Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
File: 9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json)
Hash identifier: vFzb5yzG+INpd+2ErEtFmdcxqCO6k4Ms7VUXxemRWRQ=
Subject key identifier: E3:4B:ED:A4:39:04:AA:6A:56:4C:25:88:2A:45:CA:8C:E2:A1:5B:C4
Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
Certificate issuer: /CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Certificate serial: 019A4F98CA3A8AED930DEA7981C445C19B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
Manifest number: 0426
Signing time: Tue 04 Nov 2025 16:00:04 +0000
Manifest this update: Tue 04 Nov 2025 16:00:04 +0000
Manifest next update: Wed 05 Nov 2025 16:00:04 +0000
Files and hashes: 1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: LmQU/Q1aJR6yjz3zi1iv+Hu5nIor1mogRYsrqPztdSU=)
2: QOEcWjHe4NVCZVw1toczwOnDbvg.roa (hash: EaeTTrx2jGMXQlq6vQvVplBMXhi0x7kTgcTmmy7+jJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ca:3a:8a:ed:93:0d:ea:79:81:c4:45:c1:9b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Validity
Not Before: Nov 4 16:00:04 2025 GMT
Not After : Nov 5 16:00:04 2025 GMT
Subject: CN=e34beda43904aa6a564c25882a45ca8ce2a15bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:54:be:9c:16:40:63:ab:25:50:fd:47:40:
4b:a1:15:4e:0d:3e:d8:ca:45:8b:d4:e5:77:5b:f3:
e4:3d:3f:d8:0e:e3:a6:43:3c:4e:f5:39:b0:0e:01:
2d:ca:2a:2b:7a:58:9a:bd:a5:4d:e1:13:75:f5:13:
d2:23:10:03:3d:6e:bf:1b:80:33:e0:ce:06:51:3a:
59:d4:f3:44:60:09:a3:ce:3b:7b:20:d2:e3:89:31:
08:27:b3:91:9f:05:dc:a0:16:b2:9a:70:db:5a:75:
56:6e:d6:97:e6:eb:dd:d1:14:e6:e4:3b:02:b3:ce:
88:7b:d2:c4:1f:15:57:72:ab:a6:e2:5e:c9:fc:8b:
a5:4c:46:ff:f3:ac:a4:68:64:4a:f3:01:d9:df:7c:
87:00:06:23:d0:45:ab:05:fe:ec:1f:4c:02:26:b8:
63:a8:ef:76:2a:51:8d:a8:ac:cb:a1:1d:6d:ec:5c:
49:0a:95:bb:47:d2:99:8f:fa:1c:87:8a:f6:0c:cc:
53:c5:95:81:a9:02:80:83:2d:6e:e0:a4:54:b4:12:
47:97:18:c2:4a:33:a2:9c:75:8e:b1:ea:b9:2b:1e:
b6:04:5a:82:bd:48:d4:a6:70:cc:05:78:d7:0b:d6:
70:8d:aa:42:6a:71:54:17:ba:1c:8b:58:e4:7d:27:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:ED:A4:39:04:AA:6A:56:4C:25:88:2A:45:CA:8C:E2:A1:5B:C4
X509v3 Authority Key Identifier:
keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:87:07:f0:6a:d6:e7:c2:2d:e3:1b:52:8d:95:60:4f:7c:15:
be:0c:28:85:3f:91:de:a5:a5:f8:64:1e:e8:20:e9:e8:5f:0f:
38:c2:75:38:2b:32:31:d5:66:98:96:96:5e:36:96:ce:ea:f8:
a9:8b:14:12:61:9f:d7:c1:60:dd:2d:a0:05:4c:9b:97:0d:3d:
9c:00:88:44:a0:8b:18:57:f8:8e:76:df:35:8b:e2:b8:f8:27:
f8:da:6a:22:57:82:70:43:12:36:7d:a9:0c:2b:23:f7:09:ba:
8f:62:cc:5c:f1:7a:e5:15:cd:93:c4:7d:23:3c:4e:b7:dd:e8:
9a:c9:bc:ee:41:9d:74:32:0b:5e:0c:5e:69:b9:05:26:17:32:
72:b3:3d:c0:9f:e3:2f:f5:09:25:ed:90:14:72:74:28:09:b3:
83:cf:51:d5:6f:3f:ea:f4:7b:98:c2:25:76:36:71:99:7d:0f:
1d:7e:b9:1c:dd:52:78:92:f1:cb:e8:ab:9d:b4:51:7a:60:d9:
e8:2e:b4:bf:8f:97:96:0d:50:68:09:a2:42:84:c8:62:3a:32:
66:c9:13:1c:40:8a:1f:fa:6c:c6:77:63:9d:89:47:27:11:bb:
fc:73:de:f4:28:a7:28:1a:57:ce:f9:5b:b0:20:a2:5b:5a:2e:
44:cf:82:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:22 2025 by rpki-client