Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: HZDMK1zgSzQzmiapooIP/7YwfxQCXLw1d6zyGQXJVMY=
Subject key identifier: F0:9F:DA:53:C4:26:AB:2E:40:FB:77:A8:BA:77:93:8B:42:E5:9F:35
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 019A522C49BBE2463445FF3486BDBCB17971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 14B6
Signing time: Wed 05 Nov 2025 04:00:25 +0000
Manifest this update: Wed 05 Nov 2025 04:00:25 +0000
Manifest next update: Thu 06 Nov 2025 04:00:25 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: smHIlpMqsm4NnC1Ov4jlzwz33UAhA4m0DPTbqhQe4g8=)
2: JYVK5YIo9oFduSfdge32BhR1llk.roa (hash: MLgxgkj7xVD4j08JzP+4k7sw1diRLF6XHz+tW1zn9ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:49:bb:e2:46:34:45:ff:34:86:bd:bc:b1:79:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Nov 5 04:00:25 2025 GMT
Not After : Nov 6 04:00:25 2025 GMT
Subject: CN=f09fda53c426ab2e40fb77a8ba77938b42e59f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:dd:10:9d:0a:5a:a3:3e:79:94:22:76:63:
98:f5:d6:99:40:37:9d:ac:c9:bc:63:d4:d5:c5:ad:
d4:d0:0c:6d:e5:0a:44:f8:81:f9:ed:09:93:44:f7:
c8:48:25:f8:e6:50:04:ef:17:27:11:12:e4:ff:9f:
e2:bc:77:48:22:a5:c2:0a:ec:e5:1d:d0:5a:1c:6b:
d9:47:d0:fc:eb:e2:e8:38:a1:90:60:28:5b:c5:1f:
4f:52:c5:1b:3e:65:2a:1f:35:e1:75:f9:73:35:08:
c5:78:02:d8:42:c1:d3:cd:28:3b:9a:f7:67:0b:92:
a8:97:f4:19:7f:53:ba:89:17:53:3b:f1:50:18:97:
95:91:ae:62:6d:7a:ad:7b:13:79:11:87:84:9b:0e:
05:7e:ef:1b:ae:96:f4:7d:ef:7b:f9:9f:12:0e:fa:
8e:df:73:44:2d:7c:75:72:39:95:c0:49:78:a2:43:
30:24:d9:15:3d:99:0c:a6:eb:71:2d:9a:28:41:76:
6f:78:fe:fb:44:26:50:2e:f8:89:0c:8b:56:f2:7f:
93:be:e6:a8:59:04:9d:f2:eb:93:4e:34:10:c9:64:
8f:d9:65:c7:d8:79:37:6c:bc:b7:f2:93:03:be:46:
f0:0f:69:bc:59:7f:70:45:68:b8:38:e0:1b:a4:87:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9F:DA:53:C4:26:AB:2E:40:FB:77:A8:BA:77:93:8B:42:E5:9F:35
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9f:95:e4:2f:f7:88:31:a6:06:88:41:2c:4b:cf:95:24:33:
38:30:07:c3:94:54:47:e2:74:ed:c3:7a:36:dc:de:1a:08:d2:
44:bf:37:6a:81:34:16:82:04:cf:63:ed:af:ef:66:2b:0b:1b:
57:71:9a:c1:83:be:ef:46:b0:68:23:ec:56:b7:88:2e:1e:5c:
51:03:49:95:d8:78:8f:12:49:46:aa:73:48:b0:06:c0:44:c4:
e3:7e:0c:f9:61:f9:07:5d:07:c7:28:e5:60:ac:ca:da:8e:b8:
6f:ba:ab:16:86:e8:31:02:20:6b:49:89:a9:ae:5a:53:51:84:
7c:36:2d:08:cd:b0:62:62:d6:37:c8:e9:32:49:2b:c3:0f:5f:
7b:0a:ee:23:c8:77:6b:ed:79:40:f6:7a:dc:34:60:2f:37:d4:
0d:e5:f4:58:7c:8f:29:6a:1b:cb:de:a5:65:18:be:6b:6e:f5:
a8:48:2b:1d:4c:f3:5a:33:2a:68:ad:3f:6c:7b:a9:01:8e:c2:
c7:37:23:52:6e:1f:18:60:b4:82:fd:e9:1b:2a:b4:a4:06:88:
2b:3b:50:39:e6:5f:72:64:36:be:a5:b3:ff:0f:0d:80:84:28:
f9:65:df:6b:71:2a:d9:e0:a2:7e:c1:d9:ab:68:3b:b3:e6:6b:
06:c4:33:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:32:05 2025 by rpki-client