Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: xHMWnRmSHzzx3F0rNoZEQfmzyISNnEvCltxUh+CEt84=
Subject key identifier: 9F:75:21:B6:B1:9C:76:6D:57:F3:81:AF:80:FA:FD:EA:43:6E:58:52
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019A503E54DA0061185DCD4C74DCD8C7255A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 0F81
Signing time: Tue 04 Nov 2025 19:00:53 +0000
Manifest this update: Tue 04 Nov 2025 19:00:53 +0000
Manifest next update: Wed 05 Nov 2025 19:00:53 +0000
Files and hashes: 1: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=)
2: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: A+Jj/uzT05/szXEFocCC90uBeEfSLZyXmahiGZrS2GA=)
3: zxF5fdMEgwZjxjRCkFvtSM6cNiE.roa (hash: /aNfoxAWWXZ24dSnA+fFMNRvHS3pHzntsjJo5PzS3sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:54:da:00:61:18:5d:cd:4c:74:dc:d8:c7:25:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Nov 4 19:00:53 2025 GMT
Not After : Nov 5 19:00:53 2025 GMT
Subject: CN=9f7521b6b19c766d57f381af80fafdea436e5852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:3c:de:54:d5:59:07:92:6b:a0:87:c2:0c:
9a:0e:6b:24:58:29:d1:fa:d6:48:6a:89:b6:5e:da:
a7:5a:1a:ed:1f:f0:02:51:55:bf:4c:8f:1b:6b:43:
29:c8:e2:71:b6:44:79:ad:9e:58:41:bc:2c:4c:5f:
10:49:f8:1b:8d:ef:e4:e6:72:21:5f:a9:41:71:bb:
cb:cc:5c:32:64:42:28:49:40:3b:b9:01:48:1a:71:
f5:ad:82:c4:4c:b9:9b:fb:7c:d0:e8:5f:89:ed:7d:
cb:6d:03:9b:95:78:da:5b:d5:de:0f:61:d3:bc:3a:
29:a4:98:08:6f:d3:3a:67:d9:c2:eb:81:36:dd:a7:
ab:f6:f2:33:65:48:2b:24:22:96:d6:6c:2f:88:1c:
45:bc:8e:83:f1:17:e6:35:c0:5d:c3:65:b2:56:e2:
54:dd:47:d3:19:1a:b0:43:3c:f0:12:ad:94:13:51:
e0:66:14:ec:0c:c7:fa:1b:b4:33:ed:c1:79:4d:15:
ef:3e:8f:9e:8d:cd:2f:91:b2:0d:ee:73:24:b0:ea:
48:0f:e0:8b:9e:23:40:dd:39:43:91:87:e9:a9:18:
b4:f9:77:ce:d0:fb:f6:13:31:3d:25:64:ac:00:b9:
c0:b1:e4:09:81:cc:db:dc:3f:a6:34:8e:63:e4:16:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:75:21:B6:B1:9C:76:6D:57:F3:81:AF:80:FA:FD:EA:43:6E:58:52
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4d:fd:ff:31:18:28:3c:81:3a:85:0e:3e:5c:9e:da:c9:10:
d3:1e:9d:57:e5:0b:48:d2:bf:8d:a6:0b:33:65:3d:db:44:a7:
fa:97:34:8a:65:32:a6:55:85:c5:fa:b7:7d:58:0a:74:ec:ba:
e4:f8:e3:97:4a:99:1a:10:b2:4a:35:78:eb:7d:b1:cb:dd:2f:
23:f3:89:56:4a:71:23:c3:cd:bf:ce:77:2a:1a:40:01:a9:98:
4d:29:fb:4d:10:b8:de:06:75:6c:b7:62:fb:48:0d:2a:11:15:
cf:56:44:c1:62:8d:e5:4a:00:2a:05:82:f0:4f:7e:d4:f9:0c:
1f:52:b1:bf:7e:fc:ec:ff:49:37:8e:44:58:eb:5f:98:74:80:
be:fb:87:16:1b:04:81:a2:d2:33:ba:93:2c:dc:97:d4:3e:8b:
8a:01:fb:06:52:2e:37:5e:61:d6:b1:06:72:d3:af:16:48:0d:
08:60:4a:6a:e3:c0:ae:17:64:74:ea:f9:a6:af:1d:8e:76:3b:
df:61:06:c7:d5:f3:32:bb:59:8f:fc:da:55:ab:81:97:a0:46:
f6:95:c3:4c:bc:87:56:ca:75:45:86:c0:3e:1d:7a:4f:9c:a1:
97:96:ce:d9:7d:28:da:29:01:69:6b:20:8f:80:f4:74:c5:11:
d0:08:ef:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:24 2025 by rpki-client