
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: rugFIn4rvQD8RGAXJ3CCwkfGkFvO6BMgQHHOxkYopI8=
Subject key identifier: 5F:2A:EA:94:F5:8D:D1:D0:7B:B5:47:21:F5:15:94:4E:4D:30:A8:A5
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 01992E9105577121FC7735498D9DE0EA5526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 16A5
Signing time: Tue 09 Sep 2025 13:01:19 +0000
Manifest this update: Tue 09 Sep 2025 13:01:19 +0000
Manifest next update: Wed 10 Sep 2025 13:01:19 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: V+ZtqR5HMNY0BcnX898/hvpZWK9yI8fRbu0bj6diwQ0=)
2: 6ZeRNkK2gfkBTq-HCKi4E0wDn0g.roa (hash: EG2r/8KWDUcCkyQHYwdunKSI5bgRdtrDYdyzMOQ6sPg=)
3: 7zkL6is6uiT0K6jbnHgG4_foxLs.roa (hash: 7s5RovPfiSb41Rd6Pj/MwhULMmTO5+df4JKH36bwQEY=)
4: OtQ48GIqhoV8BbHUJtSPHtzr3bM.roa (hash: Qd9IkkyUrKLcvFwMqdzhvX7YcnKe2XLSIuFWdUOxwyk=)
5: RDfRFkINmnxAYr0i5lo-RrZfvvM.roa (hash: OK1hJOOaClcL1ul04CJbPRYEerL2hSCv/3xJn1BxpKo=)
6: W-3pllcOO_r6leZFXqyl0NNm9Ww.roa (hash: cCQm6IWECwZhgYdkg5jkkG+WaaUJSwWYVhY2RXgyFBM=)
7: gwNf7hRUcUlc_WP0obY5q2dBbnQ.roa (hash: rRyAeqxP/tdvl1xFzDmcY8amsglq1slf48aSCQfMHSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:91:05:57:71:21:fc:77:35:49:8d:9d:e0:ea:55:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Sep 9 13:01:19 2025 GMT
Not After : Sep 10 13:01:19 2025 GMT
Subject: CN=5f2aea94f58dd1d07bb54721f515944e4d30a8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:e0:94:25:be:b3:fd:3f:e3:51:5a:10:6b:
16:ab:55:0e:a9:68:19:36:00:44:31:5a:ab:fe:bb:
77:29:e5:82:9d:46:68:11:b2:ad:ca:a2:40:e8:61:
fa:4d:13:95:58:47:cc:78:56:10:16:89:66:59:13:
b0:67:33:85:91:81:cc:fe:9b:ea:4f:05:40:b8:82:
1c:a5:65:8d:33:1a:75:f0:55:70:d8:3b:e6:b4:99:
5e:5b:b8:87:4a:3d:23:d1:2e:7b:9c:9e:45:6b:17:
9e:b1:cb:9d:78:c7:02:00:da:94:48:35:db:cd:79:
cd:b1:77:e5:16:80:fe:9d:be:0c:6d:bf:f2:99:f8:
19:b2:74:55:4c:6a:d3:ad:0d:b6:eb:ea:a5:76:f9:
f5:01:9a:42:32:76:ea:42:be:f8:e7:aa:0b:0c:62:
85:16:88:7a:dd:84:3f:8b:91:ba:41:82:cd:4f:d9:
b5:6d:8f:f9:38:d0:f6:76:bd:1a:97:13:20:0b:20:
e1:74:75:78:72:52:62:e4:08:2e:ff:67:91:8d:d0:
d0:1c:19:59:17:56:82:7c:62:2a:84:f3:9b:82:1e:
89:ca:48:ba:1b:6a:c5:68:52:24:e3:fc:3e:cb:29:
a5:41:5a:66:f0:98:cf:da:cf:4b:ff:d7:51:97:9d:
95:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2A:EA:94:F5:8D:D1:D0:7B:B5:47:21:F5:15:94:4E:4D:30:A8:A5
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:be:45:7b:9b:1e:a0:b3:d7:6f:ee:4d:7a:2b:d6:2b:57:ee:
a7:3e:95:1d:11:f7:4a:e6:00:80:67:52:aa:c1:1a:a6:a8:98:
2e:be:f4:40:d0:c4:82:55:6b:34:a2:98:33:5b:74:a4:09:97:
7c:62:3c:72:f3:d5:e4:fa:4b:b8:3e:84:52:a5:49:25:f0:cf:
97:7b:27:cb:54:fe:bf:0c:6b:d6:b4:f7:e2:58:ec:a6:ed:0c:
6b:6f:d0:0d:a6:53:5d:7c:2d:3b:72:62:49:7b:aa:85:f6:bc:
3e:14:06:0a:24:bb:8a:41:27:94:19:42:93:32:d1:78:b3:a3:
fb:d0:a1:00:39:8f:ea:84:b3:8b:45:d5:c3:b3:27:76:59:ca:
b3:7a:d1:5c:0c:fe:7f:e8:7c:4d:8c:63:c4:0a:65:0b:9a:87:
92:ff:33:c5:77:48:0b:19:37:ba:d5:be:56:b1:a5:f5:10:9f:
22:86:ec:41:f2:c0:8a:fb:0c:d6:da:bc:fc:5f:c1:ce:37:c9:
81:80:69:d3:89:b3:5b:2b:1c:d5:ab:61:e0:a5:c8:61:1b:e2:
4e:81:4c:12:18:51:92:19:fa:8c:cc:13:73:45:fa:b7:43:2a:
fa:e9:6e:c4:61:f8:3c:35:97:20:bd:07:38:b5:87:59:0c:19:
73:02:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:26:20 2025 by rpki-client