Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: WwvINK4hhmtydVwJwBXOEBbt8H/+bBHnmxPeif88NhA=
Subject key identifier: CF:31:13:D1:9D:89:4E:09:F2:D9:72:F5:52:0B:57:62:2D:4F:54:E9
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 0199FB45EA7438D57C7E195E399355748A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 07F2
Signing time: Sun 19 Oct 2025 07:01:27 +0000
Manifest this update: Sun 19 Oct 2025 07:01:27 +0000
Manifest next update: Mon 20 Oct 2025 07:01:27 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: SmoiSjiUSz6zAdZ88YbbhPGyFDNqrgbtcKN++jc29Jg=)
2: K7A7C17ACPryQjif4dPHFWCYnmw.roa (hash: yO751NJRBOSn6gMdo40XzsiJt+C4xy6LseVpnpZi3tM=)
3: nkm_AqdgrcdDszFPZGQsvTeQ99w.roa (hash: tWZj3SfE+CRbF9Ic1OICFS30cFtSOef9JMakRYCQj78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ea:74:38:d5:7c:7e:19:5e:39:93:55:74:8a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Oct 19 07:01:27 2025 GMT
Not After : Oct 20 07:01:27 2025 GMT
Subject: CN=cf3113d19d894e09f2d972f5520b57622d4f54e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:0d:be:4e:bb:c5:c3:4b:8b:3e:cc:d5:19:
1f:4e:45:10:d9:2d:49:e7:1a:df:ee:cd:a1:e0:82:
cb:b4:84:fe:2e:c7:cc:88:ce:aa:58:80:f2:4a:27:
c3:54:5a:ba:fa:11:8c:c6:b1:c1:1a:24:72:7c:59:
22:da:fc:39:c8:96:81:71:23:b6:c0:86:c2:4e:ca:
70:5a:5b:28:1d:3e:3b:76:6c:ea:a6:ad:2d:e7:9a:
a7:b2:12:bd:d7:8b:80:96:ee:d2:a4:09:49:a9:2f:
bb:d1:35:e5:87:3b:11:9c:e9:01:70:16:e4:fe:e6:
28:f4:84:8e:dc:a4:7a:f9:40:6e:80:14:a3:42:89:
06:de:a2:78:42:c4:35:c8:d9:83:06:68:c0:49:db:
37:6f:06:92:15:d6:cb:f1:f3:27:1c:65:d5:d3:02:
41:66:95:1b:6d:23:a8:96:1c:e4:65:ae:67:15:e8:
c6:75:a1:03:7b:af:10:c2:ea:d8:39:4f:8b:b5:47:
7b:9d:f8:26:91:8e:a3:0d:52:cb:be:61:d0:8c:51:
21:e1:72:e8:fa:a2:26:f9:04:d4:7d:7c:ab:d3:55:
a3:39:ca:10:1e:42:2d:a1:d2:d0:3c:22:29:71:5c:
57:f6:79:ea:0a:c9:90:c7:38:2e:d5:f5:7f:fa:29:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:31:13:D1:9D:89:4E:09:F2:D9:72:F5:52:0B:57:62:2D:4F:54:E9
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:88:a3:6b:c9:12:4a:ff:1e:07:5a:a4:3f:ff:df:60:21:2d:
8e:ab:03:14:8e:42:73:a4:35:94:c9:bb:cd:a4:29:b8:b4:5b:
e9:d2:1b:56:be:59:03:6a:48:b6:85:2a:56:bd:31:34:c0:bf:
7b:86:c3:49:dc:63:76:47:80:eb:c2:03:c5:e4:b8:53:57:fa:
97:aa:5a:09:8a:a8:3a:a3:25:92:ee:7f:7f:f2:7d:7c:51:4f:
13:4f:31:25:64:fa:ff:91:44:80:aa:34:55:11:0c:3d:46:78:
ca:fe:d3:5b:c2:49:b4:de:c8:b7:6a:49:3a:8d:7b:bb:68:a9:
ed:43:ab:5d:57:82:a8:d5:33:f5:4b:6d:eb:e1:4b:cf:0f:53:
ad:61:81:2a:8b:a0:ac:88:96:6c:d6:71:04:03:21:20:d3:0d:
90:06:b5:f7:e8:52:6a:38:a0:71:19:51:96:88:63:46:2b:cb:
07:d7:ab:91:f8:f2:61:5c:73:2b:8c:04:57:62:c1:83:ed:85:
dd:27:97:f9:2d:f6:30:2e:c3:1f:65:2e:75:0f:2b:7f:43:ce:
06:c5:3f:76:ae:58:f5:10:cf:8e:5f:58:b0:56:2d:3c:de:b6:
12:0a:db:6b:c1:b1:1d:e5:63:a4:c2:5d:ff:c4:90:d1:9b:fa:
b9:80:f3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:08 2025 by rpki-client