Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
File: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json)
Hash identifier: LFrt5+8Ks9NHcrg6EatvjtYSze5xyMhZVmz6jmSrx+M=
Subject key identifier: D9:32:68:7A:9E:24:DC:8E:3C:08:A7:23:00:B4:DA:EA:25:E7:30:CE
Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
Certificate issuer: /CN=f539a07ef47f805cca07c10ae187c93968808c47
Certificate serial: 019A4F2B59BDB09A4DCC29A597780566DD91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
Manifest number: 04E3
Signing time: Tue 04 Nov 2025 14:00:32 +0000
Manifest this update: Tue 04 Nov 2025 14:00:32 +0000
Manifest next update: Wed 05 Nov 2025 14:00:32 +0000
Files and hashes: 1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: MYvXk8dhZCK44hMuhu78ND5+7qFLepOQRhV1AhNy8iY=)
2: hQ_4ttT47iSzyY-pXhE0Zk2VRI8.roa (hash: lla8JTSaGgyqrA7kZsNxFenXInFs3bsEJhodvXrTuiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:59:bd:b0:9a:4d:cc:29:a5:97:78:05:66:dd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47
Validity
Not Before: Nov 4 14:00:32 2025 GMT
Not After : Nov 5 14:00:32 2025 GMT
Subject: CN=d932687a9e24dc8e3c08a72300b4daea25e730ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:56:35:d6:64:54:83:b7:e3:04:ae:91:10:
02:54:90:71:fe:f1:bf:bd:be:64:a9:bb:2d:20:69:
45:e2:00:8a:a9:c2:9b:c6:8a:1e:fe:c3:dc:bc:c2:
65:10:ea:be:24:43:df:19:1f:8a:a1:67:2f:9a:83:
7c:11:d8:d6:19:04:9b:35:6c:11:4c:1f:c0:9c:92:
ae:f9:dc:b5:1d:ef:b8:00:81:d0:33:6f:1e:48:06:
11:2c:da:46:93:9c:3e:f8:cc:d8:72:73:0e:57:a0:
64:d5:b2:61:8d:50:5c:55:6f:e2:df:70:3e:4b:93:
40:e6:33:20:ab:4d:63:53:36:9c:88:f7:79:19:dd:
2b:4a:b5:4e:77:91:ba:1f:10:a5:80:37:af:7b:b8:
a4:99:36:37:88:7a:28:31:4e:84:f7:60:5c:75:a8:
4a:94:56:45:db:ad:a0:d2:87:c9:db:c6:92:61:4a:
fe:b2:1d:29:b6:e5:4b:52:c7:0d:ed:46:d0:df:39:
0a:a8:22:e3:b9:49:f8:f6:65:23:6c:8d:21:c0:1e:
29:ea:19:d9:b2:b4:e2:07:82:bc:3b:83:36:3a:b2:
14:46:b6:5a:d6:15:b0:15:2f:89:2c:ff:81:a8:26:
e1:66:e6:52:f6:81:e2:17:c0:62:f4:83:70:fb:9b:
a5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:32:68:7A:9E:24:DC:8E:3C:08:A7:23:00:B4:DA:EA:25:E7:30:CE
X509v3 Authority Key Identifier:
keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:25:3c:6b:2b:d2:bc:d2:66:97:c3:85:75:a8:e2:43:90:7f:
09:9a:f6:be:5d:76:6e:62:42:70:9a:21:ab:b8:e3:45:75:1b:
59:4d:6e:f6:7f:66:93:53:7b:26:eb:58:e7:0a:b4:f1:0e:67:
8c:f0:a7:01:6b:55:f9:95:fe:1b:1b:41:1c:5c:9c:f7:7c:c4:
6e:7f:fe:47:dc:96:da:f6:7a:f1:87:d0:66:92:10:cd:e6:f8:
8d:96:15:26:99:f8:3f:6b:f6:7c:51:7c:72:ed:28:be:b0:41:
e9:28:b3:55:9e:4d:12:0e:02:56:4c:33:5a:a3:66:2c:a0:e1:
b6:b6:ae:64:45:14:dc:8f:25:16:b2:d4:12:68:41:21:43:30:
e8:33:af:a7:2e:24:12:f9:42:16:a5:13:31:50:b0:83:6c:5f:
b6:c9:fc:f8:88:a2:e2:e3:eb:1b:58:93:e7:64:42:28:ef:db:
33:5d:7d:cb:d5:72:3c:c5:8b:5a:91:d2:72:ea:45:82:3d:a2:
38:7b:9b:40:78:c6:5c:53:78:ce:2f:49:6f:6e:83:e8:90:11:
9b:d9:bb:48:e6:7f:6c:74:75:c7:00:1e:05:29:fa:e3:b8:e7:
56:15:b5:b6:22:07:86:ce:e2:d7:6a:57:27:e6:57:2c:df:b1:
ea:a4:53:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:21 2025 by rpki-client