Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier: 6FZSVM9JhSGbfY5TI4T9th5Rm8CAZwtIdxY9Gn12xWE=
Subject key identifier: 62:C9:1A:C9:10:C2:63:11:DF:FB:8C:4F:CD:1E:7F:14:3C:7D:43:58
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 019A2A79C96FD379E390DD63DC6DD48D1BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number: 16FF
Signing time: Tue 28 Oct 2025 11:00:15 +0000
Manifest this update: Tue 28 Oct 2025 11:00:15 +0000
Manifest next update: Wed 29 Oct 2025 11:00:15 +0000
Files and hashes: 1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: BUxiXfv00bPfzrs/JHd/jm/JiwFcN6zrotQ69mCIJUI=)
2: b1EekpPHczR9SbF16iWNQ3damig.roa (hash: Fw8tFU/rOTZrNv9R1o3/Px5yWIdWmaPwzJuJsuMKmH0=)
3: eADzDJE6P-qH0r5TYUNn_ncYKzA.roa (hash: PxBgbfMtKG6Jth9+kbRfrbslcA+mMm5JhYaaugK0nGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:c9:6f:d3:79:e3:90:dd:63:dc:6d:d4:8d:1b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Oct 28 11:00:15 2025 GMT
Not After : Oct 29 11:00:15 2025 GMT
Subject: CN=62c91ac910c26311dffb8c4fcd1e7f143c7d4358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:06:9c:98:ee:a8:f5:26:96:22:e3:7e:d5:
0d:3f:25:8e:b6:06:b5:31:e5:ee:8b:03:04:09:e4:
bb:02:ef:b6:9f:a7:41:fc:00:10:f3:5b:2d:30:6d:
fe:28:f8:76:99:55:0c:ee:83:84:a2:44:5f:b0:5a:
0b:85:43:7a:1e:3c:29:14:b8:45:3a:86:f9:a9:fa:
2f:42:4e:2e:f6:dd:e2:37:b5:3d:51:b1:7f:d6:6b:
30:a9:43:5e:87:3e:95:37:02:d6:db:be:80:a9:f6:
52:5b:0a:e9:54:ed:5e:7c:c3:5b:0e:15:87:a4:1c:
d0:6e:f6:a7:47:0e:26:58:24:02:18:8e:2a:36:c5:
52:30:c1:a0:b2:fc:b8:98:e1:9c:6f:a2:e6:74:c3:
33:fd:d0:85:6e:2e:92:50:e1:21:38:b1:b2:cc:f2:
2a:5b:2f:17:7d:da:71:4c:61:98:1c:64:10:92:4a:
3f:a3:9b:b7:8d:bb:65:54:8b:86:3c:40:b4:38:eb:
50:80:57:23:e0:24:ba:1b:61:ad:9e:13:a6:3c:64:
6d:c1:fe:10:7e:54:35:84:bc:76:d9:44:4e:69:87:
2a:f1:2b:ed:e2:e8:58:eb:eb:14:7a:c4:1b:23:14:
a3:88:12:b8:d0:66:06:08:f2:a3:ae:22:b6:46:52:
27:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C9:1A:C9:10:C2:63:11:DF:FB:8C:4F:CD:1E:7F:14:3C:7D:43:58
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e2:c0:c4:ed:40:6d:e7:a6:8f:b1:d9:13:2b:f4:7b:53:a5:
fb:48:b8:8b:3c:4f:c1:ec:fe:18:6a:e7:56:71:da:97:d6:95:
85:a4:fa:b9:81:30:f7:cd:80:e3:68:2a:01:61:0e:1b:0b:74:
e9:f9:c4:eb:cf:42:ea:f6:f8:6f:19:d5:9d:69:5e:6a:a3:e2:
0c:d7:c4:3b:64:ec:85:d9:7b:90:0c:b6:e9:05:9a:fb:c0:73:
b5:1f:3c:8c:2f:93:27:85:53:dd:69:35:a0:27:e3:28:98:4f:
91:6e:83:40:4a:aa:c4:31:02:ca:89:5e:49:f2:a2:11:4c:83:
37:e0:26:2f:e8:0b:b7:38:b0:7a:e9:8a:04:31:a9:51:05:bf:
78:87:04:8b:29:e7:73:ed:e6:9f:bd:5e:ae:79:ab:22:7f:36:
d7:45:07:7b:44:f8:e2:2e:ec:b6:af:2e:41:79:81:44:48:58:
d8:e8:02:66:0f:47:21:32:4e:28:c8:9f:7c:88:3f:79:fe:bf:
6b:0a:5e:0a:4a:d2:35:f3:81:da:d8:30:df:25:1e:67:0d:bc:
0c:79:58:43:1b:47:13:43:5c:cf:e8:59:ab:d2:61:10:92:af:
7f:c5:32:cc:84:af:5b:1a:d8:09:b2:ca:10:45:49:72:31:1a:
1b:95:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:43:56 2025 by rpki-client