Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier: GnpcuZ+L3FegwOHqk0CbI609lNbpDw1KJIIltjMywrI=
Subject key identifier: 4E:53:C0:5A:ED:0D:99:B1:E8:FF:8C:6A:72:6D:83:BD:DD:91:90:30
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 019A4EF50E7273E797DC9291E0DA235D3A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:01:14 +0000
Manifest this update: Tue 04 Nov 2025 13:01:14 +0000
Manifest next update: Wed 05 Nov 2025 13:01:14 +0000
Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: oZGam9hy2hENw3lyVux8HYHE59iUiWZC6LDUKjQ1IYc=)
2: liKr9r8FMDweCFSU14hBTeBiJGg.roa (hash: yTAfLgiLewRGMW9BR3bDVbC2pPmowcN0vbDNQIsIUcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0e:72:73:e7:97:dc:92:91:e0:da:23:5d:3a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Nov 4 13:01:14 2025 GMT
Not After : Nov 5 13:01:14 2025 GMT
Subject: CN=4e53c05aed0d99b1e8ff8c6a726d83bddd919030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:c3:c2:63:97:7e:36:73:89:b8:5a:ca:e7:
18:a0:6c:e1:df:48:00:c1:c8:76:e3:a8:81:a0:39:
93:44:25:5d:4d:21:81:63:7d:4f:14:8e:18:60:8a:
8e:9f:47:c6:f3:9d:bb:ad:43:30:5e:c9:a5:b5:2c:
ba:a6:c9:25:62:00:12:5c:83:b5:90:5d:e8:06:65:
66:30:ee:c8:6d:a8:84:9e:fa:4e:f4:81:2d:75:78:
89:3d:45:5d:dc:dd:b8:8e:7f:a6:77:18:01:12:4c:
46:9f:3f:b2:6b:f9:c4:ae:88:16:bd:a5:92:bf:f4:
06:33:01:ba:95:11:cc:80:a5:af:16:b3:03:d5:d1:
4e:6f:49:6a:1c:b6:b6:98:e2:67:b1:76:42:c9:d0:
ec:7f:30:ad:b4:2a:d2:5c:a8:1e:65:7c:e8:7a:92:
28:74:d0:63:f5:df:a8:fd:48:cf:fd:cc:44:29:7b:
a1:f8:00:e1:8e:38:e4:2b:ff:30:c8:15:de:d0:65:
57:a7:55:a1:0f:96:07:e7:a5:e8:35:64:30:19:8b:
72:14:85:2a:49:87:2f:45:9c:d7:6c:c8:e6:eb:c5:
35:b5:e7:8a:38:cb:25:2f:eb:8d:82:fc:62:2c:67:
1d:87:53:ad:42:67:53:ec:ee:a7:5c:aa:b0:65:56:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:53:C0:5A:ED:0D:99:B1:E8:FF:8C:6A:72:6D:83:BD:DD:91:90:30
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a5:18:37:0f:45:a6:fe:1e:10:3d:83:89:c3:93:44:8c:ef:
21:e0:54:ad:bc:0d:d3:76:1c:c4:a2:f9:13:c7:4b:9f:c6:3d:
67:b3:b7:96:dd:2c:5c:b8:f3:5f:cb:cd:fe:49:10:68:e5:ec:
45:f9:a0:db:f8:4b:fc:f8:6e:63:b3:03:67:36:6e:43:73:45:
af:8c:43:13:f7:27:0f:68:a0:7c:11:ab:ac:6b:69:1a:e8:6d:
0a:f6:7d:3f:b8:76:fb:6c:54:2e:de:d1:1b:8b:54:46:5e:4d:
36:34:e0:5f:a4:9b:e5:d4:81:59:d9:46:e7:ed:3e:94:39:2b:
e7:d2:04:93:5d:52:87:1e:6a:c2:1e:cc:56:4c:5b:07:ec:ec:
3d:8d:54:e4:ef:cb:2e:1f:42:2d:6e:12:77:44:58:9c:82:1f:
a1:3f:33:4a:19:4d:e6:45:fb:47:48:b8:fe:67:96:68:1a:18:
2a:20:8a:0f:70:d9:a2:b9:14:3f:5a:32:7c:41:5a:cc:92:30:
08:4c:87:36:b8:5f:1b:07:e1:5d:a6:5c:70:e3:9f:43:cc:7e:
75:db:bd:8e:7b:18:b9:b4:7e:fc:7c:30:9c:2a:5f:df:f6:48:
78:e8:10:7d:95:58:fe:b1:02:5c:9d:b9:f7:5d:a0:be:d2:25:
6e:05:ec:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:47 2025 by rpki-client