Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
File: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft (raw, json)
Hash identifier: 6iwp2kHV54v0Y/lrFMZ+FJzT3rnjuiiVXmcoqwJnm0A=
Subject key identifier: 9A:98:82:9F:8E:0A:21:7B:7E:90:D4:1E:AC:15:F8:9F:6E:32:55:26
Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af
Certificate serial: 019A4EF4C1776FE81855C640B76F65069D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
Manifest number: 135A
Signing time: Tue 04 Nov 2025 13:00:54 +0000
Manifest this update: Tue 04 Nov 2025 13:00:54 +0000
Manifest next update: Wed 05 Nov 2025 13:00:54 +0000
Files and hashes: 1: A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl (hash: FPZmoCGE8OWAxDCvktZlj9cpxa786EruB3am0ySg8kg=)
2: PAFl-pG2JHaMz_7ipR6yMf63H8w.roa (hash: byy0wWUqy3xmET5bVuzwYGsa7Zk9Dk0kE6IQV8R/QgY=)
3: jZL5Xhdd_DQTPlseqK0seytctFM.roa (hash: iK3t86giIYaf8WbR2Oyl7XO/RS0ik8f6mwnnTPsecrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c1:77:6f:e8:18:55:c6:40:b7:6f:65:06:9d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d8024188491a319c5276721f940efae7fc21af
Validity
Not Before: Nov 4 13:00:54 2025 GMT
Not After : Nov 5 13:00:54 2025 GMT
Subject: CN=9a98829f8e0a217b7e90d41eac15f89f6e325526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:d3:94:7c:10:c2:c1:f0:fb:6c:68:49:93:
6f:24:08:7f:14:71:9d:07:68:0d:eb:62:88:16:80:
3a:7c:b7:cb:a3:07:d3:56:ff:b7:02:af:01:0b:e0:
88:96:5b:9f:e7:43:49:50:87:dd:05:84:bf:2b:f8:
53:e9:1b:5d:10:c7:b7:45:d6:4a:94:5b:5c:ed:d4:
3c:6b:d8:14:85:f0:78:7c:24:dc:1d:7f:f9:df:b2:
d8:b0:5e:19:57:ad:84:40:51:22:3b:43:13:df:29:
6b:9b:5a:eb:ad:5d:49:c6:be:73:72:18:d0:7e:c3:
e9:a3:f4:2e:a7:06:e7:02:fb:0d:98:b6:f4:50:26:
a2:86:a3:0e:80:0f:85:ca:4e:dc:9e:40:c9:5b:6d:
88:8b:ce:0f:ef:9f:e1:11:a7:11:31:9a:bb:85:b6:
9d:c3:5f:0c:5e:e0:18:ef:12:19:45:e5:9a:1f:83:
42:d1:e3:82:db:a4:56:d6:93:4d:45:56:02:46:db:
33:88:03:d0:27:17:44:49:ad:50:64:b8:4e:b4:f0:
b2:6e:5c:88:c5:ae:f9:fb:03:5d:04:a4:7d:6a:15:
4b:cd:75:47:5c:05:8d:9f:43:cc:6c:14:0b:39:b4:
66:7f:cd:36:10:c8:e3:03:13:aa:2d:b7:fb:c6:c7:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:98:82:9F:8E:0A:21:7B:7E:90:D4:1E:AC:15:F8:9F:6E:32:55:26
X509v3 Authority Key Identifier:
keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f9:ce:66:7a:b5:5e:6b:c4:0f:15:4b:2d:7a:c9:30:02:0e:
8e:c3:ba:e0:26:b3:1b:8a:87:cb:06:80:b5:62:19:a8:06:08:
a3:08:8f:ca:aa:dd:2e:83:72:37:43:ca:52:72:86:f4:00:57:
5b:c2:85:f5:93:a0:6b:fe:e4:b0:3b:86:12:ff:ce:05:43:62:
c8:0d:74:93:7e:e0:49:69:f2:37:b1:7c:73:97:66:16:17:92:
0d:fe:89:d5:45:ed:e2:b0:06:e7:8c:0e:a1:dc:53:f9:62:31:
aa:62:b0:20:4c:79:d4:91:ff:aa:0a:f3:8b:65:42:ce:9c:27:
33:5c:f8:6c:b7:fc:1c:97:74:47:81:26:9f:37:2f:df:1e:f2:
e5:b2:67:51:85:b8:bf:b7:19:87:e4:1b:d1:4d:c6:33:15:d5:
33:61:e5:84:e8:4e:06:27:6c:25:98:67:a1:60:74:fb:77:23:
76:4b:b8:39:99:8b:c3:89:34:c2:0f:6a:7d:4e:7a:1c:81:0e:
75:d2:15:9c:54:ed:94:fd:37:0e:48:32:6c:f6:de:7c:a7:a8:
78:9e:4e:a5:bb:fb:52:ff:5e:e5:97:2d:8c:aa:b5:9e:b9:30:
e9:c4:6c:c2:d1:d9:4b:9d:ab:be:f0:8d:c6:9e:aa:17:2b:49:
23:0e:84:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:53 2025 by rpki-client