Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: mKT7RVZN6ocuAEU2zi79+HPvM8PSdVYvOv1JkQU0xss=
Subject key identifier: C6:5F:B1:5C:80:AA:4B:36:49:32:17:1A:5E:0F:17:75:17:63:4A:CC
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 019A1873DFDDD37258EA097F942E01A8619F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 16F9
Signing time: Fri 24 Oct 2025 23:00:38 +0000
Manifest this update: Fri 24 Oct 2025 23:00:38 +0000
Manifest next update: Sat 25 Oct 2025 23:00:38 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: zoH8PBDVY+0yMNqzt7ivQBtjZOR61JXMVtRqeHFniDA=)
2: h04E6GUTfk7g-nszYeXV5v59Z7g.roa (hash: D0nODnBLfeAlBTbUkjxGcmmT4S/QYeiGnt9Aow5Sjx0=)
3: xJetAjXRbPTX957PRc-ZRikOCag.roa (hash: zIdEISxA+75bDRZATAE0MJ7G/Gr2I74NP3sEuTFZFW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:73:df:dd:d3:72:58:ea:09:7f:94:2e:01:a8:61:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Oct 24 23:00:38 2025 GMT
Not After : Oct 25 23:00:38 2025 GMT
Subject: CN=c65fb15c80aa4b364932171a5e0f177517634acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:1c:1a:61:bc:07:e9:36:99:5c:cf:f5:9c:
6a:90:52:45:6d:4e:8e:b0:39:b6:b8:e1:ec:df:e0:
21:ae:24:a5:37:da:d3:42:82:79:fb:74:e1:34:e1:
72:20:00:2c:36:9d:01:7c:04:8e:c5:ab:52:db:61:
36:fe:8a:01:4b:9a:0e:8a:82:0d:58:97:f0:42:5d:
4e:ac:f3:2e:37:9c:0e:33:35:77:4d:87:bb:e2:dc:
a7:ee:f9:e7:95:af:8b:9b:c6:be:bb:4e:ee:96:fa:
32:aa:40:e7:f9:5b:12:d6:1c:a6:53:9d:1c:1c:a5:
9b:03:63:ef:0d:10:9e:69:9a:b6:47:00:22:f1:92:
7e:8e:71:e8:a2:14:cc:c8:22:d3:31:80:53:50:f0:
e6:d1:55:e1:31:66:8e:45:f5:b9:28:cc:bb:e1:25:
07:54:5a:bb:a3:6f:14:b5:b6:5d:23:9c:82:a6:49:
78:29:3f:26:42:a4:95:c1:ec:60:50:38:46:e8:61:
4d:8f:a8:fd:3f:1c:83:94:e6:1f:d0:3c:bb:31:d6:
81:25:93:9c:2a:d7:d9:68:53:06:5b:41:e7:da:52:
d3:af:b0:8f:7e:b5:3d:b1:4d:e2:32:16:93:2c:5c:
24:2e:e2:99:d7:54:4a:a7:d7:eb:be:d8:d2:db:95:
9a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5F:B1:5C:80:AA:4B:36:49:32:17:1A:5E:0F:17:75:17:63:4A:CC
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:96:cd:0d:b5:94:93:87:3d:d5:96:1a:95:16:bd:c1:5d:bf:
b6:66:b2:0e:8c:0c:20:30:de:4a:2b:4f:ff:a9:1c:69:18:7d:
60:07:0a:5a:c6:ab:c1:80:ab:e7:a7:5b:31:ea:ba:ad:2f:84:
75:0d:33:bc:04:2d:9b:93:d6:a2:a7:26:2b:f9:7f:38:f1:cc:
20:b5:5c:7b:45:07:95:21:7b:35:64:db:76:28:d4:e7:2c:25:
23:4a:4f:7b:bf:bf:71:07:77:fe:c7:34:87:d5:04:5f:cf:5a:
48:36:74:3e:3e:7e:f7:b0:75:46:3e:f6:81:20:7a:59:9d:37:
a2:b3:9e:d8:3c:dd:e1:e4:c1:85:3b:f7:fb:32:c8:b4:6b:c3:
82:51:48:01:ae:ce:13:da:fc:8d:aa:ab:60:81:c8:2c:56:51:
2d:46:7b:43:95:fe:14:41:6e:9e:d1:5e:a1:13:27:e7:72:03:
25:60:b3:33:79:4d:19:2e:6a:2e:b7:8e:38:12:17:52:69:87:
6d:24:8f:f9:80:1c:a6:d0:f7:bc:82:df:5e:ed:75:25:1d:80:
d8:19:b6:62:9b:36:64:7a:5d:05:7f:ef:aa:28:21:b1:19:8d:
73:cb:9f:2d:19:c0:ab:a4:41:af:ff:1a:66:b4:b0:6c:6d:87:
e5:a7:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:52:02 2025 by rpki-client