Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: qu4uLIwBCeqcIZQWSYsqRZ5OMD7QkviEoQKrlNH0FwI=
Subject key identifier: D6:C1:12:C8:B9:F0:FA:9D:A4:86:23:C1:18:D0:8D:D9:14:8D:C3:D1
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 0199FE7DD4E42436217DC994737583114A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 16C9
Signing time: Sun 19 Oct 2025 22:01:23 +0000
Manifest this update: Sun 19 Oct 2025 22:01:23 +0000
Manifest next update: Mon 20 Oct 2025 22:01:23 +0000
Files and hashes: 1: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (hash: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: Zf1Pqg+evSbm9WkZb58AUuljRQkpAwNnFD8vYnd0Fd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d4:e4:24:36:21:7d:c9:94:73:75:83:11:4a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Oct 19 22:01:23 2025 GMT
Not After : Oct 20 22:01:23 2025 GMT
Subject: CN=d6c112c8b9f0fa9da48623c118d08dd9148dc3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0e:b4:8d:a1:a3:4a:bd:c1:ab:78:ba:82:8c:
f4:4e:57:1b:07:44:3f:ae:7c:9d:e2:21:c8:2b:79:
4c:ff:c8:ba:04:70:88:cf:7f:3b:30:95:48:fe:0f:
23:63:50:b4:1c:1b:50:ec:f1:12:3b:00:52:a6:12:
33:4b:9b:2e:dd:a3:e4:76:c3:b2:e5:43:58:99:57:
19:44:99:63:64:11:6c:d9:7f:41:43:e8:a0:c3:58:
43:5a:c0:4a:1d:09:db:5c:db:7d:e6:74:db:0f:ab:
25:90:87:48:fb:19:78:09:51:f1:05:66:a4:c2:6c:
de:06:ce:a2:a3:fc:d4:21:1a:55:28:95:42:aa:3a:
ae:f8:ca:57:19:9b:1b:37:16:cc:a3:4f:74:4e:e9:
53:85:9a:2f:ec:7a:c4:95:ba:a8:e5:f8:3a:59:68:
9c:8b:05:63:64:81:95:11:b2:6a:97:d1:ae:50:d2:
5e:45:ce:f1:36:66:f8:0f:46:ed:ac:d7:c4:c6:b2:
07:43:5f:73:95:db:65:1f:0e:1d:96:de:2c:bf:8a:
6f:98:74:11:af:0d:ae:a7:14:a7:ba:dc:43:25:0e:
78:cd:29:0c:8a:6f:fa:91:48:d0:c3:2f:71:88:79:
dc:d9:22:2f:66:b8:81:e2:16:0c:c2:f1:af:50:09:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C1:12:C8:B9:F0:FA:9D:A4:86:23:C1:18:D0:8D:D9:14:8D:C3:D1
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a3:e2:5c:3b:4f:53:8e:d2:8d:89:f7:2f:c9:12:b1:bb:7d:
e7:5b:e5:71:46:53:5d:8b:9d:56:4b:bc:37:e7:29:ef:fa:2d:
45:af:47:d2:a7:a5:20:f3:73:e5:0e:40:d5:56:6a:e2:da:95:
c3:ae:90:eb:b8:ad:1d:52:5b:c8:a8:b0:78:78:52:70:64:ef:
35:7e:43:51:79:2b:d2:56:98:e7:13:79:9e:fa:35:b3:61:46:
f8:f7:b9:bf:40:6c:58:3d:11:95:22:f2:a1:09:82:f9:60:cd:
ad:61:58:0f:5d:6c:a9:0d:e9:98:6a:00:40:d7:86:d2:68:ab:
99:49:30:7c:bd:14:54:8e:39:dc:4b:c1:9e:08:7e:7b:61:e8:
db:49:01:98:19:60:03:fe:b6:ee:14:28:8e:43:75:e3:0c:fd:
10:f9:1c:d7:1e:2d:a6:6e:8b:ae:55:9c:fa:ff:7f:b0:07:e3:
a9:69:18:a9:69:08:fe:6f:dd:ef:6a:33:23:7c:63:fa:69:e6:
49:19:9a:53:51:4f:ff:9e:c6:08:d8:bb:3f:f6:ec:fa:c2:4a:
f1:ca:8c:03:88:c0:c3:b1:03:9a:62:19:9f:86:8b:54:67:08:
62:d0:06:25:9e:dc:2a:19:cc:0f:f8:34:a5:e3:e3:07:ba:5e:
df:1d:89:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:56 2025 by rpki-client