Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier: pDO0DN79c2J/HyygdZpky3XdfpCeX7um/nEkk72I2TY=
Subject key identifier: B7:11:0F:87:09:33:43:F1:43:24:1B:CE:E7:C6:8D:F3:AA:25:00:C5
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 019A4EBD428443FF721452E1D1B4BAF9B2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number: 0B21
Signing time: Tue 04 Nov 2025 12:00:17 +0000
Manifest this update: Tue 04 Nov 2025 12:00:17 +0000
Manifest next update: Wed 05 Nov 2025 12:00:17 +0000
Files and hashes: 1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=)
2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: /yzCqQ8ISMirpNPXZEeX4JeZ/ZcG1jdPx2rP7XTNSU8=)
3: XNJw0i5YROHsLdGqQV-sQNcutQk.roa (hash: jP7HL40L4UifhwI3DQuFuVlNNqWLOXwjBtyAaPoZl9M=)
4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:42:84:43:ff:72:14:52:e1:d1:b4:ba:f9:b2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Nov 4 12:00:17 2025 GMT
Not After : Nov 5 12:00:17 2025 GMT
Subject: CN=b7110f87093343f143241bcee7c68df3aa2500c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:7f:3e:c3:0b:e7:dc:3c:de:f6:a0:d1:ba:
19:55:37:6f:8c:7c:2c:fa:3a:11:41:12:b3:e8:5b:
07:e3:5d:fa:43:d9:50:bc:f1:48:eb:58:10:2d:2e:
3e:6a:c5:27:6b:a6:8a:ce:20:f8:19:49:86:77:0a:
18:67:95:d0:e4:94:bc:f6:a5:ed:f7:e6:15:3a:98:
b3:d7:d4:37:54:15:ee:bf:05:ab:34:88:27:f1:00:
32:13:ea:1d:ad:26:53:0b:77:8d:fb:10:27:3c:8e:
fe:16:5d:56:83:f3:82:a8:e3:c7:10:da:41:cc:4c:
a8:1b:2d:b2:e4:33:9b:27:fa:c6:c8:00:1e:e7:02:
35:58:6e:40:0d:dc:c5:ce:70:ef:50:eb:ba:d1:78:
d4:a0:0a:bb:6a:49:6e:60:23:9f:70:29:e9:9a:65:
6d:7a:be:e8:a3:96:93:0c:aa:19:1a:2f:0f:4e:78:
40:eb:e0:e5:ce:56:b3:17:fd:21:cd:8a:81:c0:68:
46:27:81:df:db:d7:31:9d:3c:21:2e:c9:70:be:79:
8a:ad:05:b7:0d:92:94:23:33:01:b7:ac:6c:1b:28:
8e:30:fc:c8:22:d7:b7:54:e0:17:06:60:19:85:04:
cc:91:1c:ab:f3:ed:c2:24:d9:84:af:b7:66:f7:cc:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:0F:87:09:33:43:F1:43:24:1B:CE:E7:C6:8D:F3:AA:25:00:C5
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b5:e3:3c:ef:69:85:dd:f9:ab:f6:72:db:fb:44:76:73:88:
1f:88:f8:c1:c5:31:9b:6b:76:54:49:d3:77:9d:21:ed:7b:44:
aa:c9:ec:d9:3e:a8:c9:79:e7:51:f4:33:9b:ae:79:33:d4:68:
ef:65:b9:33:e2:9b:8c:d7:d9:18:6b:ee:69:78:6c:08:e3:0b:
66:84:c6:d1:27:0e:57:7f:30:23:a1:f0:5d:4d:a5:13:12:3d:
92:5a:23:73:2b:fa:b1:97:02:7f:12:e1:4f:a1:af:78:dd:59:
ca:3e:79:01:9a:40:30:5f:ae:4b:55:b3:67:3f:41:78:6f:27:
08:32:14:35:12:d9:71:75:bb:1d:c2:b7:a1:1a:bf:f7:ab:ca:
0f:e7:b5:00:90:83:30:eb:79:11:0f:2f:fe:33:cd:e3:b7:58:
e9:4c:d2:56:c3:23:d7:69:43:9f:e8:c9:b8:fa:39:41:e0:68:
00:a7:16:d4:9f:e2:33:f7:21:18:54:aa:11:32:05:b1:d5:04:
0f:45:09:ae:88:05:6f:11:e5:1f:ad:25:c8:9f:5d:8b:b5:59:
08:3c:0a:41:8f:cd:d8:4b:71:85:24:6a:23:d9:88:45:af:79:
ba:08:dd:5b:0a:bb:6a:03:b8:48:dc:a8:2e:48:c6:ea:85:32:
5c:b6:0a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:08 2025 by rpki-client