Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: pKjaiqOtGETIuHiWV76Wm+T1U5OZk4CY6LZbuhVI96w=
Subject key identifier: 27:39:89:FF:C7:D5:81:08:F1:7C:56:4A:3B:8F:97:18:0E:87:F5:4D
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 019A0B93F1B598BAC205090EC79A4A1B4D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 16E8
Signing time: Wed 22 Oct 2025 11:00:36 +0000
Manifest this update: Wed 22 Oct 2025 11:00:36 +0000
Manifest next update: Thu 23 Oct 2025 11:00:36 +0000
Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: IbP9WOzIHqsvDG04EzbUPynwo5EWrW5n9RlFvpZtNaU=)
3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:93:f1:b5:98:ba:c2:05:09:0e:c7:9a:4a:1b:4d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Oct 22 11:00:36 2025 GMT
Not After : Oct 23 11:00:36 2025 GMT
Subject: CN=273989ffc7d58108f17c564a3b8f97180e87f54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:a0:c7:7f:d6:62:5a:f6:a4:ed:6d:8c:8d:
71:df:61:e8:b9:e2:6c:7a:df:ab:bb:79:88:9b:a7:
cc:16:e1:b1:da:56:c7:54:11:f7:37:57:89:21:cc:
f1:a9:61:c2:ea:23:c1:69:9d:66:b5:87:8f:a2:50:
15:06:fb:f5:74:8e:9c:e1:60:45:04:9e:e4:66:c7:
50:51:c9:ea:89:40:be:fb:42:b3:a8:4e:89:cb:64:
30:89:84:64:f1:94:60:e3:bd:3e:db:cf:4d:d0:d3:
03:39:42:b0:fa:5a:03:da:08:f6:84:fa:59:d6:1b:
a0:6e:53:fb:a8:3d:91:75:45:90:bf:b5:2f:5a:1a:
f4:74:70:77:47:12:4c:a8:aa:12:b5:b6:f0:b9:44:
59:ff:63:35:f1:b7:69:43:a0:be:ad:a2:ad:19:98:
44:93:58:49:cb:40:15:53:0c:8a:90:54:e3:54:4a:
44:e3:1d:8f:1d:cd:e2:6c:80:33:8b:f9:8a:42:69:
3d:92:ca:ed:c0:c3:72:9a:1e:54:ab:c6:0a:73:09:
fc:91:f7:bc:b6:09:79:00:5e:4f:ae:88:96:17:67:
70:c4:ea:6b:61:03:8d:f2:25:2d:e2:17:0e:a1:36:
dc:22:0e:b4:97:34:ea:61:5e:6c:aa:a0:15:bc:3d:
33:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:89:FF:C7:D5:81:08:F1:7C:56:4A:3B:8F:97:18:0E:87:F5:4D
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e6:3f:f1:d7:80:3f:b1:9f:07:d5:7f:b9:b7:e7:26:b4:d3:
9d:b6:d1:10:a2:21:3e:82:c1:b1:a8:bd:3f:25:e2:86:85:2c:
48:0e:f5:fb:63:6f:3f:53:eb:ed:1c:33:4d:97:48:19:cd:57:
ee:2c:be:9b:d7:e5:db:82:20:db:9c:c5:73:cd:22:77:60:c4:
c9:30:35:0c:ef:3f:ea:32:9f:9e:1e:c1:37:6a:98:d3:e1:c4:
90:3e:65:18:ee:a2:af:d7:4a:03:a5:d0:eb:ec:84:bc:e4:d8:
01:63:13:91:61:56:82:11:78:5e:b2:12:d3:0b:ff:a2:f5:60:
36:81:2d:5a:ad:96:7d:26:a2:a1:f1:f9:ea:78:a5:c3:d5:91:
90:d7:78:db:0b:1c:c8:b8:dd:5b:62:bd:14:fc:fa:bd:a9:16:
a2:3f:83:53:02:d1:02:0b:8f:f2:e1:ed:a5:b7:00:c0:41:0d:
26:21:13:82:2c:69:ff:9b:0b:39:4b:01:f8:ba:77:64:fa:26:
dc:fa:42:33:58:10:a5:c2:bd:c0:b0:32:f6:e8:af:a5:6f:ef:
6c:1d:f2:55:e0:dc:88:32:b7:4c:b4:1f:4f:d6:dc:88:08:7b:
0a:f1:9b:8e:ac:d8:75:e4:c0:eb:f6:0a:a9:3a:16:e1:97:85:
cf:33:1b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:07:52 2025 by rpki-client