Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: y4j+7KQF9t9N/teVJYfUWDmqcdLVWzzdV7TEi21akXc=
Subject key identifier: 23:F2:85:85:B0:1F:63:CC:E9:AF:09:0B:E2:EC:A8:9D:74:C9:26:87
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 019A4D7375381D5CC61713CC8832B65C43A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 095F
Signing time: Tue 04 Nov 2025 06:00:03 +0000
Manifest this update: Tue 04 Nov 2025 06:00:03 +0000
Manifest next update: Wed 05 Nov 2025 06:00:03 +0000
Files and hashes: 1: 9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa (hash: mLUd+UrxmldwwslKwjDeIf5bagEinj/YnRBNdn1A2Vk=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: 7tivzTf8ZxKB16JM9e4k9n4EWQ31w/tvKCJtVluI6nU=)
3: dBTi9V6Lj09iolupOZhzala-GHE.roa (hash: XgE5C6MotJsfB/9tY52qQR/CvntbYT/9aocAmt0KwNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:75:38:1d:5c:c6:17:13:cc:88:32:b6:5c:43:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Nov 4 06:00:03 2025 GMT
Not After : Nov 5 06:00:03 2025 GMT
Subject: CN=23f28585b01f63cce9af090be2eca89d74c92687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:43:6c:89:42:84:7f:d2:0c:90:60:90:0c:
7b:1e:d3:dc:58:c5:76:e9:d1:1a:0b:a6:dd:ee:e2:
2a:81:d4:63:c1:45:99:c6:d1:27:f0:c0:04:ee:6e:
b1:9c:f8:b1:9c:6e:c4:6b:5a:34:bd:51:8b:bf:69:
6e:f2:ea:98:b5:ac:2c:e8:df:54:6c:e6:b7:55:1d:
74:83:80:f7:74:db:eb:2c:1a:ea:29:7e:59:d2:5c:
37:eb:77:3d:45:2b:ab:40:9c:2b:5d:6c:05:a4:23:
41:cc:94:24:f4:7a:53:d4:38:f3:13:21:e5:7d:47:
c7:4c:30:9d:ff:c6:c8:a3:06:20:98:c1:55:3a:32:
e4:5a:51:7a:03:b8:2a:88:d4:aa:24:da:14:72:d9:
a8:88:e6:88:fa:d4:4d:9e:67:a9:21:09:09:84:7c:
68:a7:69:57:92:8c:59:e2:41:0e:d0:a1:12:f4:35:
e8:a6:8d:f5:eb:68:74:ce:17:81:04:9e:b3:be:3d:
d5:bd:de:71:2a:b3:ce:06:55:56:2b:9c:45:a9:5a:
cc:f9:8c:ce:df:37:a8:e1:00:67:5d:74:ff:09:1c:
98:42:f7:5a:5e:27:1d:15:af:16:ab:32:71:99:22:
41:5f:db:bc:29:ad:92:85:98:e0:b2:d5:98:7a:63:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F2:85:85:B0:1F:63:CC:E9:AF:09:0B:E2:EC:A8:9D:74:C9:26:87
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9c:42:39:f0:b9:d4:de:65:c1:d7:bd:c9:bb:f9:50:a7:5b:
33:34:47:cd:1d:45:77:d7:cd:94:24:0a:86:ce:0a:7a:6b:2e:
d4:e4:b5:4a:7d:33:24:59:bf:c7:c9:10:dc:7e:b2:8f:06:e7:
f5:d6:24:3f:e9:b7:0d:6b:75:e7:56:fe:ae:5a:ad:31:50:ca:
a8:1d:28:ac:65:8c:05:61:2a:71:61:09:97:7a:95:6c:47:21:
0e:e4:73:21:6f:ec:f1:5b:bf:97:21:bc:83:5e:77:46:e3:bf:
1a:33:da:f6:29:76:6e:27:0c:c1:86:04:cc:b3:86:22:b0:b5:
f0:f4:85:83:5d:e5:74:7c:88:8e:45:8a:f7:60:64:e4:08:89:
79:74:9a:ca:02:da:cd:c9:ac:72:f7:43:af:43:3d:d8:58:4a:
ac:ad:f4:23:20:11:f3:ad:c5:9f:35:bc:17:e6:3d:31:dd:01:
c2:f6:d5:0d:e9:32:d3:3e:04:2a:9f:3e:c6:07:c8:d3:98:62:
52:a9:a8:ae:90:91:1a:ac:03:8a:37:ab:ef:27:5d:5a:2f:da:
e4:22:2a:39:3e:5a:c0:38:cb:c7:48:ce:43:ba:09:49:1d:0e:
e6:0b:56:2f:96:25:8f:c5:52:61:fc:db:10:1c:8c:2c:62:7a:
38:e9:03:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:12 2025 by rpki-client