Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
File: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft (raw, json)
Hash identifier: 8paPsuIHabVjY6viwlMAoQ0wEhVpmxsIPw0sohWaJ5g=
Subject key identifier: 6D:70:40:4B:DD:71:D9:5C:D5:21:71:E3:49:89:F3:0F:9C:A4:CD:64
Authority key identifier: 0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
Certificate issuer: /CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Certificate serial: 019A53E39DFD348F0F29A3C9D115B6C10A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
Manifest number: 011F
Signing time: Wed 05 Nov 2025 12:00:17 +0000
Manifest this update: Wed 05 Nov 2025 12:00:17 +0000
Manifest next update: Thu 06 Nov 2025 12:00:17 +0000
Files and hashes: 1: 249HxpirTi_osbw5WvlBrcgIzks.roa (hash: yk0Ki2ByYsC3iFN0F5s91hPx79cwtd3H/FikkHXhlh8=)
2: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl (hash: yvEh3Ms2e9TxcHlfWKM9WUuswmUfrAEsfKEoUfsJuCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:9d:fd:34:8f:0f:29:a3:c9:d1:15:b6:c1:0a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Validity
Not Before: Nov 5 12:00:17 2025 GMT
Not After : Nov 6 12:00:17 2025 GMT
Subject: CN=6d70404bdd71d95cd52171e34989f30f9ca4cd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:76:72:4c:e3:a7:d4:66:1f:e1:fc:b4:95:
f0:79:e2:54:3f:bb:f0:d1:b2:44:85:11:e9:c5:59:
2f:ab:a4:14:1b:32:cf:73:54:a8:99:d4:f6:69:4e:
d3:89:7f:7a:33:93:e7:94:db:b2:4b:6a:55:43:1f:
67:a7:eb:da:8a:d5:ca:21:21:5b:41:5b:6c:1d:bc:
30:15:44:a6:d9:d4:56:a8:b4:51:07:cf:7f:f5:ca:
e3:9c:ae:e0:0f:e0:fa:16:92:72:59:f7:fb:12:9e:
23:61:cb:da:2d:62:64:19:de:f5:70:ef:8e:bc:23:
f8:27:4b:af:13:ef:ed:91:20:eb:97:70:34:ac:a9:
a1:b1:1b:8c:a4:fa:0e:8d:e8:9d:91:68:64:a4:08:
dd:e6:fc:2a:72:98:9a:c6:cb:f0:96:99:f0:ff:be:
f1:62:73:d0:e4:d9:44:52:29:75:9c:a0:16:0a:45:
8f:5d:0d:df:9c:4d:7d:13:2b:37:58:21:7c:f8:5e:
bd:04:e0:04:6f:7c:71:92:0b:71:f0:84:e2:3d:da:
08:14:fb:2b:b0:ee:ce:ab:72:33:61:35:f8:f2:56:
e0:b4:2a:5c:a9:cd:df:16:ab:a9:58:a3:0f:a1:b7:
31:09:27:9c:95:63:b8:b5:34:77:1e:e3:fb:fe:80:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:70:40:4B:DD:71:D9:5C:D5:21:71:E3:49:89:F3:0F:9C:A4:CD:64
X509v3 Authority Key Identifier:
keyid:0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:72:93:98:ed:be:29:c7:b8:68:25:67:33:89:d4:e9:88:36:
47:35:01:e3:31:63:7d:e1:3a:07:fe:a9:d3:d2:3d:e9:b0:9d:
d9:fb:3b:59:fd:ff:4b:95:25:d6:05:5d:f9:4f:50:a7:a7:89:
b4:b5:fc:b5:7f:95:ec:46:f3:73:54:d2:44:6f:4b:d0:e4:e6:
26:9d:07:81:48:a6:85:39:5f:da:42:73:d0:a4:1f:25:5b:76:
1c:f9:eb:b9:60:dc:1c:78:53:ff:6d:fb:3d:c6:6f:aa:16:7c:
90:6b:68:0f:5b:e1:85:aa:62:e0:12:ce:71:77:17:59:3a:7a:
ee:70:8c:16:9c:ec:62:c3:c6:4d:f7:b0:f3:09:ba:da:fc:11:
80:01:c0:5e:be:21:65:d5:93:56:78:f8:1a:3e:1e:e7:01:9d:
1a:26:63:8c:cf:da:d4:9a:d0:48:20:99:07:fb:83:fe:75:b4:
37:3e:bc:2d:90:d8:80:84:9e:30:4b:a7:1e:07:df:3d:d0:a3:
5b:50:d9:ed:7b:1f:5a:fd:6b:4d:ed:97:59:4a:6e:ef:60:3a:
b8:26:b4:69:9d:56:78:e6:7d:c9:4e:86:2e:0e:e6:0f:bf:2f:
8d:12:0f:3e:c0:67:76:d0:9c:0d:f8:16:68:b7:f9:81:12:64:
ac:e2:82:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:13:43 2025 by rpki-client