Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File: c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier: XE26QfrOJwnLbQ2eKcPESBCWZbAvS9mnBvfVffBVh2E=
Subject key identifier: 9F:CA:72:40:F3:CB:EB:E3:EF:6C:62:12:B3:9B:FF:71:D4:E0:82:C1
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 019A52D13C9AEDC0BD055EFDF1F1E09E7E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number: 0B51
Signing time: Wed 05 Nov 2025 07:00:35 +0000
Manifest this update: Wed 05 Nov 2025 07:00:35 +0000
Manifest next update: Thu 06 Nov 2025 07:00:35 +0000
Files and hashes: 1: ag-XVm500Ink_y9Z543W0cYT2e4.roa (hash: LTklb1ptuKPn0530SuHC20oeHYTlb0YVhREmYDi0qn8=)
2: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: i56ibfCOfvh4eYU/QBpertiy8XFgXI4rn92aml2t9aE=)
3: xqtuxbgfgKOQAXDLHhW5kYSASLM.roa (hash: Akx0xbIbgUFrWIKc+N3GbCju1aCG4ckavEzXznoEvO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:3c:9a:ed:c0:bd:05:5e:fd:f1:f1:e0:9e:7e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: Nov 5 07:00:35 2025 GMT
Not After : Nov 6 07:00:35 2025 GMT
Subject: CN=9fca7240f3cbebe3ef6c6212b39bff71d4e082c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:fb:f5:e2:29:e8:b5:e0:80:bb:ee:99:ab:
41:73:05:f4:6d:e0:ce:d9:b1:c8:d8:93:71:38:ff:
c7:02:b2:a5:aa:dc:1a:db:bc:21:50:56:f7:ee:2d:
b4:8a:ca:a4:f1:23:0f:0a:bd:ca:10:a1:e8:3a:b8:
16:ff:85:45:c1:76:6b:b2:4b:31:db:42:c3:52:04:
e6:03:fd:c2:02:a3:a2:89:a9:a0:96:41:15:95:12:
dd:d0:9b:07:37:84:9f:75:a0:ef:36:41:7a:2b:b0:
d9:ab:08:97:9f:0f:e1:63:27:6b:54:62:79:0b:34:
80:d3:d8:bd:0d:b2:07:37:a6:13:06:9c:de:23:51:
ec:30:dc:a3:e3:9f:d3:0c:5c:fa:6c:40:e3:b8:41:
3e:7a:4b:e9:7f:51:9d:34:9a:a0:13:44:1a:9b:01:
28:56:57:d0:af:b3:d0:01:69:02:76:ba:5b:f9:e5:
6e:93:22:d2:f7:ea:29:19:86:6e:f0:7c:bd:d0:fa:
b7:f9:2a:2e:e2:84:70:97:c7:fb:c2:fa:6e:28:b4:
84:07:be:76:cb:2b:50:04:99:5e:bc:ce:6d:99:f5:
7e:ce:8d:e8:bc:6e:3b:f8:19:cc:7c:85:0f:66:6e:
ae:a1:95:f3:da:1b:a0:40:fe:e1:37:48:e3:38:eb:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CA:72:40:F3:CB:EB:E3:EF:6C:62:12:B3:9B:FF:71:D4:E0:82:C1
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:17:37:bd:e8:b2:6d:30:98:0d:70:43:75:dc:22:09:ab:54:
98:7a:1c:e1:7b:42:ff:14:3b:1b:ca:47:86:70:3a:d0:94:3c:
03:87:60:4f:46:54:3c:42:f3:7d:76:fc:9e:d0:1a:a2:77:69:
b5:76:71:bd:b5:4e:76:f0:f2:ef:61:b8:e2:e8:a4:7f:e5:3c:
5f:c3:fe:2b:57:e2:18:87:a5:3c:c5:d5:f5:a0:4a:7a:d6:e0:
2a:db:e4:8b:48:3f:e5:fd:dc:12:99:c3:0e:72:9e:75:d6:8a:
1b:e0:59:51:e8:35:bd:75:51:6e:56:f2:7c:ac:3b:fe:60:36:
33:18:d6:6d:cc:84:b0:d6:03:fd:e7:3f:66:2d:06:1d:8e:a0:
0c:b4:41:b1:2e:9c:f9:ca:68:e3:a9:89:6b:f7:40:f7:a5:79:
72:6f:e3:3c:dc:5a:fc:14:29:c2:43:43:db:cd:1a:c5:74:22:
8f:7d:8e:ab:77:45:c7:53:a8:56:c0:5d:d1:3e:d0:e8:22:1d:
3d:23:94:ba:2b:d0:55:e7:12:39:5b:ed:94:7c:ff:8f:ec:9d:
23:61:98:4d:ed:7f:b4:5a:21:ac:be:ed:80:8a:f0:e0:4a:2d:
ae:e3:39:22:a7:c0:92:5e:81:15:e4:21:0b:2f:4f:e8:ff:18:
f8:3c:01:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:19 2025 by rpki-client