Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: ErdwmUjgrtobgvkC8P8vqPNtO1JHqQUA/Sp11f7j2B4=
Subject key identifier: 3C:25:51:94:54:27:B1:BB:41:AB:58:B4:BD:BE:C0:DF:29:57:42:D8
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 019A26662C761397B2663C04525B249B6BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 16:00:21 +0000
Manifest this update: Mon 27 Oct 2025 16:00:21 +0000
Manifest next update: Tue 28 Oct 2025 16:00:21 +0000
Files and hashes: 1: TlmA7hYGvfoGdT0G5jb2lRunL7s.roa (hash: XLYRe5/a61MKEsm2bcNZNSNX48Bi8mjwB8E7RRvBOJU=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: mMZtwCCcN2j6e0IUD0OfGHg26ELWHbQLhbLzy0t4p/Y=)
3: iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa (hash: Hy+nfoOHW02E0Q66TaW00MBASxuELeKPRYnWR4M6QU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:2c:76:13:97:b2:66:3c:04:52:5b:24:9b:6b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Oct 27 16:00:21 2025 GMT
Not After : Oct 28 16:00:21 2025 GMT
Subject: CN=3c2551945427b1bb41ab58b4bdbec0df295742d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:cc:bb:97:2d:77:89:e2:f5:3e:7c:c3:9e:
32:35:fa:d7:60:fa:ab:82:c6:7c:4a:92:5f:7f:d9:
32:c8:1d:fa:40:39:4d:de:7f:4b:36:bd:84:8f:2b:
eb:2d:47:a4:c5:7b:60:be:ee:3d:e2:38:4d:5b:51:
70:be:17:a1:92:27:13:da:c1:3c:ef:14:b6:35:29:
d3:ac:53:49:1e:c5:62:3e:df:d3:7b:2d:fb:5d:31:
76:6a:06:0d:50:34:c4:21:ed:9f:78:e8:1f:74:85:
7d:c4:bf:2c:d9:8b:25:55:a0:99:b7:88:08:5c:63:
5f:f4:4d:29:9d:c2:98:6a:79:29:ef:84:b2:ae:1f:
71:41:be:9d:c0:21:c3:e2:c9:ac:74:2a:52:f0:61:
03:f6:94:13:1d:e6:2b:e4:44:72:52:65:a6:64:6c:
34:45:fd:2a:b9:55:8b:6a:29:32:45:63:36:04:0c:
a4:45:37:32:a8:55:80:3b:62:50:8d:3a:50:bd:55:
c7:b1:55:11:66:9a:87:29:26:af:db:ad:8a:d8:af:
f5:fd:41:94:a5:06:3a:e6:ed:59:88:d8:c2:50:ec:
43:20:bf:38:ef:63:68:c6:d9:5f:8b:58:23:72:74:
be:6f:b7:99:fa:49:da:87:11:8c:5f:03:d8:ae:1a:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:51:94:54:27:B1:BB:41:AB:58:B4:BD:BE:C0:DF:29:57:42:D8
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4e:37:8b:9d:fe:aa:85:9a:a4:08:d6:b1:ee:f8:2b:8f:23:
93:e4:fa:3f:d4:3f:11:6b:db:6b:3a:47:3e:8d:19:de:06:d9:
49:2a:1d:f8:0a:f3:19:99:a2:52:6e:56:59:46:5e:b2:90:a6:
57:06:18:dd:ee:ec:ba:c3:c7:a2:d0:6b:af:c0:67:d4:c4:f8:
67:af:db:7f:ca:4a:35:49:de:9e:e5:4c:38:e2:f4:78:a7:f4:
a3:2a:c9:e0:d3:32:55:66:50:63:8b:1c:25:bb:c2:fa:96:29:
41:54:33:d0:b1:9c:0f:f3:d1:c5:d0:9a:80:e5:ec:27:31:00:
3d:67:f2:30:d2:41:c5:58:2a:8d:8a:a7:2d:eb:bb:fc:c5:7d:
9a:aa:cf:77:85:4e:6c:93:be:2e:5e:0e:ee:bd:c9:65:29:c4:
26:bf:86:a0:15:4e:b6:fe:de:68:dd:aa:67:3b:8d:5a:a7:4e:
15:05:e5:b5:88:96:f4:46:86:ea:83:f3:50:fa:0c:28:31:ef:
1c:01:16:09:08:96:2f:6f:d2:75:d5:30:fb:ef:e3:c0:1f:d6:
1a:56:18:a1:47:bf:ce:2f:59:8c:fa:05:31:a4:ae:c4:f1:64:
56:a4:9e:05:d5:67:2f:99:aa:92:0e:ab:20:40:93:94:32:c8:
79:f4:f1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:07:08 2025 by rpki-client