Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json)
Hash identifier: kV3pzkgqhsdDZOk1eHk9mUbPTw9UeWLmyHxh2ceZeRs=
Subject key identifier: 51:20:1C:14:9B:8C:42:A1:B8:84:51:4C:CB:14:CB:2F:BA:52:C3:F5
Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656
Certificate serial: 019A011164D3C5B6772D1517D7DA71947A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 10:01:48 +0000
Manifest this update: Mon 20 Oct 2025 10:01:48 +0000
Manifest next update: Tue 21 Oct 2025 10:01:48 +0000
Files and hashes: 1: 3gQqwuDknMD1by1_10QyLFjqTSQ.roa (hash: 7rS6ATpFIQATm/1nB63KRTZ9v2IEBgVrsScfZWZHuYo=)
2: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: 7z0f2t6Ec1xVZqUKi65HWXA7lbLSXBBjNmRSdoeeNmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:64:d3:c5:b6:77:2d:15:17:d7:da:71:94:7a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a1722e8baddc358a15874265b466743e703656
Validity
Not Before: Oct 20 10:01:48 2025 GMT
Not After : Oct 21 10:01:48 2025 GMT
Subject: CN=51201c149b8c42a1b884514ccb14cb2fba52c3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:06:d0:e1:51:6c:e6:84:2d:bf:47:a5:1d:f1:
ff:e1:2a:f1:b4:4b:1d:6f:c8:65:5d:49:e8:9a:39:
5a:67:ba:28:55:5a:2f:b9:1c:0f:92:c3:b6:4e:c5:
25:a1:49:f9:60:ef:68:a4:09:4f:f6:4d:6b:ca:81:
22:97:08:cd:91:72:f3:9a:e7:eb:89:70:69:23:d7:
ce:55:d2:8e:06:0b:5a:9f:54:d5:87:ec:41:8a:45:
d2:e1:c0:51:1b:67:af:04:03:b1:b4:67:63:cb:bb:
64:fb:43:af:e4:ab:24:6e:25:b4:90:3c:cc:1d:9b:
36:4f:9c:a4:f1:33:dc:cf:ce:98:cd:23:c6:b3:56:
9c:07:78:dd:e6:98:5b:dd:23:1d:c3:ec:0c:c5:58:
0a:a6:cb:82:b5:25:c0:45:eb:00:12:cf:d1:3f:ca:
89:0f:30:46:9b:e3:d1:0f:d7:b6:c2:b3:ed:7b:c7:
93:8b:b2:4b:14:b8:43:cc:79:90:21:ac:7c:ee:76:
7b:2e:f1:7c:08:82:75:2c:13:85:d8:df:19:79:07:
2e:40:fa:34:78:a6:35:9d:b6:93:f3:e4:98:2d:29:
71:e8:f6:b2:ab:4b:3c:db:41:e6:d2:f8:06:f1:fe:
42:33:32:48:b1:0d:31:e9:30:ab:37:9c:fc:81:9f:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:20:1C:14:9B:8C:42:A1:B8:84:51:4C:CB:14:CB:2F:BA:52:C3:F5
X509v3 Authority Key Identifier:
keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b6:46:28:ee:8b:57:5a:81:7d:92:fc:e2:10:9d:a9:b8:38:
1a:b5:f6:40:cc:f1:95:e3:80:23:d0:a2:08:c0:5a:81:d8:c4:
ca:34:bb:42:3c:0e:83:34:95:1f:00:3d:d2:37:60:b7:3b:b0:
81:2d:db:be:72:9c:f8:eb:a6:95:76:9e:30:b7:14:4c:12:59:
f8:f5:f9:19:75:34:ab:af:87:f7:7b:c4:09:07:0f:e4:48:2a:
37:f0:0d:fb:ea:78:15:5f:81:67:30:5b:a8:b3:cf:54:ee:9b:
81:cc:e8:42:15:b4:c1:28:28:5a:c3:7e:5b:12:d6:78:ec:7d:
a8:13:dd:7e:d9:7f:c8:9f:be:3d:65:5b:37:0d:5d:02:f0:14:
12:6b:a3:8f:6f:0d:e9:09:28:7c:54:67:13:26:63:17:07:90:
35:af:c0:31:2e:3e:98:64:0d:bc:35:79:7d:70:a0:39:18:dc:
99:85:fd:c5:21:e9:f0:99:c8:54:24:16:a5:65:fe:f3:62:46:
20:f1:8c:8b:0b:89:0a:32:21:2e:7b:89:d6:31:20:63:85:1d:
05:ec:ed:0f:0b:40:8d:52:95:44:95:63:fd:f3:d3:8d:e0:76:
a7:02:ab:8a:29:96:46:70:47:8b:f0:53:5c:c0:02:7e:f2:5c:
78:66:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:18 2025 by rpki-client