Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: DvuDEkHSqbH1ubXx6aRyNrqjXRZQZT8XMxPoQWpvlu0=
Subject key identifier: 31:5D:2E:95:98:F0:55:D8:EE:5C:CA:68:9A:B4:BF:67:8A:F0:60:D8
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 0199FBEC2F3B060C5539CF9409DE828D7E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 13F3
Signing time: Sun 19 Oct 2025 10:03:03 +0000
Manifest this update: Sun 19 Oct 2025 10:03:03 +0000
Manifest next update: Mon 20 Oct 2025 10:03:03 +0000
Files and hashes: 1: 1tUtdPntOZo4oZY0gj-5-iL3XLM.roa (hash: qzUzuRDUtz2FZx8A/P+rSyUpdTrCQoQOZBqqm3OS2Vc=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: eG0FMfGInJjWxtW47HUZYf3hXoHYkXEtoj0dOWBM7eo=)
3: r0fYtM8vJLJuud_1zoCTV08hICU.roa (hash: N3MrpQwzFuxLwGpoLCDJQ7HCyHzM8rSnUBKZzdYMHOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:2f:3b:06:0c:55:39:cf:94:09:de:82:8d:7e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Oct 19 10:03:03 2025 GMT
Not After : Oct 20 10:03:03 2025 GMT
Subject: CN=315d2e9598f055d8ee5cca689ab4bf678af060d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:a3:f9:9a:5a:9e:e0:37:b0:7c:fd:9a:7c:
17:75:80:44:9e:2f:95:ff:89:da:b0:3a:fd:33:87:
4e:02:a7:8b:a5:f8:57:21:52:5d:df:75:34:43:dd:
57:5a:dc:ea:9b:1c:ca:e1:a0:b1:bc:b5:ad:b1:8d:
ce:4b:19:57:4f:4e:f4:d5:5a:e2:63:b5:2b:5f:16:
1d:4d:a6:5f:2e:48:37:fd:e0:81:84:3c:9c:b4:1d:
85:ab:b6:98:54:c7:29:33:27:e6:10:5f:b6:c1:2a:
71:30:c0:e0:23:84:3c:09:68:49:73:1e:ee:c4:b3:
3a:59:ac:6a:fb:3c:6e:ce:36:a7:23:1a:cb:db:50:
17:2c:d3:f9:c1:8d:1b:f2:2e:b9:83:49:a3:e9:0b:
ce:47:e6:67:1c:52:9d:1a:61:95:f4:e8:79:85:e5:
0b:85:ce:71:61:78:9e:32:58:05:ca:29:5c:76:bd:
8e:43:c6:3a:30:5e:6c:2e:34:da:f4:0c:72:1d:1d:
2c:f8:2e:98:76:b1:b1:2f:e7:6e:44:6a:61:dc:f9:
39:87:9b:02:46:74:dd:85:37:92:23:25:d0:bf:1f:
8b:a7:74:be:b1:c1:a3:2e:10:66:eb:b4:85:bf:0b:
21:93:16:d6:00:a7:86:76:77:94:d2:4e:ec:88:48:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5D:2E:95:98:F0:55:D8:EE:5C:CA:68:9A:B4:BF:67:8A:F0:60:D8
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ab:41:a1:7e:9b:4f:5e:fc:32:f8:36:81:7a:45:0e:dd:49:
4a:86:07:47:a5:1c:ec:79:82:f3:f3:c4:fe:77:d2:e4:ac:b2:
f8:6e:86:7b:41:d1:44:9e:65:7e:8a:17:a2:e8:38:78:a1:c0:
7c:80:b0:58:87:47:fe:a2:82:51:ab:17:6c:be:68:8b:69:67:
d3:be:6c:81:93:c7:6c:39:52:5d:8e:db:51:91:52:13:4f:a4:
1b:05:cb:ef:46:b0:88:db:89:2b:09:09:23:01:8a:c9:df:70:
8e:c7:ec:5a:f4:3b:54:7b:34:9c:8e:38:b7:4c:32:f3:64:81:
31:9c:a0:7e:bc:25:5d:61:78:e2:9f:7c:4b:d7:db:42:d7:98:
83:1d:b7:9d:9b:e6:77:33:38:43:b2:cb:b8:f9:20:9a:df:96:
fa:81:a7:b0:ef:e7:c5:4c:33:e2:a2:22:45:d5:85:47:3d:04:
b0:8f:81:df:84:79:f7:7c:6f:b1:21:a8:d6:f1:61:c0:f2:b1:
b7:41:97:ba:d8:bc:7f:c0:ae:9f:d5:9f:6f:8a:08:c4:72:0f:
50:73:1f:90:7e:d2:a8:a7:7c:36:0f:59:1a:2c:0b:ed:fa:4e:
1f:3d:0c:8f:09:de:c1:07:41:36:66:a7:1c:7e:fc:8a:f3:ff:
97:d7:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:00 2025 by rpki-client