Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: 4+eKTEJ331zF0SmH3sPTPyGqkb+8ygZaEE57t358WpE=
Subject key identifier: D9:98:A2:56:00:FB:72:5C:B9:65:CE:E5:FF:E5:8C:B6:DE:53:2E:51
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 0199FCC66E46086C3E5E40B36D89307C38C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 0DF0
Signing time: Sun 19 Oct 2025 14:01:26 +0000
Manifest this update: Sun 19 Oct 2025 14:01:26 +0000
Manifest next update: Mon 20 Oct 2025 14:01:26 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: BYRcsofCNWMiXEakoCqW8KkucuxJXq6ayI7dmBYhwEo=)
2: B8bTTGpK1L-pMyO-WGFk_7H-LC8.roa (hash: r0JNxuBgg4on067YK5COQPlyCkk+tp458uDvr2IE4z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:6e:46:08:6c:3e:5e:40:b3:6d:89:30:7c:38:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Oct 19 14:01:26 2025 GMT
Not After : Oct 20 14:01:26 2025 GMT
Subject: CN=d998a25600fb725cb965cee5ffe58cb6de532e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7b:9c:51:ea:43:da:4a:da:56:97:43:b6:81:
cc:ca:ff:6f:3a:18:a1:5e:67:60:85:83:5a:01:6f:
52:b7:79:61:b1:66:02:33:82:8f:86:e3:8a:d9:db:
48:92:53:f3:66:31:d1:dd:50:eb:d9:73:83:7b:97:
48:e8:0c:86:e3:c2:30:6d:0f:e0:2d:35:d1:dd:49:
26:e9:e2:52:4e:b8:65:8c:93:44:0a:99:59:0b:87:
a6:11:13:3c:98:d1:8d:69:cf:fd:b0:0a:fb:20:0a:
0e:1c:fe:46:13:ca:ed:0e:38:88:68:47:3e:08:c1:
4b:6a:cc:f4:d2:97:1a:8f:ce:d9:bd:1d:94:ba:b5:
d6:f0:5e:37:e3:61:45:b6:48:a6:b1:ed:22:17:b2:
54:19:3b:78:1e:d6:c8:02:39:0d:31:f8:b1:66:56:
2e:31:7a:0a:8e:e3:72:a6:74:a1:e8:e1:6c:26:3a:
63:da:33:d8:14:8f:7f:fc:33:36:06:41:c2:58:fc:
dc:1c:41:6e:16:42:6b:f8:dc:1f:58:56:1c:de:95:
e1:29:33:0f:e4:4c:32:31:7f:28:63:1f:9b:1b:53:
45:01:bb:a5:04:56:b7:a2:4c:54:f5:13:63:27:99:
38:bc:b1:3f:ac:7e:79:e1:26:b9:3c:e4:8f:51:76:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:98:A2:56:00:FB:72:5C:B9:65:CE:E5:FF:E5:8C:B6:DE:53:2E:51
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f9:82:09:f8:5d:ee:6c:51:a5:1c:99:42:63:60:c9:04:24:
e9:30:a8:c9:c9:a0:19:68:7c:15:ef:52:05:7f:99:8c:ee:64:
e6:06:ac:45:f9:49:c9:d4:4f:7c:89:ce:9e:57:e0:54:f2:d6:
4e:87:70:d9:c9:fb:a4:82:71:8c:0c:34:b4:8e:e8:43:ef:f1:
8a:6e:be:f3:88:37:37:2f:2e:40:8c:12:96:4d:f0:2c:01:25:
53:95:5f:1e:e1:46:14:bb:e0:e0:92:a1:37:8f:a1:6a:f5:18:
a8:e5:05:49:1f:1b:b1:20:3e:e3:7a:bf:39:52:04:aa:23:12:
53:a8:fb:d6:29:93:b8:ca:24:60:89:87:f4:d1:13:00:58:c1:
1f:47:9a:5a:97:b7:04:3b:34:09:e3:31:61:e0:a2:7f:e5:9c:
ac:c3:6d:66:e8:04:7e:09:e6:d0:6f:2c:f4:7e:56:16:04:60:
bc:5b:1b:2d:d5:20:54:1b:e2:bc:46:f4:aa:40:05:66:a0:60:
4d:2a:43:e9:a4:4b:54:1c:90:68:28:b3:a4:3b:af:2b:6c:b1:
45:45:83:2c:6a:73:45:07:cd:ae:54:ca:8d:c7:fc:76:38:0f:
15:ff:ce:c9:37:cc:8f:6c:76:ff:7c:89:ce:f5:a5:5a:0c:fc:
f4:a7:ff:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:34 2025 by rpki-client