Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
File: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft (raw, json)
Hash identifier: lT2Q7GBNRBBHCV8NhwNou2ZcSYjq8ZFu2LqyX8L4Be4=
Subject key identifier: C2:42:9D:69:92:17:3E:38:BC:23:A4:77:E4:58:22:D8:43:8F:25:A6
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Certificate issuer: /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial: 019A4E18BCE365B670CBBB4E513C04FED88D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
Manifest number: 16C9
Signing time: Tue 04 Nov 2025 09:00:35 +0000
Manifest this update: Tue 04 Nov 2025 09:00:35 +0000
Manifest next update: Wed 05 Nov 2025 09:00:35 +0000
Files and hashes: 1: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl (hash: VgmZeenrLAylhPctUlD+pec/khydswRcwnvQAo07T28=)
2: As_EZ-RvP3qi1sws1jil8dnna6k.roa (hash: OtrJo+OCLnikRPWLn5xnNsduIJXUQk6NGSjartknylA=)
3: MSgwMQBVeKrb-aSmClVXWXeIrYA.roa (hash: QNReZgAEU8FQp9RxZ7cqr3S4KzJDn6XR61dqK9DUir4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:bc:e3:65:b6:70:cb:bb:4e:51:3c:04:fe:d8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Validity
Not Before: Nov 4 09:00:35 2025 GMT
Not After : Nov 5 09:00:35 2025 GMT
Subject: CN=c2429d6992173e38bc23a477e45822d8438f25a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:38:87:03:80:bf:fe:97:f4:c0:c5:2d:78:
9a:10:08:35:1b:c2:f3:aa:1c:24:c2:e1:d6:cc:a4:
bb:f8:5f:b9:3b:ca:1e:5e:d7:65:62:3f:0d:e3:fd:
4d:9f:83:ad:5e:00:55:d3:74:8d:32:d7:4d:86:9a:
42:d0:52:b8:bf:8e:ed:e9:3f:6d:96:fd:30:6f:84:
09:54:32:a8:6c:a3:0c:03:1e:41:0b:32:31:b4:bc:
cf:e7:76:1d:32:3d:e9:84:1b:64:43:97:af:da:d0:
a7:4e:38:e9:5c:e4:e0:5c:2f:4a:0a:68:fd:db:8b:
14:38:26:45:4a:e7:ed:95:22:f1:2e:4f:16:30:27:
c9:dc:f5:b9:29:01:c8:2e:86:d4:3a:b8:be:47:0d:
d3:ba:fe:05:26:7e:dc:b3:79:16:25:de:09:87:b5:
49:d4:a1:e1:0b:3f:4d:8e:25:90:cb:00:88:d0:ec:
a3:d9:f6:d4:f6:05:d9:3a:35:48:a9:fe:87:ac:75:
d0:76:9e:14:ba:1e:9f:45:99:e5:d4:37:7f:28:93:
27:71:3a:6f:bd:6a:4e:4a:c5:35:fd:80:f1:95:44:
b2:dd:00:f4:55:24:49:b5:08:0a:df:63:b8:e9:f9:
b3:8b:f3:d1:a5:09:0c:39:98:e7:27:87:ce:67:c1:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:42:9D:69:92:17:3E:38:BC:23:A4:77:E4:58:22:D8:43:8F:25:A6
X509v3 Authority Key Identifier:
keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:25:8d:d4:73:41:81:e4:f4:0a:06:15:7c:f6:77:3f:1a:4b:
f1:66:1f:cc:7f:e9:af:70:15:d6:3f:e8:71:d4:c6:ec:39:a9:
89:d6:3a:9b:74:42:17:f0:c2:42:dc:a6:f0:6e:e2:7f:3b:68:
ec:9f:fa:01:71:59:ec:10:b4:d8:59:52:fb:15:dc:3c:3d:e7:
d2:c5:ea:02:98:5c:76:ec:fa:fc:39:5d:9d:a7:b7:d6:6d:78:
a6:eb:a0:e9:88:ec:24:ff:92:c6:d2:b3:0d:dd:24:1e:c3:a0:
c5:4a:7a:0d:d0:84:94:9a:bd:ce:73:ad:13:18:d4:8a:69:12:
ee:6e:c4:dc:0a:f1:c7:75:2c:46:b9:35:5f:51:1b:cc:70:b2:
9a:4d:ab:a3:71:e8:8e:27:b4:06:bc:d9:01:91:9b:06:67:36:
2d:46:f9:3f:ba:d6:63:a7:e1:c4:5c:b6:80:dd:80:ad:b3:65:
2a:ee:64:29:9a:88:6f:40:90:67:df:81:83:b6:54:53:c3:dc:
ca:57:a7:c2:63:59:03:d1:67:86:d5:b5:18:cb:58:04:a2:f3:
d0:f3:80:aa:bb:1f:35:e2:2d:64:fa:41:91:b5:a4:e7:db:1b:
90:53:d7:6b:ab:d9:0b:9a:8d:dc:58:84:a7:65:c1:5f:a6:7b:
d9:31:ed:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:25 2025 by rpki-client