Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: KojO9JaIn27/GD+4LckRE9KfDT/tLQ23lyxKBUDXWwM=
Subject key identifier: C3:35:E6:BA:7A:3D:EB:9B:A8:EA:9C:43:71:6D:42:EA:2F:68:B6:FB
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 019A5007561F33CA4EADD3BF9AB06710EA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0B37
Signing time: Tue 04 Nov 2025 18:00:49 +0000
Manifest this update: Tue 04 Nov 2025 18:00:49 +0000
Manifest next update: Wed 05 Nov 2025 18:00:49 +0000
Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=)
2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: dlrNoligXiIwAQIKPIZatMr37vVxviEr5HmFOW1lEo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:56:1f:33:ca:4e:ad:d3:bf:9a:b0:67:10:ea:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Nov 4 18:00:49 2025 GMT
Not After : Nov 5 18:00:49 2025 GMT
Subject: CN=c335e6ba7a3deb9ba8ea9c43716d42ea2f68b6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:1a:a7:9f:50:8f:12:a6:ec:37:0e:60:bf:
3a:28:2e:53:81:95:f9:8e:9b:4f:1a:86:d5:ed:ec:
7a:5b:ba:ce:2b:ee:3f:ba:84:b8:af:53:8a:2c:96:
39:78:59:57:68:46:2a:f5:05:fd:08:ec:63:75:e9:
60:4b:f3:17:5a:98:da:51:90:6d:ad:84:7f:a9:14:
f3:cf:1b:f4:76:d4:bb:b6:3f:6b:a0:1c:1d:52:33:
3b:58:38:28:dc:9f:c1:92:ef:26:e5:56:82:a6:60:
5f:94:80:b6:73:30:2d:e2:ad:c9:a5:c1:09:1f:5a:
dd:3f:59:fd:42:ed:97:1e:0b:06:76:12:59:c3:4a:
c1:d9:ba:58:ad:17:b1:d0:23:10:2c:26:e4:61:21:
c5:02:89:19:73:fc:21:9d:b1:55:9a:26:5a:96:cf:
02:a1:9c:9f:d4:5b:1c:8b:94:ea:0a:76:82:2d:8b:
5e:1e:17:69:f9:76:0f:8b:b5:9f:e0:c9:bb:57:52:
bc:9d:6b:48:4e:19:64:d0:e4:ff:48:5a:46:6d:48:
b0:83:71:99:e4:a3:34:c1:ed:8d:87:e1:67:41:98:
c8:1a:72:e8:c1:05:5a:4d:d1:47:ab:d1:6d:00:f0:
b4:98:74:2c:35:fe:6d:11:5f:32:1c:db:f3:86:43:
5a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:35:E6:BA:7A:3D:EB:9B:A8:EA:9C:43:71:6D:42:EA:2F:68:B6:FB
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b0:ef:d9:da:6b:7c:ad:94:42:84:69:19:bb:c1:bb:d3:8e:
9d:f3:13:d9:a4:26:98:09:c4:22:fd:c3:11:22:75:c0:6a:59:
28:3c:37:eb:6b:91:45:fe:19:b9:6a:9f:f0:5d:06:c5:27:7f:
84:73:f3:18:2f:dd:eb:05:c3:be:60:ca:63:5f:df:a7:76:bf:
c2:5f:84:2c:38:9f:9f:fc:97:26:01:37:13:92:a5:59:0c:4c:
5b:56:93:a4:82:82:35:e9:b8:bb:1b:c1:fa:6d:a6:14:a5:b4:
0e:65:ae:2b:ec:61:3f:22:4d:5f:3d:ee:cf:33:8f:6e:73:47:
fb:bc:4c:52:68:27:75:64:02:60:54:c1:3b:42:fc:cb:c8:92:
e1:f9:cb:ad:01:76:66:99:43:15:aa:8d:9e:21:57:7d:df:b2:
50:1d:c1:ea:6d:ff:49:7d:71:7b:04:7c:ea:36:bd:27:3a:24:
8f:c5:43:b1:44:39:d6:a7:b9:89:30:a7:36:32:46:55:ee:6a:
4d:37:37:ed:a6:94:cd:8d:e7:cf:16:ef:f2:55:6e:c8:25:3f:
65:05:12:5e:58:0b:34:ae:73:eb:63:c0:12:1d:97:43:d6:f7:
b1:4e:83:b1:69:98:aa:f7:79:e4:dc:e5:86:7e:80:ac:75:57:
6c:57:6c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:01:29 2025 by rpki-client