Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: mt6qKPzPbzJo0BowNVyvWE2TxIehiW0ete3phS3MCVI=
Subject key identifier: 0F:6E:5D:F7:9D:10:4B:64:61:AB:48:43:BC:65:C8:C7:EF:87:24:8F
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 019A1D6334E5960B4843E920055626EE5F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 16F1
Signing time: Sat 25 Oct 2025 22:00:31 +0000
Manifest this update: Sat 25 Oct 2025 22:00:31 +0000
Manifest next update: Sun 26 Oct 2025 22:00:31 +0000
Files and hashes: 1: jQsHaj5ydFI2fziM46K4sV8khMM.roa (hash: /VZu49ELcVRt0AgBq70u1HUIw5xDpnWHzAN7Dc2pulg=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: PzV5ybnXg2jnmUBvGMUpK7AloYBPcf4zIghT6KCd408=)
3: tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa (hash: lo7qT/3mV2HNXlaDbWGrnZSKU8gfCipkct2DwMPEdOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:63:34:e5:96:0b:48:43:e9:20:05:56:26:ee:5f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Oct 25 22:00:31 2025 GMT
Not After : Oct 26 22:00:31 2025 GMT
Subject: CN=0f6e5df79d104b6461ab4843bc65c8c7ef87248f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:b7:f5:69:c2:9a:7c:e6:f1:1f:51:b0:40:
55:d2:83:c9:25:67:9d:4a:8b:e4:aa:79:4b:b6:b5:
49:db:46:59:e4:3a:ac:4e:9c:ec:3c:ff:6d:d2:88:
6f:94:f6:40:93:52:77:a9:34:69:b3:62:57:a2:f1:
3e:b1:b5:d7:49:85:47:83:f4:c7:fb:64:73:50:8c:
db:6c:b0:be:93:d4:61:3b:01:e7:84:53:77:d5:f8:
04:18:a0:6c:39:15:2b:d5:bd:65:a9:2a:a4:78:43:
16:c6:f3:1b:1e:cc:17:5f:d0:78:ac:be:6e:c8:8c:
c2:b8:52:3a:af:01:d4:03:97:bd:c0:cf:1f:c5:f8:
fa:68:9e:ae:f0:0c:66:50:60:a5:be:4a:22:b1:d0:
0e:d9:85:ae:9a:00:1c:67:3b:c2:5f:4e:68:e4:97:
e7:23:c1:b6:ba:4c:db:11:e7:7e:0c:4c:fc:9c:f0:
c6:df:8f:7a:bb:03:39:16:57:cf:ea:09:db:96:6d:
2f:b9:28:33:c6:05:c9:97:28:a1:ab:09:f0:6e:33:
59:4b:d8:e2:41:a0:5b:07:1a:21:bf:78:6c:f4:e1:
b2:ba:f4:a3:8a:a4:70:72:a0:c5:d3:25:0c:43:ef:
61:38:07:52:2c:db:16:d1:b4:3a:d6:d3:ce:b4:70:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6E:5D:F7:9D:10:4B:64:61:AB:48:43:BC:65:C8:C7:EF:87:24:8F
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:92:db:89:22:f6:cb:65:62:d6:d8:04:eb:2c:b3:8b:03:f5:
15:79:ba:67:51:75:e0:c7:4b:27:b2:b0:95:d5:4d:c6:b6:4c:
c8:92:a0:da:d1:ba:3d:8d:20:b3:d9:dd:17:2e:f6:9a:72:86:
99:87:b4:79:63:aa:5e:66:a0:78:1c:8f:ec:99:95:7c:fd:8c:
e6:19:9b:e1:6d:45:68:e8:8e:8f:97:e5:a7:c7:af:ae:bd:1b:
1b:87:2d:a7:86:91:05:5d:a0:30:02:57:bc:66:c9:67:24:5a:
c3:5c:56:ce:e5:eb:c6:c3:88:25:1f:4c:5e:ea:cf:fd:0e:30:
8a:ca:eb:a2:d2:06:60:4d:15:cd:4a:3d:28:e4:5d:9e:26:63:
ad:39:5c:6d:e0:80:1e:82:ec:ab:e6:e2:c6:5c:27:57:b3:cb:
89:25:9d:a1:9b:09:a0:02:af:d2:9f:ed:e4:3c:bd:41:1b:46:
b5:7f:a2:01:27:f2:eb:e4:1a:1f:c0:f8:13:50:e5:fd:7d:80:
60:cc:55:11:e1:03:d9:e3:63:2e:bb:41:61:f1:91:60:33:3a:
18:8a:11:08:95:2d:1a:7e:88:e2:69:51:87:2a:90:f6:7c:54:
bd:e0:38:19:92:fd:c9:e5:b4:9f:85:42:7c:d3:01:d9:b0:8d:
f9:83:79:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:35:14 2025 by rpki-client