
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File: s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier: ++nFBlOC3OGuBsfQ5zUOJpowyL2JMtMJEd0IpuG/8C4=
Subject key identifier: 9B:FA:2C:4F:9E:2B:21:AD:9C:4A:A6:22:64:A0:3D:1D:D1:AC:44:E1
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer: /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial: 0199DEF3B271C1C497C5C04E97481EFEC980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number: 16D7
Signing time: Mon 13 Oct 2025 19:02:16 +0000
Manifest this update: Mon 13 Oct 2025 19:02:16 +0000
Manifest next update: Tue 14 Oct 2025 19:02:16 +0000
Files and hashes: 1: 4t1UxScYEc1MQQvb1JnztjogsBk.roa (hash: Dr1ii5dB9TFuR2r1BRNQYvLkf66wHtEAs6oE3mutbkk=)
2: XvQSYP0gBwV_2W1TwyZ9q7f08x4.roa (hash: 4KSvLtvpZswpayMP+WjZ+QORjoSpSFJrnConIM4+/0A=)
3: l1XZX1b8reS_-7ZSCMj6Ssj_O6w.roa (hash: RmqK144BBUUebNDsDUz/Y3m99tgJ/EBiLtpE9PQVqL0=)
4: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: oRwBbBtGAfJPAA85Tjq16y/6lFyi3TFuqHddX7PXa0Q=)
5: sKWAbqAA__OjcTRSqYb5uv2iH2g.roa (hash: Qi3g/XMjZpErCZOt692v0V5M83CBTDycMOtYB7JuINo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 17:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:f3:b2:71:c1:c4:97:c5:c0:4e:97:48:1e:fe:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Validity
Not Before: Oct 13 19:02:16 2025 GMT
Not After : Oct 14 19:02:16 2025 GMT
Subject: CN=9bfa2c4f9e2b21ad9c4aa62264a03d1dd1ac44e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:dc:22:dc:10:24:21:ce:87:c4:f1:69:a2:
83:fc:02:af:14:0e:15:7f:b4:d0:53:79:08:b9:ff:
61:42:62:56:d7:4f:ab:02:52:e3:ee:b6:b6:5c:1f:
17:5d:06:e5:6d:29:48:c6:2f:97:fc:1a:94:08:ba:
10:b7:55:51:8f:9d:03:ee:71:d9:37:b5:3c:71:1a:
f7:c5:92:f2:f9:6b:25:0c:da:37:72:67:11:e2:16:
03:de:ce:ac:b0:7b:3d:e5:3b:df:ef:85:3e:0e:bd:
7f:3c:d6:9c:35:0f:cc:8b:64:97:7a:a8:85:7f:25:
42:0e:2d:75:d8:3c:95:a0:d1:53:36:68:ce:cc:62:
11:f3:ae:79:cc:e4:c0:8e:3e:3f:c2:7f:92:5d:b9:
c5:18:ec:8b:47:99:c0:24:ce:4c:01:13:27:e6:07:
52:60:e1:fa:46:ca:a3:cd:e3:37:86:fe:76:81:75:
2e:ae:e5:e5:2e:76:74:a0:ec:b4:3f:61:bd:6c:ab:
6f:7a:ee:6a:ef:45:72:85:c0:78:c6:01:6a:4a:d8:
77:a9:a9:16:6d:b6:d6:6d:dc:2a:ac:45:4d:1f:f3:
06:cb:99:19:7a:34:91:dc:f2:6b:26:c2:50:4f:1f:
2f:a4:22:31:ec:2a:8e:ef:2f:13:58:ee:d1:57:53:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FA:2C:4F:9E:2B:21:AD:9C:4A:A6:22:64:A0:3D:1D:D1:AC:44:E1
X509v3 Authority Key Identifier:
keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ab:1d:c1:69:7d:aa:e8:c8:ca:02:70:08:68:6d:53:1a:43:
73:f4:ce:ce:99:65:cc:55:21:7a:b6:dc:cd:5e:66:75:fe:d8:
83:13:3d:11:f6:fb:5b:a1:42:50:9a:17:97:1e:d1:40:e5:72:
f3:c1:cb:3f:23:59:ad:96:d3:92:5e:ac:0f:b3:4c:a0:75:a6:
43:e5:32:09:65:a8:da:ab:f0:85:00:74:a8:06:89:e4:11:2d:
80:39:7e:e6:28:d1:01:4a:69:84:71:2e:11:d4:e5:31:38:7b:
f6:79:23:46:7c:5f:9e:95:90:f8:95:f2:94:61:44:5b:38:25:
e1:e0:17:09:fb:c7:7d:dc:0b:ab:ba:15:e4:36:dd:94:0b:a6:
07:a0:0a:b3:9b:a1:f6:24:80:10:3d:fb:0e:42:a0:52:ea:d6:
c0:ea:8b:d3:86:d9:9d:36:9f:22:ab:b6:54:63:6c:79:e9:60:
88:ed:93:9e:93:bc:48:db:12:7f:33:16:28:ac:3a:30:8a:b0:
28:f9:e3:df:58:c6:52:37:aa:0d:b1:2f:21:e9:cc:71:f2:43:
31:0f:c4:46:91:c1:6f:a3:d1:d6:05:38:e3:1e:f5:5e:46:22:
28:91:a9:76:d0:47:52:92:da:82:a0:a0:10:2a:5d:dd:e0:eb:
6a:5f:8a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 00:51:06 2025 by rpki-client