Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier: G1Rb092hTNvjNrw0ZwCvaB/WYMq3Me1O0SzBQZL6Fw0=
Subject key identifier: 8E:F2:D8:64:ED:C9:08:6E:74:FC:27:51:EC:9B:72:80:DB:65:90:EF
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial: 019A4EF438D5497BADE9858B48F767D1DF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number: 0B45
Signing time: Tue 04 Nov 2025 13:00:19 +0000
Manifest this update: Tue 04 Nov 2025 13:00:19 +0000
Manifest next update: Wed 05 Nov 2025 13:00:19 +0000
Files and hashes: 1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: hYw/QTfIQ77o7NAuSOV79GCUwjd3i0C0kI6wL4IXB9g=)
2: g7lGHV-1_6YLUG-EIHcKuVMeEvA.roa (hash: vuw6Cb62Uo/aOsqmXFznBzd1y3zPSLM1hJbb48SnJE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:38:d5:49:7b:ad:e9:85:8b:48:f7:67:d1:df:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
Validity
Not Before: Nov 4 13:00:19 2025 GMT
Not After : Nov 5 13:00:19 2025 GMT
Subject: CN=8ef2d864edc9086e74fc2751ec9b7280db6590ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:1b:30:78:a1:7c:cd:8f:d0:f6:98:5e:15:
aa:01:2a:1d:e5:53:39:69:8e:a6:75:68:27:14:3f:
32:8a:ad:54:6b:b2:8f:71:e9:91:8a:60:3b:e9:34:
02:b1:7c:10:ea:35:d1:7c:6f:67:67:5d:eb:1a:30:
c1:f1:d3:96:3b:12:b9:21:ce:28:76:94:96:96:c6:
a9:bc:2f:9e:a0:50:86:3b:18:91:35:82:e8:87:e3:
5b:4e:f6:47:e6:53:d6:e9:28:5a:a0:36:ce:ba:cf:
fd:30:9a:89:a2:33:f3:98:b4:b4:5d:27:ac:98:0f:
79:51:be:30:c6:7e:1d:af:b2:19:21:e0:10:0e:9f:
bf:70:cd:3a:0b:d2:60:f2:3b:5f:69:76:e2:61:16:
38:d5:4e:f8:c3:d3:94:d5:da:02:32:d5:df:62:59:
ee:a9:d7:af:4a:ab:e3:03:7c:b9:d2:b2:ce:2a:57:
0e:c3:25:a8:34:97:46:e8:c4:dd:2b:61:04:72:da:
4e:2a:d3:89:9f:04:cb:a5:ae:cf:40:48:96:3d:c7:
f3:67:23:a4:7b:6c:eb:d6:9b:ba:44:8b:6a:91:97:
89:70:55:f0:08:d7:4d:0e:91:c5:a3:da:31:4b:44:
3f:7f:91:92:b9:49:39:b6:7e:92:bf:56:a1:ec:44:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F2:D8:64:ED:C9:08:6E:74:FC:27:51:EC:9B:72:80:DB:65:90:EF
X509v3 Authority Key Identifier:
keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ee:44:42:8f:ea:0f:2f:39:ac:df:83:41:0c:af:d8:33:c9:
ff:aa:94:b8:bd:13:a4:8d:6a:d2:c0:76:e1:a3:4a:18:a3:3f:
36:25:96:cb:5c:eb:ef:40:b9:cf:73:bc:18:35:74:93:30:b7:
f0:6b:b0:f4:29:1a:5c:bc:b0:56:5e:fe:2c:f3:13:11:95:88:
11:0a:1f:7e:72:a6:db:97:81:e9:21:2d:19:27:ce:c7:3c:fc:
4b:a8:17:98:9c:81:7b:38:3d:f4:74:73:a4:17:be:c6:cb:71:
85:ec:16:e5:e2:7f:27:73:5c:79:81:78:c2:dc:35:41:c4:61:
79:09:62:90:ce:0a:e5:38:e0:2f:a6:3b:64:1e:1a:7b:7a:eb:
48:a9:88:11:ab:b4:e6:7d:b7:85:96:a6:4a:3c:3e:61:0e:8f:
4f:3f:20:44:85:69:eb:82:60:1d:03:05:c8:8f:25:3d:2d:72:
eb:d1:e0:90:74:c2:48:ab:33:90:60:b9:e3:8e:1d:b5:d4:cc:
a3:98:70:c2:e5:70:2a:8f:4e:98:63:6c:91:b6:dc:16:0a:7e:
e8:59:6b:9b:eb:bc:20:da:97:f8:2e:fb:49:e9:8f:0c:88:73:
ee:59:68:1a:c7:72:88:1a:f0:40:c7:39:3c:af:80:6e:bb:8e:
09:4f:a2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:32 2025 by rpki-client