Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
File: 9Is_DGqHwEW9z_q9kA24iSvnAuE.mft (raw, json)
Hash identifier: GyuhAWHWDNab0Kuze7ZpTSmm1XzzDhzzKSVr45+iEQQ=
Subject key identifier: 36:C9:95:B7:94:8B:B9:C7:CB:16:89:E3:BD:E4:6C:12:62:AB:4C:1D
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 019A4FD0A73CC08FE08A78B4D8F64D2D447F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 17:01:05 +0000
Manifest this update: Tue 04 Nov 2025 17:01:05 +0000
Manifest next update: Wed 05 Nov 2025 17:01:05 +0000
Files and hashes: 1: 9Is_DGqHwEW9z_q9kA24iSvnAuE.crl (hash: ew79TbRLE6Tg6L+K6JTWuoPcrh0jJSnMaA3c4Ry3Qcc=)
2: Hg9ZafaXQ8rLTSt-HMnDH0lT2yU.roa (hash: 0HTHXkqvlWJxm74CgwKZLUkDjsOUoGNMgHyD7nKaILk=)
3: lPxrJNzTmXryV2F51IkQV9qfvk8.roa (hash: XwWZCOkUNT19TkGVL4DD1MLeNhROccVqsb63RsLA8Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:a7:3c:c0:8f:e0:8a:78:b4:d8:f6:4d:2d:44:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Nov 4 17:01:05 2025 GMT
Not After : Nov 5 17:01:05 2025 GMT
Subject: CN=36c995b7948bb9c7cb1689e3bde46c1262ab4c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:a0:57:84:98:e4:c3:fc:d0:fe:06:0c:a3:
6c:c6:3a:6c:6a:6b:e1:7f:df:c7:9b:08:5e:4c:d1:
1f:7f:25:df:1a:36:f0:41:dd:4a:0a:3e:6b:cd:66:
c8:97:da:58:bc:a4:24:40:34:73:29:ff:d4:34:ae:
1a:2b:30:60:51:d4:54:78:42:c4:56:27:53:a4:f7:
da:ff:dd:d9:94:a7:3d:65:1a:4b:c6:f3:e3:61:05:
2c:11:5f:50:c7:28:54:13:5c:2d:b1:c2:0a:21:c1:
bf:46:15:8a:9d:9b:a1:19:f0:d2:f9:80:c2:4b:3a:
6f:a2:5f:36:46:69:3d:1f:62:27:8d:5b:5d:3d:6d:
55:0f:72:ac:bd:00:cf:41:c9:ae:f5:61:c9:cb:bd:
e3:6a:69:c3:b8:d4:3a:0b:04:6e:64:83:64:43:55:
d9:95:b7:e8:4c:83:3c:a5:51:54:b3:b0:35:77:1c:
a7:8f:54:52:4b:81:af:a7:a7:6d:fa:15:15:70:1f:
85:ef:df:f2:42:75:2c:c2:b1:76:34:bf:d4:d6:d7:
41:bd:89:b2:89:d6:5f:8f:e2:f3:77:db:e0:77:af:
58:89:a2:6f:b5:97:7b:18:bb:0a:62:56:72:fe:56:
61:2e:48:56:be:df:53:81:b0:08:54:36:e6:8a:97:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C9:95:B7:94:8B:B9:C7:CB:16:89:E3:BD:E4:6C:12:62:AB:4C:1D
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c9:ec:33:03:fc:a9:35:64:5b:6f:af:82:3c:75:a2:89:f3:
31:18:2d:56:02:02:91:9f:86:0e:b1:89:13:df:8f:c1:fc:9d:
a7:a1:75:0a:bd:b6:53:74:fa:b7:bf:b1:22:ac:ec:ae:e4:9f:
16:e8:b5:90:23:36:a1:bb:ee:9e:ce:ac:35:6c:ce:f1:8d:77:
8c:0a:55:a7:7b:d7:6c:b0:1d:cb:d5:56:77:45:86:eb:bf:e3:
59:75:90:ad:20:0a:38:3e:1a:04:48:94:cd:02:c4:88:67:8c:
af:4f:e1:c5:03:96:94:01:88:c7:aa:dd:1b:e7:f0:fb:54:13:
6b:06:9d:79:d8:a3:fa:bb:c9:96:fb:68:44:7b:f3:af:ef:90:
b7:3f:2d:0e:c8:c2:27:ff:64:d2:0e:be:a3:72:04:21:c3:63:
20:fe:45:e0:13:fd:4d:58:23:3f:0b:b4:f2:36:81:2d:b7:d5:
60:f9:4b:e6:34:6b:41:4c:f6:28:e3:9b:e8:f3:20:0a:da:38:
c6:a7:c4:ef:ad:e3:a3:a1:19:85:35:f7:c7:37:ce:99:3d:cb:
04:ed:02:0d:b4:f6:7a:5d:c2:65:47:6e:35:29:06:0b:34:0e:
f3:18:dd:8b:e2:bb:d2:f2:7f:53:3f:aa:6f:6f:12:5f:af:a1:
78:ce:78:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:27 2025 by rpki-client