Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json)
Hash identifier: XmllaskognAiSCim7SeIb5MBFIdmmrg51VozdDnyffM=
Subject key identifier: 9F:DA:B2:38:0A:8A:DF:D2:2F:D2:D5:2A:6A:4A:2E:26:9D:76:40:B5
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 019A4DE19175679B7568E67F1C1083A6CD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 08:00:19 +0000
Manifest this update: Tue 04 Nov 2025 08:00:19 +0000
Manifest next update: Wed 05 Nov 2025 08:00:19 +0000
Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: a9VsivrWRr6YXQC32+zmTK67ygPYkV93/Ifim4u5DaA=)
2: HFh_eeQijygIePsUO7KzM5bNq6k.roa (hash: f2J1YRSlfTR9F+Nhq15QjxHIC1sqOM+BN59BVcBlUfo=)
3: fCHzIX3PF5IX4vTpqhp12B4ANgE.roa (hash: 56hifj5pI9Tipd1DppPjnl4odiFdle6vhykV6J1DFck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:91:75:67:9b:75:68:e6:7f:1c:10:83:a6:cd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: Nov 4 08:00:19 2025 GMT
Not After : Nov 5 08:00:19 2025 GMT
Subject: CN=9fdab2380a8adfd22fd2d52a6a4a2e269d7640b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:79:40:d0:8b:b6:62:77:00:6d:1f:cb:9c:
43:a7:76:df:e7:18:bc:59:41:83:77:58:32:de:d1:
54:0a:15:20:38:ac:cc:52:84:b7:d9:6b:63:39:3f:
9a:a9:63:88:dc:91:03:26:85:2e:24:78:ea:58:e4:
2a:7e:82:7a:8a:4e:ad:d5:c4:90:5c:de:b5:33:06:
06:1e:c2:ee:39:24:dd:63:8c:20:e0:19:db:2f:44:
52:33:4c:a7:75:0f:55:ff:20:e0:ca:f1:3e:50:68:
b8:ad:42:b2:2a:04:a5:78:54:f2:da:3d:81:b1:b8:
fe:a7:60:d5:6b:d4:27:65:43:83:21:4a:d3:00:d1:
3d:83:88:4c:14:93:38:bd:bb:a8:8f:f9:80:e0:b9:
b0:ab:a4:31:78:2d:88:17:7b:9a:f8:3a:b8:4a:0e:
28:d0:6a:a1:96:c6:86:be:52:25:bc:a4:9d:f1:d4:
d7:74:06:92:be:12:ca:5b:8c:2f:da:45:96:c0:b8:
bc:49:dd:19:ea:9c:3e:e2:b0:d8:0e:57:6f:e0:09:
32:9b:39:40:5a:40:12:1c:89:1e:29:b9:75:03:f4:
66:33:0a:a4:fc:5e:58:ad:e0:3d:f1:e1:a5:31:88:
97:8d:d1:fd:4e:1d:23:0a:f3:00:95:94:b9:85:f0:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DA:B2:38:0A:8A:DF:D2:2F:D2:D5:2A:6A:4A:2E:26:9D:76:40:B5
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ee:4a:eb:e5:0d:06:69:95:a6:18:76:9e:3e:0c:e8:dc:cf:
cf:4d:1c:66:87:21:32:1c:2d:79:c5:db:4b:ed:3e:19:8c:1c:
7f:1d:09:96:38:8a:05:bc:3e:0e:b9:80:09:16:3f:da:78:34:
a0:21:cf:86:13:44:0f:cc:db:04:97:b9:ae:5d:68:ee:fd:60:
4c:55:9c:a2:5a:29:1d:ca:c3:e4:c6:c9:97:f5:78:1e:39:92:
e6:f8:5b:cb:1d:2c:e8:f4:05:9e:57:49:e3:0f:26:16:d6:52:
e2:ca:89:0a:7e:aa:31:fc:18:cb:97:ef:68:3e:93:b7:7a:06:
10:cc:f1:6b:8c:a9:b2:6e:39:79:9c:1e:fd:7f:00:2e:70:11:
1b:70:01:9f:35:b3:d2:14:ea:64:82:db:c4:5a:dd:60:bb:9e:
a1:7f:d4:a2:f5:d6:bf:6f:6c:2c:9d:78:22:e9:8e:e1:2f:f1:
2e:de:bf:4f:77:07:df:a9:ea:27:a5:ac:5e:7c:ec:e1:b4:81:
50:0c:05:f5:3c:4a:7e:22:dc:c9:54:78:d8:66:8c:e0:89:4e:
dc:ce:28:0c:f5:34:b4:65:7e:22:c5:56:f5:b5:af:06:99:92:
31:dc:e0:b5:f0:ba:1f:40:6c:41:f2:db:91:90:ee:6c:f0:20:
62:24:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:18 2025 by rpki-client