Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: RsGZI7uwgEOKmIy9lRSZ3nKSx9f+PuNEM6108oNVKBA=
Subject key identifier: A0:97:50:04:05:B8:FF:D0:B2:33:84:D3:26:DC:7D:A7:FE:9E:99:FB
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 019A251C9CB76310F989183595AA07825B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 10:00:23 +0000
Manifest this update: Mon 27 Oct 2025 10:00:23 +0000
Manifest next update: Tue 28 Oct 2025 10:00:23 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: 6IV+i70ykeDgx1HRVbBH2W2nXWwHhU99bnb2gDbF4EI=)
2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
3: YgI-v6xyCyvCdaFE_0gi8JebnCU.roa (hash: 8nUg6t7h+Myv8fLu/m3fBl/zsOujrUMcs0usjBSVmFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:9c:b7:63:10:f9:89:18:35:95:aa:07:82:5b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Oct 27 10:00:23 2025 GMT
Not After : Oct 28 10:00:23 2025 GMT
Subject: CN=a097500405b8ffd0b23384d326dc7da7fe9e99fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:8c:36:e2:e0:4f:c5:cf:32:83:30:f0:4e:
0b:89:5a:54:5d:42:cf:c2:99:65:ef:b4:65:1b:5b:
f4:bd:c3:91:e1:a6:d9:87:d4:02:64:7a:50:4d:bf:
df:ff:90:a6:93:6c:fe:6d:cc:3b:b0:d0:86:ce:83:
1a:79:fe:15:99:c8:b2:1f:2d:9d:8f:e3:57:22:d2:
5d:c1:35:6e:d3:2c:73:17:67:0d:c5:4e:8a:9f:ef:
8b:46:f5:15:1f:f9:44:94:0f:bc:f3:0e:39:bb:b2:
ce:fd:94:9a:1b:55:ad:7e:5b:a7:4f:e4:e0:27:01:
bc:9a:04:f3:48:c9:7c:a8:6c:52:04:3a:9f:a9:98:
11:05:9a:e4:4a:3d:ef:f9:b7:be:81:d6:3b:ed:ad:
07:38:e4:11:d7:4a:14:0d:2f:44:16:de:e9:34:42:
ec:7d:34:81:c1:36:77:74:06:c7:1d:94:e4:97:68:
7e:09:1e:cd:6b:3b:15:66:b6:0a:48:39:26:3e:5e:
34:02:14:ba:3f:ec:37:de:a5:90:99:9e:e7:8e:73:
69:03:16:99:79:a1:10:71:c3:ff:e4:87:91:71:ff:
12:6c:d2:21:c5:22:7b:3c:89:ca:2d:c6:33:6e:10:
e4:08:84:f2:17:c8:72:52:2f:18:29:c2:4a:76:08:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:97:50:04:05:B8:FF:D0:B2:33:84:D3:26:DC:7D:A7:FE:9E:99:FB
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:20:81:84:16:f7:da:54:eb:66:a6:65:fb:8f:5f:60:68:14:
31:cd:39:ac:62:00:4a:4f:d8:d0:cc:71:e9:df:8a:c9:a8:e3:
6f:c8:8a:ae:5b:be:47:eb:06:e5:e8:4d:1c:be:fc:a7:ef:64:
cd:99:0c:42:98:6d:9a:5b:31:bf:30:fe:6b:12:23:26:13:56:
d5:fd:38:11:a5:6f:c8:cb:0d:17:4a:48:7c:c6:62:08:43:55:
33:d3:90:3b:81:6a:0d:93:10:09:41:4a:7a:46:9f:15:64:a6:
05:fe:8c:0e:d9:f2:d4:12:49:23:9c:e2:21:a0:27:5b:66:ee:
43:1c:4d:35:65:10:c2:f4:7a:73:c2:93:a6:d1:88:38:ca:7d:
52:7b:c9:f1:11:ff:f6:2d:ad:19:f2:d1:4e:27:ad:0e:88:01:
98:25:3c:7f:59:fa:50:f7:fa:16:ab:c5:f2:db:67:01:50:92:
76:0f:6e:d5:e8:9c:ab:4a:5e:1e:67:22:2b:90:3f:4c:d5:7b:
09:85:0c:56:b6:8f:e8:a1:2e:bd:0c:f3:ae:d3:93:01:e8:50:
47:d8:fe:15:8b:78:5a:8a:92:d1:15:c1:78:4f:69:c6:d5:a8:
e2:01:56:b3:b9:59:b2:13:f6:fd:1d:48:80:d9:37:72:27:71:
a6:3b:a6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:28:33 2025 by rpki-client