Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: qH/BnHFIs/SPqLaYGiVk8eJjZd/bhRnvJ7q5hTPoszw=
Subject key identifier: A6:3D:58:90:1E:73:EA:DC:B0:D5:C5:28:0E:D9:BC:19:94:80:75:AA
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 0199FC8F6E39917C8F6C8D543D9C6C99AA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 13:01:22 +0000
Manifest this update: Sun 19 Oct 2025 13:01:22 +0000
Manifest next update: Mon 20 Oct 2025 13:01:22 +0000
Files and hashes: 1: jQsHaj5ydFI2fziM46K4sV8khMM.roa (hash: /VZu49ELcVRt0AgBq70u1HUIw5xDpnWHzAN7Dc2pulg=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: 79DpHemMWI7fh93NuNXeK1ns8TKeRvGd6ju7ZkCfgdg=)
3: tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa (hash: lo7qT/3mV2HNXlaDbWGrnZSKU8gfCipkct2DwMPEdOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6e:39:91:7c:8f:6c:8d:54:3d:9c:6c:99:aa:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Oct 19 13:01:22 2025 GMT
Not After : Oct 20 13:01:22 2025 GMT
Subject: CN=a63d58901e73eadcb0d5c5280ed9bc19948075aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:4e:5c:d2:41:33:55:61:7b:f6:74:7e:f0:
6d:ff:66:b4:f0:d3:0e:83:c5:62:4f:48:2e:89:ed:
a2:e5:4c:fc:94:9f:5c:78:e3:b9:88:19:f4:28:9c:
4d:42:a3:f0:ba:82:f7:11:dd:93:96:72:07:03:45:
ec:0d:9d:09:cd:86:3b:d2:fd:be:43:17:fd:c5:ae:
73:66:d8:b8:e0:70:29:d3:67:25:7a:2d:2b:f7:d7:
d2:c2:d6:c3:f5:c9:68:dd:ed:41:e1:cc:8d:93:c2:
f3:41:c6:d5:52:82:9e:8f:ce:4b:db:be:1c:8c:44:
54:be:cb:a9:e9:52:a6:bb:10:f3:a2:15:a0:85:83:
f7:e0:8d:d1:5d:72:1b:fc:2d:50:5d:58:63:ec:04:
7e:b7:89:bb:ca:0d:39:b4:ba:cd:84:42:0c:4d:07:
5e:b2:fe:2e:f5:1c:d7:32:9a:4e:b5:7a:5b:cf:b3:
90:50:3b:1f:0c:6c:e6:38:fa:25:04:21:3f:0c:de:
72:d5:93:01:60:35:5a:b6:6c:11:86:09:de:9a:e2:
f0:ef:38:d9:b8:20:c5:61:f4:26:b8:ff:36:70:c5:
b1:fc:9f:96:fb:91:71:50:7b:39:cf:3e:52:32:77:
1d:36:c0:8c:bc:87:c0:fa:f0:fd:bd:bf:98:5b:94:
e8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3D:58:90:1E:73:EA:DC:B0:D5:C5:28:0E:D9:BC:19:94:80:75:AA
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1e:60:66:44:3b:b2:61:8f:29:45:4d:f2:4b:01:91:a7:7b:
4e:d6:6d:7a:7d:35:a6:9a:9a:01:dd:39:11:31:73:5d:bf:28:
bb:e6:41:0e:e8:fd:de:ad:c3:37:ca:c2:2d:e6:b7:b7:b5:37:
51:f1:29:59:25:fc:6b:50:1c:d1:43:c1:c7:eb:88:22:74:ca:
48:69:4a:52:c4:76:24:7b:f1:5d:9b:5a:b2:01:fa:8b:e7:68:
58:ee:71:32:cc:d3:a7:cd:ee:03:9f:ae:14:04:ae:49:74:ac:
e3:7e:b3:cc:c8:18:04:f7:31:b1:30:b9:01:3a:f1:28:a3:33:
ec:da:79:a3:b6:78:ce:b9:ce:59:9f:01:cf:9b:6c:07:cb:cf:
5a:ee:58:d2:3a:f2:d8:15:03:6c:8d:1c:dd:de:74:ae:03:50:
bd:71:5b:45:d1:f8:ed:60:9c:27:ad:e8:61:0d:d1:57:48:83:
d4:92:4e:4c:89:b4:bb:3c:be:06:de:1a:5b:b6:49:d2:c3:5d:
99:39:73:9c:e3:c6:4e:71:47:2a:c4:16:84:de:cf:1d:61:34:
29:eb:06:af:5a:bb:06:0a:13:e5:0c:e7:66:65:8c:bd:30:30:
6d:13:af:e1:0c:ce:d1:8d:40:1e:3d:0f:98:0b:19:e9:1c:f7:
52:28:3f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:26 2025 by rpki-client