Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier: ekf8kSrq9Q4+IwZkAmbOuwQTeIneQLns7EaR04xbpqI=
Subject key identifier: 07:9E:10:78:32:25:B8:F7:59:DD:21:26:42:51:3B:65:FA:74:7B:3A
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 0199FF22C6FED5C9C071CAA22DE501B50DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number: 012D
Signing time: Mon 20 Oct 2025 01:01:33 +0000
Manifest this update: Mon 20 Oct 2025 01:01:33 +0000
Manifest next update: Tue 21 Oct 2025 01:01:33 +0000
Files and hashes: 1: YkbGKc-LGqIQZMDerpDN8XDOTbw.roa (hash: RY+DUa9ZajYzyfuzC6xFjBj7ICr29ESsVlrxpHdgeWw=)
2: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: qfA0SVR+uS4mju1MhDnnWBwCJiK8nDDSWFJv0AZIYm0=)
3: zGrKv0NNYS_xjhh1uLNHNu5c_wY.roa (hash: OEzd69K7Il75QSQW6UQvA0dRBfsE2azJdJL9XybJ68I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:c6:fe:d5:c9:c0:71:ca:a2:2d:e5:01:b5:0d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Oct 20 01:01:33 2025 GMT
Not After : Oct 21 01:01:33 2025 GMT
Subject: CN=079e10783225b8f759dd212642513b65fa747b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a9:20:26:90:53:72:28:fe:23:dc:26:32:2f:
d0:d4:36:51:02:0d:e7:15:5f:b1:97:f7:ea:8d:88:
ff:8d:db:0d:5e:8c:ec:7e:91:90:30:e8:6d:dd:46:
2c:b7:ce:48:e0:6d:e4:94:34:0e:03:3d:c8:e8:a4:
e8:d8:54:23:af:b5:bb:1b:0c:a1:50:62:98:93:9b:
44:a9:7b:24:d7:93:fe:8c:3f:5f:13:a8:61:c8:6d:
f0:f1:37:e2:8e:41:90:f8:02:a2:ca:0a:b9:84:7f:
2c:47:94:81:24:af:c0:ca:d7:3a:35:fa:72:f9:87:
5b:56:53:49:40:4d:2e:ec:fd:87:33:1f:53:fb:1a:
5c:11:6c:94:3a:61:25:a0:37:f7:a6:ea:2b:1b:76:
cb:73:4d:c5:cd:cf:e9:4b:e2:9c:8a:5e:46:17:86:
13:fa:dc:b1:c2:3e:51:0f:2f:df:63:bb:34:33:74:
44:ce:44:a1:29:69:e5:e4:3e:9b:13:03:b6:d6:de:
e1:ac:c6:69:31:c5:81:b2:3a:a8:89:42:09:d5:6b:
a4:51:dd:92:fb:2a:7a:7a:a9:b3:c3:ed:13:43:5c:
8a:b7:43:65:d9:70:4c:83:40:61:61:69:70:61:97:
e1:1e:e2:87:fe:3f:76:44:6b:5f:53:bd:5a:21:f0:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9E:10:78:32:25:B8:F7:59:DD:21:26:42:51:3B:65:FA:74:7B:3A
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5c:de:00:ac:fc:bc:29:bf:e1:80:1d:94:37:9a:5f:a8:bd:
09:fc:d0:2e:d6:61:58:dd:82:33:b3:09:7b:50:dd:5a:84:ba:
ca:c3:45:98:84:5e:e9:44:ad:f3:af:5d:3a:1d:7d:57:4a:e3:
b9:55:4b:4a:25:61:7d:34:77:4a:29:e9:80:99:ef:41:60:f6:
2d:7a:b9:d0:9b:38:95:88:0a:88:37:fa:61:37:06:f1:7d:41:
61:b3:49:b2:a7:36:8b:ac:1b:a7:68:45:d2:15:d8:99:a1:32:
47:65:0d:26:99:bf:40:ae:0f:c5:49:9b:0f:82:40:aa:ac:9f:
2c:a3:6c:88:19:6f:8e:a4:22:a4:6c:66:64:3e:59:a5:b3:43:
35:41:6b:63:18:d2:de:75:c8:23:7b:77:bc:ea:34:25:5c:5b:
f5:28:ef:9f:40:3f:3a:5f:66:27:8a:98:a9:61:f0:9a:88:ac:
43:9b:ab:83:4d:db:aa:28:c7:c5:40:91:a0:41:21:09:5f:ed:
9b:da:34:14:0b:dc:e6:d1:ee:99:9c:4e:66:b2:d1:65:bf:1c:
0e:16:48:70:ac:26:56:ca:a7:e9:10:c0:56:36:cd:b7:ee:c2:
cb:8b:6b:74:19:75:24:11:65:2f:a1:07:a3:fc:11:c7:ed:9f:
72:94:d3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:09:26 2025 by rpki-client