Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: d2tF+8Sg8LiIMtRG015slw8SNfoTxCB01JKT0Dbfx/0=
Subject key identifier: 0F:B9:BD:D8:35:4B:7C:4F:A4:9A:21:AE:EC:2D:60:29:BB:15:2C:00
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 019A50075AB56FEF18C9E3E13684705B3FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0889
Signing time: Tue 04 Nov 2025 18:00:50 +0000
Manifest this update: Tue 04 Nov 2025 18:00:50 +0000
Manifest next update: Wed 05 Nov 2025 18:00:50 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: VDFSPmE6Abg1BXe1+/hJgEhHoTD9KRjJbyg8N1F4qd8=)
2: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (hash: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=)
3: jPbAHMtRmOOxtXFxyDN1-qXJjZI.roa (hash: rubF/nUj1Sxv+4U25Wjdi1dZZsv1ydBfmLAqRQsECUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:5a:b5:6f:ef:18:c9:e3:e1:36:84:70:5b:3f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Nov 4 18:00:50 2025 GMT
Not After : Nov 5 18:00:50 2025 GMT
Subject: CN=0fb9bdd8354b7c4fa49a21aeec2d6029bb152c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:3c:79:e7:fa:86:d1:37:4f:76:57:91:1e:
4e:f6:7d:86:e8:89:bf:c8:1c:d6:a8:2f:b6:7d:aa:
ea:b7:a3:8c:28:6e:16:68:14:64:5e:aa:94:67:24:
2f:30:82:77:f1:61:86:5e:fa:d8:7d:2c:9c:6a:a8:
a7:ee:23:1d:67:b2:d4:b7:87:99:ee:7a:79:2a:01:
ec:71:8e:9c:8f:41:22:c9:35:56:79:54:47:fe:c6:
71:c3:97:35:91:29:f1:3d:42:0e:6b:00:d7:fb:69:
04:40:99:fb:f6:22:89:28:34:9b:a6:f1:50:d5:c1:
85:81:6b:e4:d7:47:09:38:56:5a:29:cf:22:8b:7a:
8b:a0:f2:5e:6c:ba:dd:37:52:67:da:f9:08:45:39:
f8:f7:9c:e7:2e:de:d5:16:6b:c4:60:6c:83:cf:62:
08:57:e4:45:b5:a0:0a:fd:d8:e7:fe:f2:86:bb:46:
db:67:77:c0:a7:d6:9c:66:4e:54:ef:39:fa:cf:d6:
88:1c:dc:fd:0c:ab:40:fa:b1:2d:32:df:b7:f8:91:
d6:7c:e1:a5:7f:df:9f:f0:53:59:f3:5f:8b:03:08:
56:e2:ea:83:4c:1a:f5:47:fc:e5:b8:cb:3c:ae:eb:
f8:ea:fa:fe:8c:e7:8d:a5:fe:22:f5:bb:07:1d:ff:
6c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B9:BD:D8:35:4B:7C:4F:A4:9A:21:AE:EC:2D:60:29:BB:15:2C:00
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c7:50:e4:de:e8:a8:d8:2e:0c:cc:ac:10:d9:4f:6b:f3:f9:
99:5b:58:65:0a:1e:7e:06:52:31:a8:93:55:98:fc:4b:89:4a:
6c:82:15:eb:e2:8e:e3:c7:a8:5f:9b:90:64:d0:e0:7b:7f:60:
36:63:69:98:9a:fe:47:2e:2e:0d:ec:aa:62:10:11:b6:ae:4c:
5f:11:e7:b7:83:4e:fa:22:ef:7a:a2:56:27:ff:d9:20:c0:8f:
99:74:dd:86:1f:bf:37:01:a4:ed:34:eb:6f:f1:9c:c6:86:b0:
bf:50:90:58:98:57:78:80:aa:b3:ea:d9:71:05:46:6d:43:b9:
98:cb:fe:74:c7:89:09:39:1d:cd:f8:26:34:b5:21:5d:8a:27:
14:4b:91:d7:c7:fe:ec:10:fb:9d:d4:8e:5a:92:a5:91:e0:07:
1e:6a:7c:72:d5:90:89:5f:48:03:9f:cd:66:1e:7d:36:2d:ad:
c1:4e:e0:9c:4a:2d:8c:23:f7:37:68:d8:fe:0f:e6:a5:43:d8:
10:1b:f3:de:78:de:ab:78:2f:6b:b5:f1:88:c9:0b:a3:69:1f:
1c:da:48:b1:ae:db:ea:09:e4:f9:f3:19:53:d7:10:a6:6d:e7:
b9:5a:58:0f:aa:72:3f:fe:9e:ed:c7:b4:ff:cb:5c:ec:91:d7:
b9:59:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:51 2025 by rpki-client