
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File: 9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier: oGTcB/v5ISmCMSRk8fOYy9wtE5FLqYB51Jd/zUvqFSY=
Subject key identifier: 34:E8:11:A5:57:B3:BE:F4:40:ED:A6:95:0D:8D:AA:22:B1:AE:88:EB
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer: /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial: 0199FCFD225A33CF7522D037220F3B0CA22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:11 +0000
Manifest this update: Sun 19 Oct 2025 15:01:11 +0000
Manifest next update: Mon 20 Oct 2025 15:01:11 +0000
Files and hashes: 1: 88-pt2hIN1dTOb7W_yyIcsyIKos.roa (hash: rXxfNXMHY0jcVNFeL7a/dvDj6ZDtDB0GLjdB35wLnIg=)
2: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: qV5ueoSOQgJdWe8MJRCFCVGJNpxpKFTbUI+d+X2n/Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:22:5a:33:cf:75:22:d0:37:22:0f:3b:0c:a2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Validity
Not Before: Oct 19 15:01:11 2025 GMT
Not After : Oct 20 15:01:11 2025 GMT
Subject: CN=34e811a557b3bef440eda6950d8daa22b1ae88eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:95:85:0a:61:48:97:3e:d4:71:82:fe:8a:
53:8f:ee:f9:a7:50:53:7e:ee:e5:d5:1d:6c:cc:af:
10:b2:a8:73:af:9d:8e:ec:b9:09:5d:65:7e:63:3d:
a7:fb:23:3c:03:ab:b2:ca:c3:c4:5e:1f:3c:51:0f:
22:68:eb:80:4e:85:e0:ba:41:64:33:bd:5a:36:74:
19:4b:43:e8:93:08:dc:bd:6b:5c:57:a1:b9:05:ef:
57:ec:e9:0d:d0:c5:39:61:43:64:6f:b4:9d:4b:db:
53:58:5a:8d:87:68:98:d8:d1:c4:98:16:02:a2:e7:
9e:77:c7:a7:04:3b:dc:90:5b:b3:dd:ab:88:b5:c3:
4d:f4:e1:13:18:80:af:d4:b3:46:f8:b1:10:9b:89:
59:33:aa:58:65:7c:06:31:d2:78:83:5e:b0:ce:4b:
66:a7:8e:6c:69:7a:2a:15:3e:07:7c:78:a0:30:11:
8b:cc:c2:48:ed:46:c4:55:6c:d0:84:38:1c:b6:37:
04:98:a4:8a:6d:bc:7e:61:a7:7c:27:54:d7:d3:43:
9e:7d:e7:ca:c9:f9:6b:4f:30:c3:9a:5d:1b:26:8a:
e3:8b:56:5b:2e:d3:50:05:ab:c3:25:bb:99:23:27:
67:7b:48:f9:98:36:3b:02:5e:df:58:91:e0:1f:d1:
43:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E8:11:A5:57:B3:BE:F4:40:ED:A6:95:0D:8D:AA:22:B1:AE:88:EB
X509v3 Authority Key Identifier:
keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:71:65:22:0b:7a:b0:41:e1:53:2b:e6:aa:ef:dd:e3:30:1a:
6f:29:29:06:76:1a:67:f4:aa:1d:a8:b5:bd:36:ac:df:1d:33:
2c:ab:a8:ed:4c:9d:27:0a:27:56:bd:0e:f1:7c:8d:8e:2a:bb:
dc:8a:c0:47:d5:85:b8:92:49:9e:9a:76:3a:ea:32:e8:80:a0:
c2:3c:b2:c6:db:7b:73:44:24:4c:d0:42:fe:da:20:e4:c8:33:
42:80:a7:ae:3d:64:7c:af:34:ee:d3:a8:66:d6:df:5a:c9:65:
b4:59:a7:fc:8d:0f:20:a1:b9:88:a2:13:c1:1f:ae:e3:ec:17:
7c:a2:9f:b5:78:58:6c:f5:c5:e9:a8:f0:68:d6:eb:b3:9a:c4:
1d:0d:01:a7:04:20:bc:c9:6e:dc:a6:d3:b4:31:12:ec:e1:1f:
91:ed:b4:55:2a:da:ec:11:1e:04:04:63:6b:d0:78:49:5c:45:
38:1c:d1:68:60:68:c8:cc:84:73:b2:7a:43:20:0c:af:54:36:
18:a6:ae:ae:5f:1c:43:f7:d0:4e:08:f5:cf:63:a2:7c:09:66:
a9:fb:f0:93:5d:09:f3:0e:aa:12:59:03:b9:95:4c:27:fd:7c:
e8:80:a5:24:56:2c:27:4b:24:75:84:63:b0:c9:b9:e3:ae:cf:
0e:69:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:27 2025 by rpki-client