Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier: ONreVg7655DcmEJs1+BimCQwu6m695+kdt1EeNrocBU=
Subject key identifier: 02:67:F9:A4:46:94:F2:B6:77:CD:FE:0B:CC:2F:4F:27:C9:5B:72:33
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 019A006BE8E770605D9C3EADA447FE207167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 07:01:03 +0000
Manifest this update: Mon 20 Oct 2025 07:01:03 +0000
Manifest next update: Tue 21 Oct 2025 07:01:03 +0000
Files and hashes: 1: 1-WLV8VecHIiJX48ZCRXCPnkSV1w.roa (hash: LW+UjxgXYW+oRlL0a5q0N9JKog1QwqgaxgEIN56GOWA=)
2: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: v2DMQkJljbP3/6/ylyhKS4DtiGKsTKCuzWJmrmtJzKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:e8:e7:70:60:5d:9c:3e:ad:a4:47:fe:20:71:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: Oct 20 07:01:03 2025 GMT
Not After : Oct 21 07:01:03 2025 GMT
Subject: CN=0267f9a44694f2b677cdfe0bcc2f4f27c95b7233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:44:70:69:27:6a:33:a5:06:01:4a:3e:1d:
15:ae:97:0b:cd:50:d3:93:7f:da:3d:eb:27:f6:16:
73:6c:6d:d5:62:35:ac:d6:d0:3e:f2:2e:d5:a4:53:
7b:16:46:70:e5:42:90:1b:35:65:07:37:0f:8d:dd:
e5:7e:19:6d:94:5c:99:88:0b:12:10:3f:c6:26:10:
e6:e3:4f:74:1c:4c:ba:db:1e:68:63:86:8d:3a:8e:
77:41:aa:98:f5:99:30:14:52:4a:5f:a2:8c:a5:82:
9a:ec:51:74:ef:94:c6:56:be:03:a3:a1:23:20:50:
f5:c2:f2:10:bd:49:7e:51:70:71:c0:4f:f1:f6:df:
a4:c6:87:15:af:42:b4:23:5b:10:ba:3f:76:50:5a:
1b:a5:ff:fa:70:03:9f:a2:df:47:00:99:e8:60:ec:
e7:25:c4:fa:08:40:2f:2d:84:76:1b:14:6c:52:ef:
9a:a4:f4:70:52:76:3e:30:a4:a5:b4:04:dd:29:4b:
bf:76:ce:0d:b3:57:ce:29:03:c0:83:a9:05:73:0b:
37:13:65:64:ea:24:f8:00:e3:b4:9d:29:52:8e:16:
5e:fe:8a:c0:af:3c:cc:20:21:7b:40:c9:6e:c7:40:
8f:76:29:f1:25:55:55:ca:3c:29:c4:a9:9e:2c:66:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:67:F9:A4:46:94:F2:B6:77:CD:FE:0B:CC:2F:4F:27:C9:5B:72:33
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:18:62:a2:fc:be:3e:fc:0a:59:e2:35:d9:81:98:3b:1a:81:
51:66:45:5a:5c:26:7c:ae:13:fc:86:d3:10:76:20:1a:22:65:
10:ec:1d:f3:de:ee:ab:29:47:ca:20:7d:f7:92:fd:94:aa:ba:
bc:14:94:f3:d1:90:b2:7e:eb:53:73:8f:b7:38:7f:64:df:0b:
e7:f7:7b:2b:46:26:4f:dc:0d:49:01:6d:da:99:8e:64:23:ca:
69:fe:c8:eb:57:a9:3e:63:37:ae:55:6c:bf:c1:5b:18:24:e7:
59:c6:e9:41:3e:02:ea:40:ee:be:b6:22:0c:b9:5a:46:3b:fd:
7d:c0:8d:09:68:f2:66:0d:3e:43:d3:d2:5b:57:3c:31:f7:a5:
f8:12:c1:4f:9f:c1:96:73:78:16:c5:8e:87:81:8a:dd:fd:0c:
55:d5:de:8d:31:5a:b5:e7:29:ef:bc:9b:80:82:6e:31:b3:57:
c1:31:96:28:24:28:7e:98:ea:3a:7c:16:f5:5c:74:39:96:81:
1f:36:29:2d:05:97:cb:88:b4:c9:30:01:a1:5d:ae:a0:9d:59:
7f:b4:b3:c5:29:02:ce:e2:59:8c:52:a0:aa:4f:13:3f:d8:f9:
0c:fe:ea:9f:81:be:dc:e0:a1:5d:6d:69:63:bd:69:21:91:ef:
b8:ac:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:47:04 2025 by rpki-client