Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier: aQ19A4q7bkV2kjjenH1Dpiesj3vMV9ksw2bJyKqGXZw=
Subject key identifier: C9:E8:43:39:53:34:5E:07:AA:0F:B7:E0:9C:BA:85:17:0E:A8:A7:07
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 019A541AAE44F5DDE39E73CDBD9A1FCE0EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number: 06F4
Signing time: Wed 05 Nov 2025 13:00:25 +0000
Manifest this update: Wed 05 Nov 2025 13:00:25 +0000
Manifest next update: Thu 06 Nov 2025 13:00:25 +0000
Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: kP5PYJaVqvy5am2tNOGTEox8UUZWXm1qKQUvBavdVdM=)
2: iKhGCzGlkdUH-YeR40es_shy-iQ.roa (hash: UctZx1wGvAAr9xLOczqP8p1as4JR/y4gz7WSAX7sYrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:ae:44:f5:dd:e3:9e:73:cd:bd:9a:1f:ce:0e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: Nov 5 13:00:25 2025 GMT
Not After : Nov 6 13:00:25 2025 GMT
Subject: CN=c9e8433953345e07aa0fb7e09cba85170ea8a707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:d8:76:d3:04:e5:76:75:b9:ea:a9:de:29:
2e:25:2b:09:bd:5b:cd:63:0d:9b:36:08:f2:2d:60:
55:af:a9:09:7e:c5:01:c0:38:8e:b1:5b:04:30:06:
0e:ed:6b:32:ac:7a:96:4f:44:ef:da:6d:61:7e:1b:
ff:b1:17:cf:d7:45:a3:ef:6f:59:82:62:39:a0:7a:
0e:d3:35:1f:0e:d1:80:e6:b3:c7:5c:87:5a:47:f2:
85:9e:4e:54:22:2a:ae:4c:4f:72:56:c2:26:ea:4c:
ec:3c:d0:38:30:74:6b:33:a8:91:08:b2:fc:53:36:
bf:f8:15:f1:7d:43:70:5d:cb:72:f2:89:a3:a6:fa:
35:8a:b4:a5:fe:68:18:46:24:0a:57:d9:d9:fe:74:
0f:64:ce:f0:66:b5:db:ef:70:58:82:d7:36:e7:75:
20:a1:5f:49:c9:32:de:b2:ff:b8:cb:b0:80:0c:d2:
d8:c2:87:9e:b8:b4:3e:07:ca:b0:dc:54:eb:ca:86:
41:9c:43:9d:90:b7:39:3d:9a:e9:0f:74:fd:cd:35:
d9:0e:3e:33:3c:1b:a1:70:7a:bd:63:d0:a1:8a:95:
a4:39:6a:f9:39:67:00:44:1a:86:35:43:18:40:8c:
66:3a:d4:e4:e2:cb:3b:99:9d:8c:5c:77:e6:f3:c0:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E8:43:39:53:34:5E:07:AA:0F:B7:E0:9C:BA:85:17:0E:A8:A7:07
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:33:29:71:c1:88:2a:3d:a7:c3:49:f5:7c:d8:0b:1d:77:5c:
47:c7:7f:f5:68:ae:54:9d:7f:5c:01:e7:f9:19:39:a3:d1:a3:
e1:66:34:97:9a:9f:0d:d9:72:29:09:88:69:76:90:91:3e:20:
3a:65:40:2e:c7:0d:f4:dd:3a:d6:6e:0e:c9:7d:22:0f:d0:d4:
79:88:ef:4f:d6:e6:c4:1e:d4:b5:0c:f1:fb:b7:fc:bf:2e:ea:
d0:e2:45:fe:ec:34:d0:68:c5:3a:ce:33:1d:5b:9f:2a:d6:be:
8e:a1:dd:72:0d:56:79:65:e5:70:06:0c:da:d9:44:96:66:3d:
9e:b4:fb:f0:b9:63:b1:1e:7e:89:b7:a6:10:bc:a4:02:ad:03:
e9:b6:bd:d8:04:7c:13:3a:6a:62:e2:b8:04:0d:5c:72:f4:7a:
4f:26:43:b9:3a:38:89:df:cf:6a:59:16:2e:d3:52:38:11:de:
a2:21:ad:0f:f2:67:1f:02:dd:70:65:d0:15:52:d2:21:b4:50:
3d:ce:30:71:62:85:ee:19:bf:5c:3c:6c:9d:ad:21:ba:57:60:
b1:9b:a0:7e:13:ae:b4:f1:fb:bb:41:b1:50:48:a0:1c:17:b5:
0d:01:a0:ca:24:36:10:d1:37:18:bf:e7:36:4d:5b:9c:3e:32:
e5:c5:84:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:54:53 2025 by rpki-client