Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: p+3Js81fwM69LLc5MtS9abqEqVp5JaPUKN7cwnYW0XE=
Subject key identifier: 68:6F:81:90:E2:A2:C5:73:79:9A:50:A5:6C:B3:C2:0B:68:14:9E:7A
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 019A50E2F4A5CD06A0DAF527064C887EED69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 0F03
Signing time: Tue 04 Nov 2025 22:00:42 +0000
Manifest this update: Tue 04 Nov 2025 22:00:42 +0000
Manifest next update: Wed 05 Nov 2025 22:00:42 +0000
Files and hashes: 1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: Rsoa9deGVb11iTZX6WRuyJtxwCvTzJuVCqdSRZ2zkCg=)
2: _0wH1BRcgc6tfF99TwNnC3iQ1pU.roa (hash: O+Zelc4oaCgFlSMOLR6IXR0OWFyZm1W0ImLAmE3cggg=)
3: igkLmqGvdo3ZptL2OBtAT5tgBr8.roa (hash: JNS1dghL0HEbj9Q46she80UtZ72vLWiMcXMi6xfr/RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:f4:a5:cd:06:a0:da:f5:27:06:4c:88:7e:ed:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Nov 4 22:00:42 2025 GMT
Not After : Nov 5 22:00:42 2025 GMT
Subject: CN=686f8190e2a2c573799a50a56cb3c20b68149e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:70:f7:22:41:f7:73:3b:49:9c:da:12:03:
fd:d0:46:51:3a:fc:eb:fb:1c:d2:33:45:85:f6:a7:
24:c1:00:0e:98:d8:28:dd:f8:0c:ed:98:28:94:68:
77:6a:a7:cb:b2:c3:aa:7d:a4:e9:df:13:d6:33:fe:
1e:2c:79:57:62:b1:fb:42:56:fa:88:e1:44:f6:70:
10:ff:36:93:71:4b:d2:ef:4e:da:91:08:7d:0f:9d:
28:c3:46:60:9f:12:dd:04:b3:2d:b3:d4:1e:0d:59:
1b:75:00:17:21:3f:f7:3a:e8:d2:1c:9d:8d:8e:1b:
f6:71:80:f1:93:89:fa:e9:ac:3c:76:5a:60:df:9c:
0f:27:07:fc:14:42:e2:1c:84:05:38:6f:21:8c:60:
82:9b:a1:78:49:d2:e4:f5:c4:88:0b:dc:41:b2:43:
16:37:64:38:a3:d1:b3:6d:e4:2b:ef:e1:b1:d6:69:
14:fc:eb:cb:bc:5e:fb:61:d5:6d:16:a2:67:b2:ce:
b0:c5:c5:8f:52:37:e7:7e:44:77:33:49:fe:f3:53:
65:1d:3a:3e:8a:50:99:98:65:33:35:3b:12:5f:b6:
da:41:37:0c:b8:08:fa:7f:01:b4:31:4b:57:a5:d9:
11:3d:e8:fd:8c:74:07:a2:8f:ea:31:18:5f:4b:0f:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6F:81:90:E2:A2:C5:73:79:9A:50:A5:6C:B3:C2:0B:68:14:9E:7A
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:44:76:cf:ce:1c:70:0b:1b:7e:98:80:f1:8f:6b:c7:1d:60:
b4:ff:a3:5d:ea:f3:c9:20:d9:96:3e:d5:12:5b:30:f1:04:31:
cf:99:e1:22:73:ce:61:f6:17:34:0a:a1:28:52:59:99:80:38:
02:74:48:ef:ca:aa:af:1c:a0:8f:f7:20:dd:28:bb:52:c1:e0:
db:07:45:1e:f1:f5:35:4d:9c:91:ba:2f:95:75:34:d3:eb:01:
17:28:69:e2:a0:8c:ad:52:69:a7:fe:d3:74:ee:a5:b8:86:0c:
09:93:2e:e4:62:5c:2e:c0:b5:1d:27:a3:0f:7c:7d:9b:28:c2:
0b:ea:d3:5d:38:7f:70:9b:f8:8f:d3:71:0c:27:75:3a:30:eb:
7a:97:42:23:7f:07:f2:f0:51:ff:99:2c:dd:98:76:ca:89:cd:
fb:01:06:a9:57:03:6f:26:f4:23:e5:08:54:16:7c:5f:4e:d0:
45:eb:6a:33:11:e6:8b:bf:10:e1:f0:47:0c:7c:b4:86:73:26:
7e:7f:da:1e:5a:b4:09:5f:ce:a8:38:64:ec:d6:8b:a1:26:20:
cd:a2:0e:ad:df:84:ac:2d:e9:47:88:84:14:71:31:26:82:2c:
1b:c1:89:7d:7a:fb:63:fa:79:1e:c2:71:7f:cf:96:9b:b4:45:
f2:a3:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:29:32 2025 by rpki-client