Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File: m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier: vzVBUXYVUcXkEa1pvaATSh3PRfGgn0wGV0pq54VrqJA=
Subject key identifier: 98:1D:A3:9C:D3:7A:D3:BA:AD:30:C6:7A:54:A6:7E:0E:ED:0A:C6:14
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 019A4EF456DBD02B04749F10419396BEAF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number: 16A1
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: hH6hMaSyonrhQA9h_vP1HTqln7M.roa (hash: 8QJDFdFinb7s3U9xb08fJBm7sr1In5Pe6TKE9Vk8YEA=)
2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: 1oRnRriAyjcZRsLCUs/UJwAvMrGqKTohcX/e2baKGBM=)
3: xZRwQEVBqhCo3g2OnfWg1phYcj0.roa (hash: Up0oMZDKtVNJTjmYE39xr0VdPFglYOYmh22V1+hmiHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:56:db:d0:2b:04:74:9f:10:41:93:96:be:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=981da39cd37ad3baad30c67a54a67e0eed0ac614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:6d:ae:61:a1:81:84:3a:61:0d:63:b7:69:
66:60:f6:f0:51:2d:9e:77:fc:d9:d0:f3:a6:bf:0b:
ff:cc:f8:d9:51:13:84:44:df:0d:45:50:bf:1c:04:
25:50:c0:3e:c9:60:64:a1:cf:65:32:82:b7:03:32:
ee:bc:d8:74:33:88:e2:0c:33:60:3a:e9:9d:67:d4:
de:ca:af:61:22:dd:1a:f9:ea:bb:5b:2d:3f:05:cf:
68:b3:ad:cd:ed:96:06:e6:bf:a7:fd:64:e2:8a:55:
f8:a3:9b:de:4f:42:b3:26:df:64:0f:56:c8:6a:9a:
45:f9:73:5c:8e:5c:c2:de:4a:10:19:58:42:ab:c4:
20:97:b6:dc:52:5f:6f:4d:ce:06:8b:2f:33:c0:c4:
93:0d:53:53:1b:c4:ae:60:40:ce:5a:b3:97:14:fa:
b9:79:12:f0:a5:72:01:8a:ba:72:7d:c7:7b:02:0e:
b4:91:d5:73:bc:d1:6c:ac:e1:36:c7:00:b4:eb:8f:
e1:c4:bf:62:8e:8d:02:da:41:34:84:af:96:ee:3a:
d9:9b:8b:00:14:f3:01:cc:e8:ea:9e:f4:9e:a5:ec:
10:1f:8c:f4:e7:fb:9e:d1:60:c0:15:fb:ef:27:55:
78:d3:99:87:97:13:4a:ea:4e:fc:3b:c1:6f:88:49:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1D:A3:9C:D3:7A:D3:BA:AD:30:C6:7A:54:A6:7E:0E:ED:0A:C6:14
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:35:b7:79:89:70:61:32:e2:4f:ad:a8:33:4d:2c:49:89:23:
a3:65:54:fa:68:c1:c7:a4:03:ac:df:6c:7f:e8:83:ff:e9:44:
da:cc:45:4c:56:18:7a:12:da:08:d9:3f:ee:74:70:db:73:0c:
f4:64:96:5d:e5:8b:8f:a7:b6:94:76:a8:be:19:92:9c:7b:2f:
94:bb:97:9b:1a:7e:ea:06:b6:ef:97:a1:e3:6b:33:b6:55:01:
2c:73:b9:18:ff:ad:bf:1c:19:a1:c3:16:41:43:2d:dd:8a:b9:
7a:28:f9:cc:1b:b9:ed:36:21:dd:37:4b:62:38:11:eb:34:3b:
10:30:35:60:b7:1e:72:e7:a6:26:5a:7d:b6:51:6c:db:6f:5b:
be:6d:d8:cf:4b:68:91:b9:da:c3:e3:8d:dc:db:a6:bc:5a:f6:
fe:41:6c:fe:08:3a:6e:03:ca:b8:49:97:44:8e:21:b5:5a:98:
c5:a4:46:2d:c3:69:e3:5d:89:1b:93:90:1b:92:6c:ef:5b:13:
bf:22:f8:94:6b:ee:8b:8d:92:fa:20:e4:85:b8:64:e2:7b:4c:
8d:59:31:95:b9:c2:c9:6d:dd:a3:ba:78:ce:32:63:33:59:0f:
56:b0:07:29:4d:af:ba:7b:f7:5d:77:88:94:f6:5c:96:9d:c0:
e8:1d:3d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:08 2025 by rpki-client