Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier: S+3rMOkmlTo3Wd+4pg1NGRy+sN7tHql+WX9LONomuus=
Subject key identifier: F1:91:39:E8:C4:73:76:DE:65:4E:3D:B3:D9:78:8A:86:35:EA:01:D3
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial: 0199FCFDB1A36E044E1C52476B5C1CF947A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number: 12F8
Signing time: Sun 19 Oct 2025 15:01:48 +0000
Manifest this update: Sun 19 Oct 2025 15:01:48 +0000
Manifest next update: Mon 20 Oct 2025 15:01:48 +0000
Files and hashes: 1: 1-SAfEHIPvpIzjeCy5Q8AoZxny3k.roa (hash: B/T0TK6WDLMTtz5a/Y6n6GO2yVmrFuy+pcNqZ8mftfA=)
2: KaQg1luFqQeXclQWU31ivATaEMk.roa (hash: bbZb4Op2H462Hn18DoohrEF0+UuFJwTPdqnyeROhfe8=)
3: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: LaaaF3Bo8oeZ39FoDwm/PlQCYvTa3NSoc4i0vKLjzno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b1:a3:6e:04:4e:1c:52:47:6b:5c:1c:f9:47:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Validity
Not Before: Oct 19 15:01:48 2025 GMT
Not After : Oct 20 15:01:48 2025 GMT
Subject: CN=f19139e8c47376de654e3db3d9788a8635ea01d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:b5:58:7a:99:0c:79:21:27:a5:fa:c7:f2:
c0:5e:c1:5e:4f:b0:a4:66:c0:ea:15:d9:02:9a:9e:
48:8c:63:d3:21:55:51:51:a3:e5:a6:a6:25:bf:23:
11:f8:d4:9a:18:9c:6c:61:22:33:3d:c5:f6:be:51:
6e:e2:01:1e:b7:9a:c4:2d:b3:d0:cc:c3:12:4f:14:
b3:b5:b0:50:13:08:00:dd:b9:e9:7e:a0:5f:52:47:
51:54:47:1f:5c:34:7f:64:a4:61:b2:49:89:76:4f:
f0:c6:10:99:e9:2c:b0:75:54:b1:5f:4f:64:ff:a2:
b4:dd:27:82:d5:77:76:44:ab:ac:d1:41:3e:19:08:
f9:19:8b:70:e4:a4:e2:11:63:e7:d5:eb:0a:c2:25:
a2:18:d8:c5:98:9d:b5:b9:22:60:d4:a9:74:2d:3d:
2e:f9:1e:9a:d5:47:81:c1:43:64:dc:3b:6c:48:c5:
48:14:1a:32:43:c4:3e:6f:a4:17:04:97:bb:6f:37:
60:60:3f:ff:90:09:b9:e1:92:73:61:7d:9f:03:6e:
0b:7a:e9:71:b3:cd:5b:3d:c2:01:6f:fe:1f:21:df:
e3:bd:99:a7:47:2e:2c:43:66:11:11:02:74:2e:16:
8f:c4:c3:80:5c:a5:18:10:db:0b:5c:83:e7:37:f7:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:91:39:E8:C4:73:76:DE:65:4E:3D:B3:D9:78:8A:86:35:EA:01:D3
X509v3 Authority Key Identifier:
keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:36:fe:2a:61:6a:70:41:7c:92:75:34:48:12:bc:00:72:14:
6c:c1:77:c8:15:11:c0:f1:15:f6:8a:9c:99:ee:4a:b6:ae:ab:
ec:b2:52:d6:85:9f:9b:34:50:28:9e:dc:91:b1:2c:8f:3b:79:
a3:0c:9b:e3:09:8f:d0:fc:ef:9c:c2:93:24:5f:9f:6b:fb:f2:
0e:ec:ea:d0:9f:48:ae:30:ae:dd:6d:d9:c6:fd:28:7a:db:cc:
4b:ae:3c:82:50:31:42:99:68:65:26:dc:70:1a:c5:78:50:3f:
9e:0a:1c:b1:84:f7:c5:b2:b2:df:ce:8c:a7:63:99:1b:d3:63:
a9:96:60:8f:0f:a5:65:51:9e:cd:26:7e:99:2a:47:59:d6:74:
92:1a:14:d4:7b:cb:c7:47:36:70:af:d5:db:2a:87:5e:af:08:
b7:0c:33:71:98:eb:45:21:7a:80:1e:e7:81:32:1e:59:1b:46:
a9:0a:f9:dc:8a:83:f8:3c:91:9d:a2:fd:9e:c8:1e:aa:d4:0a:
78:f6:6f:33:3e:c4:69:23:de:6e:16:6d:56:94:57:6f:8d:05:
43:3d:3c:dc:1d:97:90:34:2a:fa:bd:be:d1:d8:73:1c:3f:84:
a8:5f:9e:46:ed:fb:57:bf:06:c9:84:c8:e8:d1:44:8a:ea:38:
bc:24:e6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:34 2025 by rpki-client