Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File: 9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier: ckp0Vt7PgINIBsBS4QlxQwzaKAcfw2/I/XZadMU2aMA=
Subject key identifier: 84:AA:4E:50:E2:FF:41:FC:32:28:C2:07:0D:BE:B8:D5:F3:27:52:3D
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 019A05C873C64A0DDD01E3FC37A1BDBC476A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number: 16EB
Signing time: Tue 21 Oct 2025 08:00:14 +0000
Manifest this update: Tue 21 Oct 2025 08:00:14 +0000
Manifest next update: Wed 22 Oct 2025 08:00:14 +0000
Files and hashes: 1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: 0+y4M67pUpbvyxaIhJxyAiD3qSJo3pz3IjYfXLws+bc=)
2: KPjydIOJaGq7MrGDIyks0pG8OMc.roa (hash: EbMrbtdHkpWfjQpY4PIBNTo9mg3b+j3TofouOP6XhE4=)
3: j-eMIttscanFAqtICoI80Cr1JzI.roa (hash: 9wKinY0pxocac6rpiGpVi4F+dA87gof09Z9RuDhbY0A=)
4: kza4BzO7mzHg574_1Eicw1sryow.roa (hash: T/X2stycZnJ66mhbGAsW7v/HLZ/en6oPqkycFGz/g/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:c8:73:c6:4a:0d:dd:01:e3:fc:37:a1:bd:bc:47:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: Oct 21 08:00:14 2025 GMT
Not After : Oct 22 08:00:14 2025 GMT
Subject: CN=84aa4e50e2ff41fc3228c2070dbeb8d5f327523d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:90:6a:0e:f1:c2:d3:10:47:e7:2a:3f:6e:
43:f0:c1:fb:38:ce:29:57:83:71:0d:2e:e2:bb:b6:
70:40:b7:c7:e2:65:db:9a:3b:40:16:35:8b:cf:d4:
65:be:dc:1b:fd:5c:50:c6:27:18:c8:02:c3:e6:3e:
19:62:b6:8e:ff:ff:44:97:c3:fb:dc:9a:ab:6d:47:
da:7b:e8:93:ce:df:d7:f9:d6:22:05:04:66:14:15:
21:2c:06:8d:d1:b8:f8:3c:5a:eb:2f:c6:95:8a:c4:
bd:22:4e:cc:b1:31:0e:cd:dd:53:4c:fa:9d:99:50:
8b:85:a4:94:9a:15:b0:bc:36:72:22:b2:4c:21:d9:
57:32:ac:bb:1e:aa:c7:b5:6f:96:a1:38:e0:55:b9:
86:08:77:ce:6b:ba:99:34:e2:ae:aa:e7:99:1b:fb:
92:d7:20:6f:0f:c7:47:84:e3:3a:3c:ff:7a:1a:cc:
60:8d:f6:d2:f4:2a:15:28:18:2a:22:b4:e0:33:5e:
12:97:83:78:f5:6b:dc:f4:cf:10:f7:8f:68:25:5c:
9e:80:64:74:b6:d9:ff:2a:5b:39:aa:31:72:5e:25:
93:b3:89:80:b1:be:aa:6c:60:fd:4f:18:1a:24:c3:
a5:ac:52:ac:47:1e:e8:bd:70:9a:0e:ed:2a:8f:cb:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AA:4E:50:E2:FF:41:FC:32:28:C2:07:0D:BE:B8:D5:F3:27:52:3D
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:12:c7:f6:3b:47:62:ef:1d:0f:fa:b8:13:86:1b:1b:e1:38:
1d:7e:65:fd:1a:82:94:c2:93:73:8a:91:b3:ce:be:06:b2:0d:
9d:a9:fc:9e:1a:46:b9:10:0f:c4:9f:b8:7f:77:5e:27:5b:64:
cc:ba:7c:22:7b:76:46:2d:b8:c8:eb:f3:8b:9c:35:ee:14:3f:
cb:b5:56:9d:19:10:25:8e:93:fc:8c:01:16:51:a7:59:ea:d3:
ba:09:ad:01:f6:ce:d6:c6:53:6b:4b:bd:44:35:6c:e9:6f:ab:
11:f0:3f:57:83:72:3f:96:67:15:90:4a:ab:6c:ab:71:b3:71:
2e:7e:57:51:a8:cd:0a:50:5d:f1:a3:f1:04:86:02:3d:89:75:
2f:c2:72:0b:4f:5b:d5:1c:4a:1e:03:11:d5:78:cd:28:54:85:
ea:38:a8:6f:be:4f:ad:02:8f:33:58:96:eb:40:ca:28:36:59:
c8:45:c9:30:db:ce:a1:35:66:3c:1b:f3:c4:d8:35:fc:81:86:
18:5c:b5:db:63:89:1d:25:f9:f3:8c:98:f8:44:b7:83:6e:b1:
11:ce:a1:43:cb:1e:e4:e8:1e:75:38:e8:e4:82:14:c7:38:00:
9e:52:c3:28:c1:2e:b1:ba:8c:c5:d4:e0:af:d0:5a:f7:51:9a:
10:77:e4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:21:30 2025 by rpki-client