Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier: r78f9yAgaETf8Qk1LyG1gW/W9xBy2U194k4TCCO7n+g=
Subject key identifier: 69:E2:AB:86:D6:DB:7A:06:11:C6:50:AA:D9:0B:46:3D:37:07:73:C3
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 0199FE102CB03A1C050B00D2B07A3478F2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 20:01:36 +0000
Manifest this update: Sun 19 Oct 2025 20:01:36 +0000
Manifest next update: Mon 20 Oct 2025 20:01:36 +0000
Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: vucmOgfJZQp37ErZeUxpjIEqStx3MM4qUsbKF40xktY=)
2: KNQf97WzItrOYioPwLu-Tdh4fNc.roa (hash: RIjtWc8dl547OecCvbWgp63AohvHeAGZkMZVo9/tFEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:2c:b0:3a:1c:05:0b:00:d2:b0:7a:34:78:f2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Oct 19 20:01:36 2025 GMT
Not After : Oct 20 20:01:36 2025 GMT
Subject: CN=69e2ab86d6db7a0611c650aad90b463d370773c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:e3:26:9f:e6:03:d1:10:8d:f5:4c:6b:15:
b7:20:7b:84:dd:9d:f9:cf:1d:5f:ba:67:a0:30:9b:
7d:5e:ee:3d:2a:35:9a:47:b0:06:96:70:96:c2:6d:
ff:13:4b:6e:a2:c2:5a:bd:d3:3c:0e:09:7f:3b:cc:
92:b4:79:96:84:c9:81:a6:a2:a4:9b:c0:31:17:4e:
f7:25:f1:13:a9:ca:13:d9:7d:ac:bd:f6:e8:fc:35:
04:99:f0:35:cc:7f:7d:e4:e8:7a:fd:3a:68:99:4b:
48:33:31:d6:97:16:b8:92:0a:68:2f:00:19:5a:f3:
97:95:dd:76:3b:86:86:8f:a8:2c:f1:30:f7:ab:5d:
58:da:aa:38:4b:79:44:15:34:0a:cd:87:91:83:5f:
3d:7a:a3:d1:e3:6f:42:80:a3:a5:d4:bc:0f:20:1e:
6c:06:da:56:79:18:4e:28:1f:fb:56:37:2c:f4:f7:
63:01:d2:1a:3d:6c:37:76:a3:7b:5b:53:59:53:a9:
3f:d9:fa:1b:3e:0f:1f:5f:1b:10:89:1b:df:98:35:
50:12:c4:c0:f5:1d:99:73:01:47:fe:2e:69:05:48:
a3:67:dd:9b:1f:f2:59:d5:61:7c:7a:77:ef:2e:82:
04:1f:35:f0:b2:68:c4:76:68:2e:9c:41:ef:5a:37:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E2:AB:86:D6:DB:7A:06:11:C6:50:AA:D9:0B:46:3D:37:07:73:C3
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:95:dd:ae:0e:af:63:73:44:6b:d9:be:bc:16:b2:bf:e4:bc:
82:e2:04:08:12:a6:df:7f:4b:2e:1c:7e:9b:a0:84:59:0c:d3:
4d:99:38:1a:b3:4a:39:96:b8:0b:69:19:b7:09:ab:ec:8e:c1:
a3:27:fa:db:c8:fc:f3:3e:9b:6a:fe:c7:26:b7:a1:d8:d8:a3:
a5:59:14:97:d1:1e:b5:d1:37:10:79:24:8f:7b:42:4a:dd:14:
61:d5:f8:50:c0:ef:22:37:00:62:6a:6d:e9:84:90:09:cb:85:
cc:d6:93:1e:da:1b:ca:a1:c8:d4:ae:6a:cd:05:82:33:09:5f:
9b:cf:25:7c:6d:2b:83:3f:48:39:d1:3f:69:dd:86:94:7d:a6:
d0:e5:fa:2e:9b:54:dd:dd:57:a3:a6:13:ce:07:6f:2a:4f:80:
af:b5:06:f0:a5:b8:83:13:42:cf:4f:7c:1b:ce:f7:bc:cd:d9:
b4:5b:f0:84:5e:55:03:0b:b2:87:6e:4e:bc:fe:2e:01:52:6f:
36:7a:d2:f4:34:de:78:74:41:51:36:9b:b8:d8:91:6f:63:7d:
07:26:44:bd:5f:74:0b:c3:6c:22:a3:0e:5e:b9:58:62:cf:ea:
60:a3:0f:d0:a2:61:47:1a:cd:7b:81:53:42:ba:a6:be:be:3b:
38:bb:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:50 2025 by rpki-client