Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
File: 9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft (raw, json)
Hash identifier: YvzNgfOFxza3vKKvZglWi7sulmhOSHTyb2V4wbg1BSc=
Subject key identifier: BE:8F:DE:14:70:39:D7:42:43:F8:95:64:44:E1:D4:92:48:C7:01:D1
Authority key identifier: F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
Certificate issuer: /CN=f58acd43c0033b13b88bb397415583aa51d9303a
Certificate serial: 019A4F99534EE8922784FD6EBF3F40CA5731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
Manifest number: 0C8B
Signing time: Tue 04 Nov 2025 16:00:39 +0000
Manifest this update: Tue 04 Nov 2025 16:00:39 +0000
Manifest next update: Wed 05 Nov 2025 16:00:39 +0000
Files and hashes: 1: 8D0SgcE22-jKRyHTI51t7V8NcjA.roa (hash: ZXV9vvWvbV2B2BZGTQ3fbU0rYCU11Zmayta/6q9b25w=)
2: 9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl (hash: 0thdT7lcQBLwuGZBZuM/0v8l4SGcNrEzSba4r+w2zv4=)
3: JB9Y7wnJwFNh42qjbGzSSoW0uhI.roa (hash: idOHiv8xfyir4aZA/b0dlRbG2HOO8hhEFkrMoBmk7Eg=)
4: mDXhl4dprarAsNvti4q46_kKZpM.roa (hash: nO7loNJnNWEy7qYEFwacKqwIKjogQXV6dHPxMdw1y3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:53:4e:e8:92:27:84:fd:6e:bf:3f:40:ca:57:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58acd43c0033b13b88bb397415583aa51d9303a
Validity
Not Before: Nov 4 16:00:39 2025 GMT
Not After : Nov 5 16:00:39 2025 GMT
Subject: CN=be8fde147039d74243f8956444e1d49248c701d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:5f:a1:c5:4f:4d:ed:6a:c7:f3:51:69:37:
3d:ee:4b:f3:70:b5:2a:7a:b7:60:36:fb:97:d0:6e:
36:db:66:bf:5e:34:47:8c:07:a9:a9:30:68:23:7d:
ea:e5:db:d8:6e:21:91:72:86:51:63:32:85:e7:d9:
55:28:c0:4e:77:71:88:41:17:e1:30:9b:b7:8f:85:
25:50:47:6e:37:0b:2e:28:b9:35:c6:49:77:15:4c:
d0:58:15:36:a2:cd:15:e3:ab:3c:ea:d4:f4:5f:9a:
aa:30:fa:5d:15:f5:fd:7c:aa:79:03:94:10:50:40:
a5:93:5c:ea:60:97:a4:1b:a4:54:f3:73:04:39:cf:
8c:53:9a:63:49:36:a4:af:0c:6a:ae:5f:de:ef:cb:
c5:4e:ee:8e:d8:6a:ee:f6:06:e6:b3:b5:64:58:7f:
38:d2:a2:f8:1d:96:0f:3d:89:a3:7a:ad:bf:11:27:
34:25:b7:95:34:e6:a4:99:eb:b9:65:ed:09:1b:05:
0e:cf:fe:64:d2:f7:fe:94:36:d9:57:6c:6b:9d:5a:
9b:0a:bc:a5:a3:04:51:51:43:1d:84:b1:6e:2f:16:
be:d8:5a:5e:40:60:f5:55:48:1b:27:47:95:5f:00:
67:63:04:95:ba:c6:60:b5:ae:6a:bf:f9:21:0a:71:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:DE:14:70:39:D7:42:43:F8:95:64:44:E1:D4:92:48:C7:01:D1
X509v3 Authority Key Identifier:
keyid:F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0d:a0:d5:2b:c3:83:19:6d:4f:ae:57:b0:8c:56:cb:8f:aa:
36:0b:44:06:29:fc:6c:5d:c0:6a:b0:9a:fd:0d:b5:5e:7a:de:
0e:ed:fb:dd:0b:06:80:7b:5b:f7:89:f0:e1:1c:c2:54:20:2d:
36:cb:f0:e4:48:9d:a3:7d:a1:a1:ba:70:52:7c:e1:6e:a4:36:
7f:65:a7:17:c6:4a:00:b6:ee:2d:68:97:8b:97:5a:7e:2c:20:
07:8f:77:be:0e:11:d6:e5:c9:6a:17:b3:a3:04:85:cb:49:30:
76:4d:f2:98:8c:4a:7f:fd:ed:2c:56:15:da:7e:4f:9d:03:bc:
10:1e:48:db:a7:a4:fc:b2:1b:c1:f6:27:06:61:86:2b:ca:12:
ff:df:90:dd:ff:8c:d7:c2:93:72:93:d6:9b:93:5c:90:98:cd:
d6:c2:75:40:e5:e7:2b:e7:da:30:5f:0e:07:12:24:df:cc:95:
54:50:73:4c:73:4c:b6:01:bb:e2:d5:1d:5a:95:0e:ed:c4:87:
7e:5a:25:d4:ce:77:1d:15:79:c3:5b:ff:30:92:1a:f5:ec:24:
f6:09:28:8f:c6:f3:25:33:bb:bd:4c:48:c4:20:05:56:d7:f6:
21:6e:7a:1d:50:a3:70:44:f6:2e:3e:cd:38:be:cb:bd:e8:a2:
d8:75:58:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:08:02 2025 by rpki-client