Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier: AurHwl+fKQPT8iW55YNjcj30dXzmLTuMYb14bnnVHsA=
Subject key identifier: DC:02:54:58:A6:22:AD:9B:60:85:A6:B4:C6:5A:96:C4:30:B0:7A:22
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial: 0199FEEBE2A127682BE620B120A841B31FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 00:01:35 +0000
Manifest this update: Mon 20 Oct 2025 00:01:35 +0000
Manifest next update: Tue 21 Oct 2025 00:01:35 +0000
Files and hashes: 1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: 5H7yzjX3mGL7pDyBe6gK0eMbi3Nvgp8sbfcHQm3lfhw=)
2: LF_3HwZmRrCki2d-FP5TfnY-Yfo.roa (hash: OqUUHUSkyKdGpgaBU1hHW7IYtyTJfajGz9ID3t644ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:e2:a1:27:68:2b:e6:20:b1:20:a8:41:b3:1f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Validity
Not Before: Oct 20 00:01:35 2025 GMT
Not After : Oct 21 00:01:35 2025 GMT
Subject: CN=dc025458a622ad9b6085a6b4c65a96c430b07a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:9d:3d:35:a9:f9:9e:c5:f7:57:4b:2f:c1:
91:f6:c9:f1:35:47:34:a4:9c:e5:0b:1c:83:f6:60:
41:1d:b2:86:35:a0:45:1a:24:94:93:10:55:2e:26:
81:1f:9b:dc:6f:1a:bc:3d:ba:65:a2:92:8c:e9:e1:
9e:67:fe:11:85:29:d1:c5:0b:d8:5d:c8:b7:a6:a2:
a3:29:3c:d4:f5:8e:f5:2b:6a:28:03:15:65:a3:b2:
12:75:e3:4c:a7:59:e2:d9:59:23:36:ee:53:3c:a4:
95:18:36:d5:b6:13:4a:6b:fe:06:b9:59:0b:ec:71:
2d:95:f3:d8:f4:0e:3d:3b:3e:1b:35:58:9b:d6:28:
35:16:47:c6:6e:c5:b6:55:01:8a:35:d5:08:6d:e4:
ea:0a:cf:35:8d:63:85:6c:af:70:57:46:80:a2:00:
43:1a:80:d4:66:7f:e1:7b:71:49:d9:56:1c:e9:63:
4c:ed:d0:d9:b0:17:76:96:98:12:fa:04:2f:d1:4c:
0c:d9:a9:49:30:36:91:94:88:4c:14:f2:ad:96:7e:
a3:b4:15:09:1e:60:06:72:31:0d:98:07:a9:1a:31:
5f:c5:b3:36:a8:f1:41:08:af:0f:4d:da:03:71:16:
54:ea:12:f0:f4:18:2f:99:91:63:1f:6a:6f:3b:66:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:02:54:58:A6:22:AD:9B:60:85:A6:B4:C6:5A:96:C4:30:B0:7A:22
X509v3 Authority Key Identifier:
keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:63:0d:fc:24:67:81:e7:7e:87:6a:3f:71:6c:e7:28:6b:02:
c1:1f:ed:48:a1:67:fd:1f:75:2a:db:78:1d:76:3f:22:8e:78:
e4:83:dd:53:42:d5:6f:c4:94:b9:52:b6:ca:bf:81:f6:69:66:
e7:a6:40:fa:24:ce:b5:1c:15:6f:15:c6:97:22:43:fc:a8:cc:
dc:f6:42:3e:0f:b6:89:d7:66:09:6a:dc:5a:d2:3e:ca:4f:04:
57:5b:ad:75:46:49:e2:ce:73:5b:68:c9:ed:f1:20:3f:39:da:
34:9a:a3:2c:5e:32:8b:65:66:f3:da:b0:a6:0d:e7:6d:22:2d:
7f:b1:0d:18:6a:44:c1:57:3a:93:de:7a:93:cf:7f:df:11:c5:
05:c8:64:d2:20:75:fa:97:3d:43:4b:4d:a3:06:48:2a:7d:7b:
4c:9a:8c:e3:87:14:d0:17:27:5d:5b:35:9f:40:17:89:fb:67:
13:22:72:f1:75:82:de:94:f7:c0:96:32:4d:7f:8a:34:41:27:
a0:52:15:5f:b7:36:3f:52:77:8a:39:96:5d:a8:0b:fd:f0:ee:
3e:5f:51:54:8b:b0:76:9d:4e:19:cf:83:c5:60:49:ba:f8:d9:
bf:a3:f2:03:99:f8:c0:87:bf:72:72:ef:ee:e8:2e:90:63:e4:
64:02:0f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:55 2025 by rpki-client