Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: 098O6zeqqE06f4GvTZWsSaF3Zt3Pqjxj0PPXi87a82U=
Subject key identifier: E9:82:A2:EB:15:AE:35:60:4A:B3:CA:AC:1D:72:CA:B5:EA:DF:FE:8B
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 019A22F7C8E259FB03B0BDF68408ED6AB2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 00:00:55 +0000
Manifest this update: Mon 27 Oct 2025 00:00:55 +0000
Manifest next update: Tue 28 Oct 2025 00:00:55 +0000
Files and hashes: 1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=)
2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: 0cpxAEjmnpOAWc7TfA2wy/h5Ms3STG8oTbjz9OSkt10=)
3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:c8:e2:59:fb:03:b0:bd:f6:84:08:ed:6a:b2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Oct 27 00:00:55 2025 GMT
Not After : Oct 28 00:00:55 2025 GMT
Subject: CN=e982a2eb15ae35604ab3caac1d72cab5eadffe8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:53:2c:5c:36:c2:a4:d0:c8:e6:d8:4e:0f:
55:4e:e5:99:9b:e4:be:73:f3:99:f3:d8:c4:b3:5d:
52:9a:bc:47:0f:05:55:59:92:52:46:6a:05:4c:48:
8d:11:93:c0:4c:5a:a7:a6:2e:02:37:90:d7:8e:8e:
31:8f:78:7b:c8:c9:c3:a7:cc:a3:51:1d:55:a2:95:
2b:c2:ec:07:f2:1f:29:13:a8:dc:3a:f3:09:47:f4:
b3:a5:ce:58:01:cf:de:87:6b:67:0e:ba:5c:fe:39:
14:2d:1e:89:c6:20:d4:9f:40:a1:31:9a:c8:10:9a:
85:36:a8:fe:14:4e:ea:c9:f7:e1:47:bd:51:67:6c:
b9:a1:02:61:61:d3:0e:70:33:e7:07:05:d8:3f:2d:
cc:20:04:a9:03:eb:a2:5f:38:55:72:d2:01:98:25:
69:d0:ae:68:ed:44:5d:97:58:a7:11:7a:a6:4b:17:
3f:df:18:72:18:5d:c3:d7:3b:65:fb:40:8a:a7:96:
c3:65:73:6e:1d:c9:51:6e:9e:49:b4:d9:06:ff:56:
16:94:2d:87:7b:f8:3d:fa:92:9c:a8:2d:16:c5:e1:
67:65:a9:27:17:fa:00:69:41:d2:2f:3f:01:58:c3:
27:32:d1:f5:60:57:55:38:98:6e:26:a5:ce:19:36:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:82:A2:EB:15:AE:35:60:4A:B3:CA:AC:1D:72:CA:B5:EA:DF:FE:8B
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f4:fb:ff:5f:c2:7e:df:63:a1:08:6e:89:64:57:f2:9d:09:
54:70:e3:d7:3c:b8:cb:3e:27:32:d7:13:da:11:a4:3d:c8:fa:
44:ca:f5:d5:a1:e9:65:62:0f:73:2b:09:43:44:9a:15:82:a7:
0d:fb:6f:a3:b6:6a:b1:ab:a6:d3:0b:f1:8b:b1:b7:8f:1c:b4:
39:f4:2d:a4:a0:51:b3:62:c6:d2:15:3c:24:0e:3e:e5:1b:d9:
e2:5f:ce:e2:7f:ac:5e:29:56:23:13:72:bd:ba:21:9d:50:26:
d3:82:45:b8:1b:f0:12:a7:80:76:ae:96:3e:dd:91:47:6d:ea:
96:59:ef:e3:94:cc:52:7c:2f:fa:b0:ab:a4:53:40:85:2e:95:
94:b3:0d:b1:49:db:45:89:21:cb:78:6e:e5:97:c6:39:16:dd:
fd:f1:f3:5d:70:2c:4e:22:c9:ba:97:07:df:5a:87:b7:a5:31:
28:a8:2a:23:72:3d:39:7b:ae:96:8b:0d:2e:c4:28:47:29:0a:
bb:95:86:ce:df:f7:bb:ce:ca:88:5c:8b:27:75:c8:28:92:88:
cc:7a:e8:7d:f2:59:85:6c:eb:cc:c5:64:7d:c5:cf:0e:27:2b:
b5:7d:e2:cd:0c:60:62:42:60:b6:d4:18:27:ff:6f:12:b5:3c:
c5:0b:29:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:29:47 2025 by rpki-client