Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
File: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft (raw, json)
Hash identifier: YrMjSVT0EIPm5MDXexyBcO6qNuPDtHpz1vePUdnyT4E=
Subject key identifier: E5:5D:E9:CC:5E:3C:29:C4:0E:BF:E7:52:1C:44:75:A4:D1:8F:37:3D
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial: 019A0780CBCB5E795FA3247CBC1928B74EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
Manifest number: 05F1
Signing time: Tue 21 Oct 2025 16:01:12 +0000
Manifest this update: Tue 21 Oct 2025 16:01:12 +0000
Manifest next update: Wed 22 Oct 2025 16:01:12 +0000
Files and hashes: 1: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl (hash: nNobTguNJrlYgrqzsU5C9QAwr83WmE+jiEDNwVDBhrw=)
2: hmRzovRV4UHybR1HxVtSJMOLDCw.roa (hash: OsQ6iHBOvn0+b51MYRo/b13uIhsZ7r4gypQoB9TbMVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:80:cb:cb:5e:79:5f:a3:24:7c:bc:19:28:b7:4e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Validity
Not Before: Oct 21 16:01:12 2025 GMT
Not After : Oct 22 16:01:12 2025 GMT
Subject: CN=e55de9cc5e3c29c40ebfe7521c4475a4d18f373d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:d3:25:db:a2:38:54:eb:8a:79:5e:26:bc:
6c:a3:c7:27:a3:3f:3b:89:fc:ce:4e:07:b5:86:03:
8c:54:d7:2b:a5:9f:a7:59:b2:5d:49:be:03:a4:d5:
8e:69:fa:bd:9c:a7:9b:1a:0f:51:8b:4e:c4:be:c5:
36:c7:da:67:28:90:84:3a:cd:48:a4:5e:50:75:89:
70:c0:45:ea:02:b2:a8:3b:b9:6e:c5:81:32:24:3e:
67:16:c4:36:8b:12:cc:10:68:3a:50:13:30:1e:c4:
10:55:7e:f9:8f:c8:cc:aa:eb:3a:c4:34:02:ba:7f:
9b:4c:25:c4:57:18:3d:e2:03:fe:e5:5c:86:32:40:
f8:d3:97:13:c9:6d:eb:85:37:af:c3:e3:c6:0c:ef:
74:f9:61:0d:da:61:91:9a:bd:17:94:6b:15:0e:e8:
53:87:14:d4:6f:2c:d0:67:fe:d9:62:c0:7c:49:dc:
89:da:1d:b2:68:e6:6e:e8:f1:c9:ca:d7:db:6b:0a:
10:df:54:33:34:d9:8d:69:31:f3:70:ce:48:80:5b:
4b:e9:58:08:4a:9c:72:7e:12:9e:f1:03:44:e5:47:
4e:0b:0c:3b:90:86:fa:ce:17:6a:e6:2d:11:23:22:
81:3f:ac:7b:a6:68:d0:e3:ce:91:63:87:bc:24:2d:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5D:E9:CC:5E:3C:29:C4:0E:BF:E7:52:1C:44:75:A4:D1:8F:37:3D
X509v3 Authority Key Identifier:
keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:da:1d:e6:77:56:7f:49:b2:70:0e:db:50:2c:4e:2f:d9:4d:
c3:53:0c:c7:96:26:b3:2f:4f:bd:42:d5:55:46:f2:89:67:fa:
c4:50:2e:11:03:60:28:d9:be:8c:8a:79:ed:7e:e8:9b:c7:5a:
b4:86:61:0d:4d:ff:5c:09:66:40:7d:31:fc:36:93:c7:08:37:
9f:71:1f:0a:8c:24:3f:16:fb:96:93:81:82:32:97:cd:bb:b8:
57:90:d8:fc:36:10:62:8a:48:0d:8d:1b:40:6f:80:77:de:7b:
1b:53:70:75:32:d2:03:3e:25:78:e8:87:53:79:d8:c4:7c:10:
bb:98:cf:76:86:48:d8:92:1d:af:e7:1b:8e:c5:8e:9a:f6:79:
fa:d9:85:d5:05:fb:b0:41:24:5b:31:79:e5:67:79:7c:19:36:
66:1c:37:6a:00:44:14:b5:f8:43:cb:ee:a4:d6:7f:d8:be:5e:
7b:58:34:28:99:fc:db:7a:4d:7b:be:6e:d7:6b:f5:a6:5f:ec:
f4:3d:79:3b:ad:ca:14:42:72:0f:2a:2a:a8:bc:63:32:b1:7a:
27:bc:43:b1:3d:2e:2b:3e:08:8c:85:1d:0a:ef:76:26:ca:b3:
01:0c:4a:99:1c:82:ca:e7:b3:fe:53:5e:a2:13:7c:0a:59:8f:
0e:73:ea:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:08:40 2025 by rpki-client