Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier: T0cI6sNdPwIh57Ks4aHeE9FJpPi3H5uP892kStLt2UA=
Subject key identifier: F9:6C:0E:9A:0E:28:FD:80:EB:B0:76:B3:8B:42:21:A9:B1:B1:CA:FC
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 0199FC218CAB110256FBD8BF5AF7625E7D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: d9zp6AZxGUIdUrJzz8idXxXqkvw.roa (hash: FfoXAw9lK5hBRkyqnfyBrRUYHwvSIXzUheL45ZXlndI=)
2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: bm9RTsrG7VV3YyP8G5pUt1nHAVNyeJqM3s0SMct1CUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8c:ab:11:02:56:fb:d8:bf:5a:f7:62:5e:7d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=f96c0e9a0e28fd80ebb076b38b4221a9b1b1cafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:84:ed:8a:7b:dc:02:14:4f:e4:44:91:7b:
e1:f8:43:10:2f:b2:88:dd:7d:6e:80:83:d0:56:cc:
ff:6c:b0:e5:22:da:65:8c:1f:0c:cf:bb:de:fd:ee:
ca:54:7a:5f:b2:7a:a9:a5:ce:6d:5f:11:33:d2:4c:
c6:80:fe:b3:fb:fd:29:9a:7d:24:f8:cf:cb:c8:96:
64:c4:19:96:13:28:11:02:14:6f:67:f6:f6:36:95:
61:2d:61:ea:0c:5f:6a:24:e2:2e:e1:d1:ce:6a:9c:
84:d1:1a:92:df:02:2a:b4:6d:a6:b9:bf:35:7b:20:
9d:b2:18:4b:6f:c2:c3:8a:e7:8e:70:d2:5b:f8:53:
ed:34:cd:85:0a:51:f6:df:16:bf:ab:63:00:8c:b8:
26:cc:62:ec:70:ae:1b:51:12:a2:62:df:3b:74:f4:
10:33:45:cb:fd:b4:fb:00:01:84:dd:40:a7:38:95:
5b:ed:de:a7:16:b9:6b:00:04:6e:90:2a:e3:60:05:
da:92:70:45:93:71:41:7c:7e:24:fb:04:7f:e2:94:
fe:77:96:10:df:35:dc:5e:8b:e7:2d:58:0c:68:11:
cf:e0:62:9f:73:65:34:f7:02:5c:54:1e:6b:a2:18:
79:eb:81:f6:3e:d6:29:88:44:8b:d0:93:91:fe:96:
4e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6C:0E:9A:0E:28:FD:80:EB:B0:76:B3:8B:42:21:A9:B1:B1:CA:FC
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:93:76:b7:2b:07:5f:23:a2:8b:69:0c:0d:de:60:a0:a9:8d:
f2:4c:b9:b2:c5:64:22:84:34:cc:f6:f5:f0:51:d3:0e:26:03:
a0:b9:63:c7:8b:4a:fe:a5:98:26:78:8a:c2:38:62:88:c9:0c:
08:7b:72:c6:20:3e:f6:ac:a1:d8:34:cc:5f:0b:18:ff:79:65:
cc:df:38:b7:65:8f:a3:c9:29:2c:bb:b9:0a:7f:a3:ad:13:fb:
67:cb:7d:09:14:7d:22:0c:4d:e4:73:8a:7a:f4:53:f8:d5:1e:
1e:d6:98:34:09:4c:8b:35:cd:06:6e:e6:8a:43:58:b0:3a:cd:
1d:17:96:2f:54:57:46:17:54:f5:96:28:99:89:8c:48:b5:ef:
d4:ba:6b:6a:5a:31:c8:cc:b5:8f:4e:9c:4a:35:bb:03:a7:39:
31:f2:8b:e4:fc:64:16:e5:e4:61:3d:42:a7:e4:b4:a8:f9:77:
81:df:9a:5c:b1:bd:54:95:6c:40:ab:37:77:c1:08:fc:36:d8:
eb:24:de:d0:40:07:d3:37:64:f5:32:dd:d3:f3:66:a9:57:7b:
b1:4d:75:93:0f:51:8f:88:10:01:b9:94:9a:5a:6b:f1:c3:f3:
ff:17:06:07:b3:4f:24:7c:0f:2f:cb:3e:6c:e5:d7:c0:e0:6b:
c9:22:62:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:30 2025 by rpki-client