Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json)
Hash identifier: Pj50giars5Ao95beZmMAeG4pwfYXqeiqsgkT6Nu74m8=
Subject key identifier: 07:01:FE:D1:A6:04:44:04:DF:97:8F:29:9F:F3:64:12:A5:E1:65:96
Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
Certificate issuer: /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Certificate serial: 019A4F2B697BBD70CE3460978E8D034A65D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
Manifest number: 0C41
Signing time: Tue 04 Nov 2025 14:00:36 +0000
Manifest this update: Tue 04 Nov 2025 14:00:36 +0000
Manifest next update: Wed 05 Nov 2025 14:00:36 +0000
Files and hashes: 1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: K382OQ3sPc7nnzkScSd+TF2T/jDE94AsN2YrqBzDaxY=)
2: BfiNOagjub-Q5UhmAEUO1BegvlM.roa (hash: z7UGbr4hGM96gAGkSVL5gy0uNjYzSjUeofOhu3xqo/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:69:7b:bd:70:ce:34:60:97:8e:8d:03:4a:65:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Validity
Not Before: Nov 4 14:00:36 2025 GMT
Not After : Nov 5 14:00:36 2025 GMT
Subject: CN=0701fed1a6044404df978f299ff36412a5e16596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:88:6d:a3:e2:70:27:a2:1c:0c:16:08:ce:
3e:38:9f:97:fa:6b:c0:0c:a9:6d:36:10:63:18:a2:
09:a5:54:de:b9:c7:47:fb:c6:f0:52:fd:e6:df:bb:
33:41:fd:b0:c6:60:fe:e7:de:ab:5d:fd:0b:6e:4e:
8b:71:b1:6c:ac:3d:e3:a7:df:3e:cc:cb:9a:da:09:
95:9e:09:c1:e5:4c:24:bf:53:a8:e1:6a:97:13:88:
90:ca:0a:9c:68:34:c5:ba:bf:d9:f5:ea:91:3d:89:
51:c1:77:37:d6:c2:df:00:7b:53:f5:3e:51:dc:96:
53:17:4f:86:de:1b:86:e0:46:7c:b8:6b:05:5a:97:
03:49:e3:d0:80:e5:20:bc:0f:06:63:c5:1d:7a:dc:
e1:d5:36:0f:1b:7d:50:d8:b0:31:cc:39:5e:8f:4f:
08:3b:ae:b7:23:66:47:c1:f6:98:c8:da:63:80:62:
21:25:f3:df:50:72:e6:a0:24:ed:3e:39:72:30:e5:
40:bd:2a:8d:86:08:dd:83:08:b1:2c:19:6e:88:ae:
bd:60:9b:39:12:ab:48:b4:7c:ba:94:8c:a8:b6:fc:
91:7b:a7:b9:b7:64:ad:67:4b:43:cb:73:4e:f1:b3:
a2:b3:bc:04:56:10:b5:e2:1d:fd:03:4f:88:2f:64:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:01:FE:D1:A6:04:44:04:DF:97:8F:29:9F:F3:64:12:A5:E1:65:96
X509v3 Authority Key Identifier:
keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:31:92:38:a7:96:bc:70:b0:e0:1d:d6:d3:d2:c5:a4:98:87:
12:72:f3:51:f9:4a:de:30:0c:a9:7e:20:2b:37:e7:6f:9f:21:
7b:d7:b9:5c:ee:3c:ae:1c:27:b3:53:dd:72:60:78:f7:d9:a2:
8c:76:24:17:81:86:eb:83:11:88:d2:af:51:42:c2:22:82:17:
08:01:6d:a8:d9:fb:31:74:8a:f7:dc:fe:05:e6:6d:14:b9:2c:
36:bc:a2:ac:c0:ef:23:69:8d:ca:0f:85:44:ae:0b:a4:74:a6:
66:76:9b:c8:31:a7:7a:cf:19:2f:90:ea:1b:f5:00:5e:d6:25:
2c:a8:d8:e3:08:8f:d7:68:ea:81:0c:29:28:90:aa:9a:10:96:
80:d4:89:e4:1e:37:b5:8b:9c:de:57:dd:fb:3a:30:cb:18:5a:
ed:3b:54:8a:b8:0d:80:3a:81:22:7f:9c:8d:e5:ca:ac:4f:64:
04:e1:35:64:51:b4:2d:43:6f:1d:82:c1:9a:81:c5:f2:b6:68:
f3:b4:14:3a:9f:65:b8:00:db:a2:01:12:93:2c:89:bd:96:cb:
b6:bb:d0:78:06:dd:9e:ed:3b:8a:24:f2:33:f8:c5:2b:e4:91:
60:d8:b3:93:a6:c5:f0:56:02:72:8f:49:d4:e8:24:16:85:39:
d2:42:e9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:44 2025 by rpki-client