Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
File: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft (raw, json)
Hash identifier: 4WDmOoajekHY8w4uIsSQAUtZ8KyXJYDlg6KQ1+OI1Mg=
Subject key identifier: 55:4B:63:90:5A:87:EC:55:11:95:60:38:C8:EA:5F:9B:43:95:25:78
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial: 019A4EF485D9376A5D8451565DEBDE0D19AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
Manifest number: 0616
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl (hash: Ym6omFtNF9AkQ862fxHR/w5vR8U+sumMpCIMYvZvIg4=)
2: hmRzovRV4UHybR1HxVtSJMOLDCw.roa (hash: OsQ6iHBOvn0+b51MYRo/b13uIhsZ7r4gypQoB9TbMVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:85:d9:37:6a:5d:84:51:56:5d:eb:de:0d:19:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=554b63905a87ec5511956038c8ea5f9b43952578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:a6:0b:86:c2:88:91:d1:b0:b8:43:67:50:
dd:9e:23:3b:27:07:b2:af:b0:0f:67:95:ab:9a:df:
22:2d:8f:42:43:39:ee:d2:6a:d8:44:97:d2:0f:d7:
88:d4:6e:77:02:5a:f3:50:74:96:a3:7a:a3:1a:54:
6e:d3:33:9b:5c:55:fe:f8:14:88:ed:9d:c7:99:74:
ed:2a:9c:d3:be:20:0b:47:c3:a8:e8:04:35:2e:2f:
54:41:dd:e1:12:12:5a:37:1a:11:dd:60:0a:c5:ab:
e2:ae:5b:b1:de:e1:2e:94:2e:6d:c3:58:44:6c:ff:
07:67:e2:1f:20:20:2c:74:fe:53:98:fa:09:33:f7:
f3:ee:24:e8:e7:62:e9:16:00:bf:06:5e:32:93:8d:
20:17:77:28:7f:97:b2:60:3e:f2:91:83:6d:1c:2b:
2e:4c:a4:95:20:c0:13:e9:75:b8:89:14:43:0c:e6:
6a:d8:56:eb:fc:51:87:f2:7c:2e:3e:64:9a:65:2b:
06:2d:71:23:b1:d4:bc:af:55:7a:65:04:07:5e:4e:
47:e5:57:c1:ce:ca:c5:9a:ba:74:59:5d:5b:b4:2a:
0a:46:32:9e:4a:fc:2c:24:0f:4c:3d:56:e9:b0:72:
c2:e9:09:89:2c:f4:63:5d:af:dc:c2:6f:ef:46:33:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4B:63:90:5A:87:EC:55:11:95:60:38:C8:EA:5F:9B:43:95:25:78
X509v3 Authority Key Identifier:
keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:60:8e:ab:e9:65:ad:9c:7f:5f:e6:ab:44:e6:dc:60:bc:9e:
7c:1c:da:cd:dc:5b:48:7c:5e:34:3b:d7:5b:75:28:2e:00:5a:
22:8b:b3:11:64:72:d6:9e:6c:c8:e2:ba:4b:6b:3f:e9:9b:75:
2b:f8:21:83:e0:4d:b9:bb:21:d2:06:b0:6e:b8:98:02:03:6a:
54:ec:59:f7:17:44:a0:fc:b6:cd:5f:aa:a9:92:1a:d5:c2:6c:
3e:ef:63:b5:ea:f8:37:12:72:d6:a9:0b:ef:9c:95:ff:2c:b7:
54:86:83:32:98:82:33:3c:d1:41:a6:15:be:7e:55:5a:fa:f8:
44:5f:d4:de:87:8f:83:3a:1e:d7:03:3a:73:69:ff:a4:f2:89:
ab:4f:08:73:5a:33:05:dc:d0:b2:1d:58:b6:ce:aa:08:47:b6:
84:cc:8a:28:81:d7:9f:4c:74:00:51:bc:85:98:2a:5f:86:55:
33:34:3f:62:de:1a:14:10:51:7e:d2:04:48:36:2d:b9:9d:7f:
11:4b:b1:f5:b1:a6:f7:05:16:21:6e:c1:6c:67:f5:68:a3:0a:
f8:b3:ac:db:a3:10:33:1d:64:39:70:9b:b0:30:96:cd:0f:50:
8f:9c:a3:03:d4:40:e4:0e:e0:e8:be:75:98:59:16:cf:1a:71:
99:e8:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:11 2025 by rpki-client