Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
File: 9FT4T3gIX46gOklonL43LnSsFTw.mft (raw, json)
Hash identifier: jCr1nrc8BlrpjvsF2YXYe+aMNN5FJo0WaG/G4AKIXe8=
Subject key identifier: 9F:A2:D2:5E:4E:BA:91:AD:DC:0D:D6:1F:95:5C:9D:89:BC:18:5D:7B
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial: 0199FEEBEAD6EEEF5013366EAC3F940ECC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 00:01:37 +0000
Manifest this update: Mon 20 Oct 2025 00:01:37 +0000
Manifest next update: Tue 21 Oct 2025 00:01:37 +0000
Files and hashes: 1: 9FT4T3gIX46gOklonL43LnSsFTw.crl (hash: GRRi+XtntiHzxIMNdxldyzS13W77GlVcGCh9LQsfmAk=)
2: BGu53Mnt6YnfcS4G3l8YVZ-mfTw.roa (hash: QzO5j9RPktNq5NXFjAY7mK7/e0HDOPdGV4+293fHloM=)
3: br5LvPAh3qC25uv5le-_vMirU9E.roa (hash: d5eKzHAQ2jh203ot8SX9ieqegHwAZyoAukOsm+PkxYo=)
4: keFbyWRx9CXFGktePoeob--QEYA.roa (hash: iRz71Y07r23FnbminnQhY3v7rzlViMoRNVr4WwEmWj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:ea:d6:ee:ef:50:13:36:6e:ac:3f:94:0e:cc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Validity
Not Before: Oct 20 00:01:37 2025 GMT
Not After : Oct 21 00:01:37 2025 GMT
Subject: CN=9fa2d25e4eba91addc0dd61f955c9d89bc185d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:8e:46:af:c0:18:ea:fe:83:dc:dd:79:37:
00:d6:ac:ab:a0:df:fb:af:19:ae:14:64:ef:f5:d0:
64:23:9b:aa:9f:68:01:eb:3a:4a:d8:c3:54:be:0e:
9e:9a:4b:04:02:ff:f9:77:f6:7a:72:5f:06:a1:55:
08:6c:a8:fb:d5:94:97:c2:96:eb:69:34:74:7d:4e:
03:e4:c1:a3:d5:16:9c:db:b6:fb:80:68:93:ef:f5:
e9:f7:af:a5:02:1c:de:9c:fd:3c:29:e0:f4:1d:c6:
12:09:e6:f6:46:7e:6a:d1:11:bc:00:ee:c9:09:13:
13:44:68:36:9e:99:90:8f:30:67:d7:77:69:61:49:
ea:a7:a3:a2:fe:c9:2d:8e:16:30:d8:d0:21:45:04:
0a:e7:79:a0:e4:e8:34:63:77:fd:e7:3d:23:6e:f1:
ec:48:5c:14:3e:b8:b6:85:33:51:ae:5b:89:13:0e:
09:b2:4e:41:98:e1:94:52:b2:63:6d:cb:b6:6e:d0:
f9:ae:f0:d2:40:95:d8:4e:20:f8:6a:e4:ba:18:40:
14:d8:94:35:57:c6:bd:62:92:a5:76:b9:5b:39:8d:
fa:e6:a8:50:54:3e:d6:5b:19:84:cc:85:eb:19:5f:
16:21:6b:9f:a2:b5:ac:5c:47:c8:a5:7a:0f:28:c6:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A2:D2:5E:4E:BA:91:AD:DC:0D:D6:1F:95:5C:9D:89:BC:18:5D:7B
X509v3 Authority Key Identifier:
keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:61:cc:44:d2:4d:d1:c2:15:c2:73:49:a0:79:0f:d9:df:2f:
cc:4f:af:c2:39:ca:87:44:bb:ee:e9:49:8e:34:95:64:08:e1:
59:2d:bf:f9:af:f7:0f:a4:8c:a2:3d:fa:ff:ac:81:99:1f:43:
16:9f:c2:a1:92:ae:79:05:92:43:e8:52:ef:0c:7d:34:25:c0:
a0:e6:26:12:b5:ea:b4:ac:7a:3f:ee:e4:b8:de:57:ee:3f:2c:
2a:4c:ac:a0:39:24:9b:15:f5:fe:dd:07:ac:5b:2c:8d:2a:02:
2b:14:92:04:3f:8f:d6:f7:07:cc:32:07:bc:af:2d:cf:03:8d:
14:55:5a:7b:fe:a4:92:b4:d0:08:64:2d:d4:0e:70:dd:c8:09:
a4:ea:f8:79:2c:19:b2:b8:3d:17:23:b4:69:8e:ee:61:2a:d5:
0c:a5:3b:96:0b:8d:ed:49:76:a9:6c:bb:8a:4f:95:32:86:44:
38:05:f5:36:13:39:bc:2b:df:75:bf:e7:75:3a:2f:21:71:c1:
76:55:8b:ed:c5:21:b9:1d:1e:d0:2c:7a:29:b3:eb:d5:c5:cc:
60:35:7c:80:4d:53:d9:65:12:20:1d:24:71:24:10:fd:6b:a9:
22:89:ec:4e:84:4d:f5:43:03:c6:6d:0e:75:ca:dd:88:48:d2:
de:d8:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:57:01 2025 by rpki-client