Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier: LKlGHVY1S1QfnFXcPyPmNJZRXTGou0i5xbugxzpXOnk=
Subject key identifier: 74:D9:62:33:DB:B7:38:5E:5F:79:F4:73:F4:33:F9:5D:7E:B1:EC:40
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019A4DAB04FFE0B683FB9971ACDA6A2A4200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number: 0F3A
Signing time: Tue 04 Nov 2025 07:00:44 +0000
Manifest this update: Tue 04 Nov 2025 07:00:44 +0000
Manifest next update: Wed 05 Nov 2025 07:00:44 +0000
Files and hashes: 1: Fhu6eteSMh-I7iJVqiXmMyG026Q.roa (hash: F9PD+ubtwzitBN7aKci6vGXmXOFiGygMSM+2xXKhmeU=)
2: O79Bxg0BR0VFMQ_a0ZyezMPMz0M.roa (hash: wV2tjiSpv38ZVgcsHYOWBKswr9oGmugpMMubTRaOGF4=)
3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: t/nKOWIW8VkeBX4CYXR6zftGphww3z5ac+Zq3PXccBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:04:ff:e0:b6:83:fb:99:71:ac:da:6a:2a:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Nov 4 07:00:44 2025 GMT
Not After : Nov 5 07:00:44 2025 GMT
Subject: CN=74d96233dbb7385e5f79f473f433f95d7eb1ec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:ec:18:b6:2f:a1:76:73:90:a9:35:f6:0c:
11:46:47:55:8e:62:c7:00:21:8c:44:2b:38:6d:48:
57:6a:57:e8:bf:cc:f3:7f:f2:58:ad:d5:ec:8a:26:
b3:85:6c:ac:d3:26:6a:93:a3:7b:14:4d:0d:88:e1:
2b:05:58:a5:5a:2b:48:89:b6:63:6b:59:4c:36:8a:
83:b8:7f:16:ca:1a:df:e2:c0:d3:e8:c5:cb:db:14:
12:45:60:df:54:ad:0a:8c:4b:f1:d1:02:0c:60:0e:
2a:97:c2:21:c4:dd:a3:d5:8e:87:3e:1c:90:11:a1:
cf:0f:bf:89:e9:aa:c4:38:3a:83:4d:96:88:f1:82:
f8:83:8f:c4:85:e6:91:0a:98:09:5c:d9:7a:86:42:
25:d3:52:87:2f:38:f2:40:9e:51:e8:60:66:e3:c5:
77:83:1f:cd:42:4d:e4:6b:a0:6a:f6:aa:8d:90:c2:
c2:3e:42:fc:df:f3:eb:a3:80:8e:66:b0:a8:0f:09:
d3:c4:82:42:05:1e:c0:15:35:32:66:a5:74:d8:40:
8b:03:bf:44:10:35:25:17:67:97:3b:84:c9:9e:0a:
df:e2:fa:a6:86:80:aa:6b:1c:64:b1:41:04:39:d7:
a5:cc:19:00:62:18:72:a2:fc:6e:01:65:96:54:26:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D9:62:33:DB:B7:38:5E:5F:79:F4:73:F4:33:F9:5D:7E:B1:EC:40
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7a:63:50:af:e3:cb:66:47:f8:e7:58:40:b8:a8:9f:43:6c:
32:c8:93:77:d1:77:b1:b6:a8:d3:09:6a:c8:72:97:86:ff:ee:
6d:93:12:f0:32:b8:e7:3a:8d:fb:79:7d:86:4e:22:8a:89:83:
13:14:96:cb:5e:3e:96:be:eb:ad:90:72:94:ca:86:f7:15:6f:
9f:67:e5:99:84:9a:56:06:c0:cc:b0:5e:2f:d1:f9:ba:f5:94:
70:71:cb:c9:79:46:0a:8b:db:22:71:be:8c:bb:4c:da:fe:82:
3b:4e:5b:a6:5e:dd:0e:d7:19:c0:62:52:a9:61:41:00:f2:8a:
c3:c9:0e:6d:eb:c6:fa:a5:fc:1d:47:be:d6:41:d9:a4:3a:c3:
d2:06:ae:95:f4:c2:32:c8:31:9c:0a:8d:b2:e4:17:fa:53:c6:
fe:f5:20:7b:c5:4a:8a:ab:f0:eb:e7:50:c8:b2:5f:b5:a6:af:
08:7c:a9:b4:3f:32:01:fd:67:20:f2:bb:47:b2:31:51:47:77:
f0:c7:7b:3d:20:1d:ea:c0:84:46:3c:a8:93:ab:fc:7e:f7:74:
0b:b1:71:83:f1:d4:2c:dc:6e:74:fe:09:0f:ff:3f:f5:50:9e:
ae:8a:9b:69:f0:b2:77:56:b3:0b:79:bd:cf:e6:81:ea:02:9d:
0c:ab:c0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:38 2025 by rpki-client