Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File: 9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier: 86xUU41IqZrKoilm9cUu2YzeU0Rwc7mkIhQvnRMdnag=
Subject key identifier: 2E:3F:28:FA:5E:4D:15:1F:BF:1A:17:FD:5D:9E:0A:4D:79:BF:C0:4F
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer: /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial: 0199CF7FF28C9E1FF6E42F645053B5502002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number: 16C7
Signing time: Fri 10 Oct 2025 19:01:32 +0000
Manifest this update: Fri 10 Oct 2025 19:01:32 +0000
Manifest next update: Sat 11 Oct 2025 19:01:32 +0000
Files and hashes: 1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: gLSgrIlyuxmgkg8GCufKppf8RX++54y+Q0LQSTJAa5U=)
2: A8TukvgDm2_mAvbO8Qh2ldXZd9Y.roa (hash: /JIMryvixQaluB5n97mezkD1EyPJinxMba0OGSdEKhE=)
3: vP5uRCtVJRUJyzhFaWsuhTzkTw8.roa (hash: y1OFWyB3EPXzoJcEAkwbjykFdh6ALTnHBPCo+2KwzSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cf:7f:f2:8c:9e:1f:f6:e4:2f:64:50:53:b5:50:20:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Validity
Not Before: Oct 10 19:01:32 2025 GMT
Not After : Oct 11 19:01:32 2025 GMT
Subject: CN=2e3f28fa5e4d151fbf1a17fd5d9e0a4d79bfc04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:54:b6:d3:46:54:d7:ca:4d:4c:54:68:f3:
ab:0c:aa:16:10:34:ec:e7:8c:70:0e:7f:a4:4d:e4:
2b:7d:d0:be:49:52:d0:a7:b0:6b:4d:b3:8b:8b:a7:
ba:a6:ce:ee:f8:5e:d8:4f:78:25:0e:0f:3e:7c:2f:
e1:6a:b7:70:42:6d:9c:12:1b:88:eb:8f:24:7e:9f:
a5:c9:32:11:46:95:76:06:3a:0b:ed:10:c7:da:75:
46:58:3b:bb:52:f6:7a:7b:95:9c:04:4b:f9:d6:7d:
c1:02:9c:62:7d:5b:e8:94:99:fe:59:3b:3a:ee:32:
ee:9f:5e:1b:42:0f:c4:3c:89:5d:8f:3f:ce:20:a4:
af:75:48:b2:4c:6d:c0:0c:0a:13:84:46:41:3f:20:
24:f0:8a:1c:33:e7:d4:68:dc:05:69:00:6b:4a:5c:
25:6a:b9:ef:de:3c:b7:6c:0c:62:38:5d:2b:80:98:
d6:66:98:af:11:c8:33:5a:be:3d:d1:35:b9:5f:c9:
2e:de:fc:52:04:0d:c3:75:ca:f6:52:5a:32:c4:b4:
d4:e1:2a:9a:f6:cf:65:cb:e6:05:73:9c:98:f7:50:
c6:c9:49:a9:f3:bc:a1:05:30:79:3d:7c:e1:09:6e:
04:57:bf:0d:16:4d:70:36:00:f9:c6:ef:b6:9f:69:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3F:28:FA:5E:4D:15:1F:BF:1A:17:FD:5D:9E:0A:4D:79:BF:C0:4F
X509v3 Authority Key Identifier:
keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:14:75:1a:1b:4a:82:d5:55:ef:cd:30:0e:5f:27:a5:a6:28:
35:bc:6a:68:0e:90:fd:86:24:17:cf:ff:a6:14:51:9f:8c:96:
7f:65:c6:9f:bc:1c:b9:08:3e:aa:42:95:64:91:08:b6:6a:96:
49:ae:08:34:bd:90:89:3f:09:34:52:6f:76:83:77:b8:08:9d:
1c:63:b9:cc:d1:99:7f:1f:c5:18:34:b5:28:f9:19:a5:83:25:
e1:dc:fd:48:f7:92:90:b1:a1:5e:38:ce:63:68:e4:1e:7b:3e:
07:a7:75:c4:b7:6e:3d:04:4d:b3:eb:74:c5:a6:38:b8:d1:2a:
f9:67:6d:48:90:17:66:c4:58:32:a3:e9:f8:dd:67:fa:ca:33:
b3:3e:9c:1b:1a:0d:f5:6c:81:1e:23:41:15:46:2a:dd:63:80:
56:3e:8c:4a:a0:73:13:04:a0:0f:62:5f:39:9a:e4:9a:19:36:
4a:40:fa:f4:aa:0e:89:b5:fa:da:8b:13:cb:c5:5b:be:11:eb:
a8:ee:5b:85:a9:ce:f6:6f:f1:f2:5a:92:74:8a:fb:0b:8c:b5:
0c:db:a6:5b:b4:4e:31:45:d8:ff:cc:26:86:7c:03:ac:48:81:
6b:cb:40:87:fb:88:03:0d:6c:04:9d:4a:d7:20:f8:ee:6e:b4:
16:78:51:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:29:45 2025 by rpki-client