZW+jZfl1kW8PgsmLXFHW0Eco=)
8: pYT69ekFAz6AyMxjupc4L7m_By4.roa (hash: Cer1nHXkBg7TmA4VluMF+Bs6hly21XolmwIlPkVMAss=)
9: t292OmKp-GnX0MyFpL72FnDc9MA.roa (hash: uIDL5vQGM8ia+mjLC9CmEE4toRqUWbIawZ8YzQbIFpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9c:34:13:77:9b:ef:36:44:7b:b5:4e:33:8d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Oct 19 14:01:38 2025 GMT
Not After : Oct 20 14:01:38 2025 GMT
Subject: CN=fa4e578425debcaf4a89a2249d1bb28cd88badb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:73:5c:bb:33:3d:2d:b4:35:20:8f:ae:3e:3d:
01:db:47:4c:35:1d:5a:04:c7:69:08:b6:20:0d:22:
95:90:52:b6:b3:c2:ef:b8:26:02:de:2a:56:d0:25:
4d:8e:44:ae:7e:17:cf:00:c2:6e:47:db:33:55:b6:
dd:44:07:01:b8:71:5d:42:c9:51:92:33:c9:ab:13:
8a:49:92:a5:5c:65:1f:e8:22:23:79:bf:a7:9e:91:
fa:c0:dc:48:92:61:2d:80:2e:92:e6:da:bf:3d:4d:
a3:f6:53:af:4f:cf:eb:be:49:66:53:13:b2:30:27:
79:c9:aa:23:8b:12:20:f7:81:1e:f2:eb:15:06:c6:
ed:81:84:fd:1a:0a:30:ec:ae:8a:d7:e6:5f:ba:3a:
35:ae:63:91:0e:1d:68:51:b6:0b:d6:11:71:81:80:
88:c1:93:c5:3d:99:94:9f:79:76:bf:3b:3b:d2:9f:
4a:ed:87:14:13:5d:26:65:ff:df:b8:d7:37:40:fb:
3a:74:ff:47:be:e4:19:ad:e1:38:f6:48:19:bc:fc:
eb:2d:24:36:a7:70:a5:d5:cb:a9:32:59:29:7e:d2:
84:d1:c7:f8:4a:55:a1:5d:9c:9b:6c:93:b4:f2:01:
bc:64:a8:cd:dc:e7:00:76:56:e3:eb:56:e7:78:3a:
96:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4E:57:84:25:DE:BC:AF:4A:89:A2:24:9D:1B:B2:8C:D8:8B:AD:B9
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:50:60:61:42:8c:3f:f4:06:a3:51:5e:d4:ab:58:60:c9:3d:
17:78:57:5e:00:f5:98:b7:72:b5:12:bc:1d:41:25:0f:a4:37:
5d:da:03:2b:6f:44:62:61:09:9d:11:c5:96:8e:00:b5:65:eb:
a1:4b:df:fd:19:30:56:cc:f3:0f:93:8e:f2:d3:2b:5b:62:96:
80:7b:2d:0c:dd:92:fe:82:0a:4c:09:51:fd:9d:e8:5d:6c:d6:
0f:e1:55:af:05:ef:5e:22:25:b8:d5:ca:1f:7f:60:5e:14:02:
f5:50:d4:c1:38:5c:6d:89:62:41:13:d6:7d:6c:25:d3:74:bf:
d1:c9:e0:bf:93:fc:05:8d:28:8c:a8:cd:84:45:11:56:0a:61:
09:e8:20:99:1f:74:8f:68:63:e4:a3:c1:dd:13:55:55:eb:be:
25:9f:85:98:27:23:1b:96:e3:dc:8b:99:c2:6d:47:d7:67:4c:
54:dc:5a:f4:4c:11:d2:05:59:92:4f:da:0c:4e:06:21:84:b6:
28:e9:08:18:46:5f:d9:b4:73:f7:54:f5:a3:84:ba:d7:dd:94:
6a:96:59:9a:62:2c:75:fe:db:83:9c:66:7a:f9:7b:e2:ec:af:
e9:f8:9c:41:6c:e7:3d:d9:19:9f:eb:e6:80:65:3a:ba:eb:f2:
56:a6:6a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:03 2025 by rpki-client