Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: 1pcEhZmxdqAffenkPVT9ZHQq/2jk6Gqb/gClBbbjubY=
Subject key identifier: F9:52:1C:9E:11:81:06:91:1C:F3:0D:69:CB:25:2D:25:C5:28:FC:6C
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 019A4EF46032120B2084594C020A3A923EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 0398
Signing time: Tue 04 Nov 2025 13:00:29 +0000
Manifest this update: Tue 04 Nov 2025 13:00:29 +0000
Manifest next update: Wed 05 Nov 2025 13:00:29 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: f2d+I5eeeuJ2qwYY4rWS7uUqH7TiMto0M7l6ar2vYg8=)
2: EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa (hash: sAVxmU6pnEn88UNK22PTFUDf8gXcyDueVttcLFRxFqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:60:32:12:0b:20:84:59:4c:02:0a:3a:92:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Nov 4 13:00:29 2025 GMT
Not After : Nov 5 13:00:29 2025 GMT
Subject: CN=f9521c9e118106911cf30d69cb252d25c528fc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:5b:8b:8e:f5:1b:44:68:e5:f2:2b:c9:0b:
41:d9:3a:01:a6:d8:80:99:f4:36:a5:1a:14:73:30:
91:bd:ac:f5:82:cf:40:3a:6b:d6:87:d3:2b:e1:a3:
a8:89:10:59:81:d8:66:2a:c7:81:1c:9e:96:4c:33:
0d:ee:93:b8:b0:ca:02:e2:25:13:50:1b:10:8a:93:
37:2e:be:38:1e:6a:5d:c3:fb:6e:0a:86:d0:0e:14:
90:10:b6:a6:b4:ce:f3:ed:55:98:b8:74:68:b3:26:
fe:f2:cc:3a:85:68:1c:32:4a:7c:ff:59:db:a1:11:
b5:4d:7c:8f:5b:1e:38:a5:11:72:ba:d9:f1:ec:b9:
ab:72:c5:4e:0e:c0:fd:88:cd:cf:ec:fa:36:93:9e:
30:e7:ba:dd:e6:97:01:09:d9:7f:b0:58:db:57:40:
0e:9b:95:73:8f:da:18:20:37:6a:35:36:ca:6d:be:
3c:39:df:c8:8e:5e:dd:00:71:aa:48:98:50:57:12:
ce:00:30:29:b1:f3:58:1f:03:16:22:53:e7:c3:46:
d2:58:d7:34:f9:91:e9:0a:c9:34:da:76:1d:35:2a:
65:bf:5e:bd:94:ed:4a:a2:cf:7a:ac:b8:ee:aa:e3:
24:df:5c:1e:e2:e7:63:b1:e5:9b:6d:cc:e3:46:c7:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:52:1C:9E:11:81:06:91:1C:F3:0D:69:CB:25:2D:25:C5:28:FC:6C
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1d:4e:41:ff:31:38:c7:d1:63:98:4b:16:41:66:77:a7:2a:
75:ed:37:ea:56:47:71:43:55:30:9f:03:fc:69:f9:d1:83:ab:
6c:86:ee:f6:5f:f4:69:e7:dc:93:b8:81:62:40:f6:3e:98:c1:
33:05:fb:0a:4a:4d:49:c1:d8:6d:2f:c4:7f:a9:99:20:d8:39:
df:51:ad:38:38:cf:39:d8:c6:f3:96:1f:01:7c:4d:0d:1d:e4:
72:48:ca:c6:37:ac:4f:a2:b0:c2:2d:7a:aa:fc:ae:47:43:44:
bd:d0:2a:82:90:ca:4a:30:d0:b5:d3:5e:74:11:5e:04:6f:e2:
53:66:fb:48:6f:eb:4b:c5:32:55:4e:18:6e:d1:45:1f:d1:10:
bd:ff:00:11:16:ee:6f:cb:68:73:ea:c3:6d:d2:39:09:54:66:
73:95:af:19:a1:78:5e:ff:68:d1:86:2b:70:4b:c4:60:7b:5b:
80:93:65:55:b8:75:66:f6:2a:35:8c:2d:34:8c:38:3d:09:f3:
6c:bd:6e:37:48:39:75:7a:63:53:b5:cc:44:5f:24:8d:a8:28:
00:67:c1:38:89:bb:ba:56:d7:38:c8:09:af:e4:b7:14:42:28:
08:26:80:e5:d4:91:96:84:d8:10:5d:28:c6:a4:85:a0:3a:56:
9c:bc:b8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:19 2025 by rpki-client