Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File: m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier: UNM7s8vTRkBnFEBjCtM+hkiHqURbSitAuNSvrR4fZXQ=
Subject key identifier: A0:95:31:A2:A7:28:8C:33:AC:D6:03:FD:A3:39:09:FF:09:1D:98:18
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial: 019A54C10CA63621FCB1837032ED2CF3797D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number: 0D11
Signing time: Wed 05 Nov 2025 16:02:09 +0000
Manifest this update: Wed 05 Nov 2025 16:02:09 +0000
Manifest next update: Thu 06 Nov 2025 16:02:09 +0000
Files and hashes: 1: 9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa (hash: DY2LhwUZIsCiZof3w2j02FU4GvRZOJ3xOlslZBpIU3g=)
2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: 0noMHgD5HjnF8y0S0NB62Hj8Fczy84XjqPZZiaFOsos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c1:0c:a6:36:21:fc:b1:83:70:32:ed:2c:f3:79:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Validity
Not Before: Nov 5 16:02:09 2025 GMT
Not After : Nov 6 16:02:09 2025 GMT
Subject: CN=a09531a2a7288c33acd603fda33909ff091d9818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:ae:17:b5:19:c9:73:92:99:80:98:72:c2:
4e:9b:d7:c3:0e:3a:92:b7:5e:3f:c5:2d:ef:76:f8:
49:a6:6e:6e:02:b8:7e:49:cd:39:47:37:cb:19:3d:
a0:ef:89:bf:56:a9:44:c1:2f:3a:16:69:b6:68:65:
41:d7:98:a6:ae:c6:02:a1:e2:50:1d:3e:0e:af:73:
82:98:5e:20:60:03:97:a0:2d:3e:3c:c0:d9:61:83:
b4:3f:93:ef:a4:d4:26:9d:c9:27:d3:5e:53:d9:6e:
58:0f:4a:3f:ab:59:05:10:2a:8c:8e:72:0a:0f:5c:
90:23:92:7e:3f:8c:13:1c:71:61:33:6c:54:a7:48:
1f:55:31:82:c1:4c:39:d4:2f:57:77:36:27:26:57:
6a:b7:42:1f:8d:af:ec:2d:46:4c:b2:e0:97:85:2e:
2c:96:a0:99:f7:56:1e:db:36:3e:28:3d:3a:ad:b6:
d8:68:fe:1c:c3:36:8b:3e:30:42:02:1c:d9:45:ff:
07:43:a1:7a:9a:e5:df:b4:66:29:63:32:dc:55:99:
49:26:97:5d:f5:45:24:79:6e:1b:5f:8a:a9:4b:f5:
42:7d:85:8b:40:65:7e:60:b6:a1:bd:34:b0:37:fb:
a3:9a:f8:fd:28:4b:31:ba:f0:77:0c:bd:ab:e8:87:
10:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:95:31:A2:A7:28:8C:33:AC:D6:03:FD:A3:39:09:FF:09:1D:98:18
X509v3 Authority Key Identifier:
keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e2:b2:a6:ef:f9:95:db:e5:d4:b8:95:9c:a9:ad:22:94:9b:
29:d8:45:68:cf:29:08:12:42:eb:bd:88:89:bf:5f:55:c8:08:
40:c7:c4:45:d8:75:ad:ef:58:7d:33:48:e8:44:46:40:ee:60:
eb:10:2e:38:24:f7:83:7f:1c:2f:9f:b9:6d:6e:af:61:21:47:
cb:98:07:f5:3b:e5:17:be:ca:21:05:f3:15:a0:6b:a8:5d:90:
7a:96:16:4f:e5:10:b7:b8:36:d3:d0:11:dd:b3:b5:67:0b:1d:
3d:e2:86:07:a3:fa:04:2f:5a:b5:50:46:dc:08:dd:9c:be:94:
c3:ed:7d:73:13:21:82:ee:d8:e5:b4:08:4d:be:c9:c4:9d:68:
8e:5c:91:d1:11:68:bd:1a:4e:78:78:b2:62:e7:0c:2f:14:ed:
dc:52:96:8e:01:28:b4:bd:81:78:ce:07:82:5a:80:02:8a:a9:
71:47:53:1a:13:f1:85:6b:f3:b1:8c:8b:8a:bc:22:07:5c:d3:
50:d7:4e:84:40:1c:b9:57:f4:79:7f:a1:18:08:f8:ed:73:6b:
ed:9f:3a:01:fe:94:d3:93:76:e3:3f:77:b8:77:62:71:2e:37:
ce:6d:39:6f:a1:9a:80:69:e9:3c:ef:ae:b0:22:7a:84:c8:fd:
c0:97:71:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:49:35 2025 by rpki-client