Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier: RDDpPuzkqEz5ZGSNJTd7AuEEWT0Nr4nQ55WxtvF+7FI=
Subject key identifier: 45:B8:1B:9A:EE:58:76:A2:4D:D0:26:ED:1B:DF:73:4B:7A:35:06:0C
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial: 0199FC8F291A51218652FE911E15AC8B3D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number: 11E9
Signing time: Sun 19 Oct 2025 13:01:04 +0000
Manifest this update: Sun 19 Oct 2025 13:01:04 +0000
Manifest next update: Mon 20 Oct 2025 13:01:04 +0000
Files and hashes: 1: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: Do78nbBjhB6D7QdIQ/4h/3pD9/9gncDmaz+oT+uELX0=)
2: DaSMaWZYfnj6ceinzYPrOhJJgQA.roa (hash: tLMLMu2mXxzV//rWf7p3b0LjE6TE93dgy9UoXP39ok8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:29:1a:51:21:86:52:fe:91:1e:15:ac:8b:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Validity
Not Before: Oct 19 13:01:04 2025 GMT
Not After : Oct 20 13:01:04 2025 GMT
Subject: CN=45b81b9aee5876a24dd026ed1bdf734b7a35060c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:e2:be:af:dd:ef:50:4c:f1:e0:a5:b2:c1:
c3:7e:8a:6b:a0:31:3c:cc:ff:93:63:34:94:1e:a8:
8f:70:91:fd:f8:a5:96:a5:c5:d8:6d:96:c3:33:58:
d4:f2:f7:19:33:c0:02:10:f8:66:bc:aa:9f:66:18:
4b:e5:47:f9:d6:e1:4f:e1:23:93:6f:75:35:f0:a2:
80:be:b8:73:87:dd:54:aa:0c:62:77:62:b2:d7:72:
2e:29:ff:4d:e4:0e:0b:16:df:28:4a:28:6e:22:c6:
3f:06:4a:68:a8:25:2e:69:5a:8c:ef:60:1c:e3:b5:
b4:b9:38:11:81:70:cf:e9:ee:31:67:bc:ac:f3:1a:
1b:82:ca:12:97:3c:21:47:7d:1e:54:14:c9:30:47:
b3:0b:a5:bc:6c:77:36:33:c5:f5:67:91:46:1a:7e:
33:6d:1d:bf:b2:cc:b8:dd:ac:c9:d6:3e:96:8e:1a:
89:4e:82:c7:84:80:a6:11:89:7a:08:a7:5a:cb:c1:
90:f4:4a:ca:1f:16:4a:11:8a:a0:cd:b3:9d:af:5c:
de:db:27:9f:ef:98:7a:91:2b:d6:a0:e7:c6:be:1b:
1f:36:18:ba:42:43:84:12:cd:97:84:25:75:9b:92:
0c:0e:3d:16:7f:58:93:f7:c3:1b:9c:6f:ce:af:9d:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B8:1B:9A:EE:58:76:A2:4D:D0:26:ED:1B:DF:73:4B:7A:35:06:0C
X509v3 Authority Key Identifier:
keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:09:43:ac:20:30:b8:97:82:28:87:dc:44:53:37:66:47:96:
ae:19:bb:b5:08:cf:2d:cf:76:a7:a1:5b:c8:f1:dc:7f:0d:91:
c5:7a:c4:60:91:59:0f:7c:a3:00:88:dd:5b:8d:e5:d4:15:83:
3a:fa:56:f4:ae:48:a3:4d:5c:34:ea:2d:32:9d:32:2d:ae:e4:
83:f0:ef:7e:ae:a8:0d:28:4e:3d:eb:69:c7:37:25:d2:33:d3:
f5:35:93:ec:aa:54:43:ff:38:13:4e:77:a0:b0:d5:6b:46:bb:
98:bf:68:be:f5:74:d6:b1:a3:eb:f1:ef:88:01:ce:f7:50:6b:
20:a0:56:9f:9b:44:87:55:c3:6d:f0:3f:c3:d2:1d:a2:f6:20:
2c:72:b4:84:6b:a8:e0:9c:86:a2:b5:64:10:67:fa:bd:1c:38:
2e:c4:d6:c2:5e:4b:ee:86:92:50:8c:60:46:12:7b:b1:c8:b9:
77:30:de:29:2a:33:05:d9:4f:9e:36:d5:b2:5d:e4:52:07:5e:
37:69:83:e4:da:39:0e:d7:e4:4c:17:2b:eb:c5:18:fb:b0:89:
d5:b0:6c:e7:93:39:4b:81:60:27:41:6d:b9:6b:bf:53:65:89:
fa:a8:ae:a6:47:dd:58:fc:a5:7f:d3:fe:18:4f:76:f4:d9:b0:
09:0b:c7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:41 2025 by rpki-client