Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: FQcVBEasjEWYjeCFqmsjLg+72Ace3o9MRfiZP8u3deI=
Subject key identifier: 4F:01:25:BA:16:A9:68:01:DD:B5:2C:3F:CE:F6:B0:EB:F8:D6:24:A4
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 019A4D7395CEC7D8D48369425B85956B904C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 06C3
Signing time: Tue 04 Nov 2025 06:00:11 +0000
Manifest this update: Tue 04 Nov 2025 06:00:11 +0000
Manifest next update: Wed 05 Nov 2025 06:00:11 +0000
Files and hashes: 1: 67zW8t21om1pTXvyuagS0QWX12s.roa (hash: arwG9XkQ/+2dVagELL/zq8/mCR4dYaym8bqyA1sBk4A=)
2: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: CnhOOvNtY+s58d6Hn7aNcG/gMwSOhOlAJMNW95jFyIs=)
3: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (hash: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:95:ce:c7:d8:d4:83:69:42:5b:85:95:6b:90:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Nov 4 06:00:11 2025 GMT
Not After : Nov 5 06:00:11 2025 GMT
Subject: CN=4f0125ba16a96801ddb52c3fcef6b0ebf8d624a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:a2:b3:ed:49:7f:0c:5d:6c:f0:74:ba:90:
f9:a9:0f:4f:9f:51:d8:6d:c6:7e:4b:e7:d3:b7:f3:
4b:76:cc:b8:83:5e:fa:ff:71:ee:08:cf:75:05:18:
a0:0f:88:e7:cd:ea:68:65:c9:07:0c:72:f9:9f:72:
28:93:ad:79:56:0d:9e:6e:f9:65:d9:74:ca:73:6f:
50:b6:74:59:c6:63:19:f7:e4:3b:18:4d:b2:5c:42:
a8:83:13:ef:27:4c:03:f7:e4:5d:b6:d5:fa:88:af:
ad:ef:1d:60:3d:31:43:4b:3c:25:5a:85:58:b0:7a:
72:5a:60:d3:3f:a0:1f:83:ee:1c:15:b3:bd:e6:9a:
f3:ac:9f:6f:e5:19:f2:a7:5b:35:6f:2e:98:19:b2:
a6:d1:e6:2f:cd:2f:41:8e:79:d9:da:50:1a:47:b5:
9a:7f:af:4f:b1:11:9b:c4:87:00:0d:46:4f:98:61:
15:fb:e6:3f:43:11:7f:11:79:79:ba:f7:8e:c1:3c:
f1:22:7d:bd:f4:2f:03:d3:91:d3:d9:78:12:eb:b1:
dd:56:d4:0b:aa:41:b0:ee:8a:06:78:f7:b4:46:ba:
62:c9:9d:8b:00:3c:ac:bd:2b:74:53:73:45:74:5d:
fb:80:a0:7c:7a:9b:9c:41:7f:72:7d:48:ea:38:22:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:01:25:BA:16:A9:68:01:DD:B5:2C:3F:CE:F6:B0:EB:F8:D6:24:A4
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a6:54:8b:0c:71:50:07:79:ff:62:fc:79:69:1a:7e:4b:fb:
14:a9:f0:bd:66:8e:35:7b:ae:d0:8b:23:a6:29:b4:7e:74:88:
f1:64:4e:ee:c8:8e:3a:bc:16:9f:5a:f8:fe:14:15:c3:af:1c:
3a:9b:5d:50:12:77:e5:fd:9f:49:4b:8d:db:d0:4a:45:6a:93:
1b:c4:54:fd:55:3d:e4:8c:3c:bb:c8:cd:b0:35:a1:ee:55:98:
96:63:3b:e9:0c:82:33:ec:cc:fc:7d:de:07:50:ac:ba:d2:43:
e9:98:89:a8:4c:3b:31:16:bd:bb:b3:da:da:5a:3a:cf:8b:c4:
73:94:6c:e8:bc:ac:f2:7d:cb:19:13:30:78:a4:61:60:28:8f:
d0:e9:f6:11:45:7a:a5:d4:f5:21:52:90:57:ba:c8:47:63:40:
89:91:43:f5:0c:f7:07:49:0f:44:8c:ba:b6:a0:95:e6:19:27:
aa:ee:ff:6f:c9:49:a4:4c:7d:b8:66:54:d4:93:05:ec:d7:1a:
d9:82:67:5b:37:ff:15:85:ef:ca:2d:ac:37:1f:4d:e0:6e:f4:
91:cb:3b:c7:3c:93:64:28:96:17:f1:80:74:30:48:54:0c:07:
a6:0c:0f:05:be:01:d5:d9:67:07:4f:a8:ce:6a:f4:6d:2f:06:
9e:d2:9c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:51 2025 by rpki-client