Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: z7LjlTrm/uwOXy+14P+fRO00YMXLNxf34gKZfghLBnk=
Subject key identifier: F3:79:5F:7D:49:A1:FD:F9:4D:39:6D:C1:34:85:CF:91:BC:67:15:C4
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 019A53E3BA401901BC370C1F1768776FD4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 016B
Signing time: Wed 05 Nov 2025 12:00:24 +0000
Manifest this update: Wed 05 Nov 2025 12:00:24 +0000
Manifest next update: Thu 06 Nov 2025 12:00:24 +0000
Files and hashes: 1: 1-A_irtWwfr7YbN9N57Y3W8ENeUY.roa (hash: Pj4tBJ5c5Ic2RFVavExezSrK0oZePPimYoJBCQFnu8o=)
2: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: KAzVEtYz3B4uhWKKC0/eoiBPQ34AD6hExxYV9RGOPao=)
3: Is71eUc7Q0aGa38UvjoD1fxVCa0.roa (hash: o3QoJnjZZqmX4CC/3QVDf3vqO7q6XpT3vRmbQX4Rx/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:ba:40:19:01:bc:37:0c:1f:17:68:77:6f:d4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Nov 5 12:00:24 2025 GMT
Not After : Nov 6 12:00:24 2025 GMT
Subject: CN=f3795f7d49a1fdf94d396dc13485cf91bc6715c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:cd:20:15:e6:4e:04:52:85:37:99:38:c1:
9a:16:fd:bf:63:dc:7f:24:4c:2d:e3:73:15:85:37:
4a:f9:a0:ab:df:cd:67:6f:cd:a8:f7:bd:b1:07:a6:
30:91:e1:d6:8b:8f:85:09:3e:d1:25:77:a3:c5:41:
74:83:f6:d8:da:17:11:fd:6f:cb:e9:f3:ee:84:cb:
4d:8e:9b:39:a1:ae:81:c6:9e:aa:31:25:33:29:0a:
1d:4a:76:e4:91:44:72:f3:f3:32:77:fb:51:44:85:
51:e6:32:b2:4a:10:f4:79:39:12:43:f1:8b:a6:c1:
dd:a0:99:ca:c9:5e:54:7b:42:97:ee:8e:ce:94:d9:
52:3f:3e:55:38:33:15:d1:24:54:fe:d4:71:eb:2e:
4c:5f:07:a6:b9:84:6a:57:87:aa:96:92:3e:1d:47:
f7:d8:f0:42:e0:c4:5d:73:7f:0d:5b:00:5e:b0:a2:
3b:7b:cd:e4:8b:6d:6a:73:01:64:62:35:05:f2:6d:
85:5c:42:db:2b:54:68:3a:5a:85:fc:fe:ee:91:4f:
24:57:b8:b3:ec:1c:01:fa:3a:52:17:d4:40:2b:b8:
d0:0f:50:bb:1e:43:47:48:9a:58:7d:51:9d:2d:d9:
91:19:7c:74:a5:c0:30:c5:a4:67:18:65:05:40:73:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:79:5F:7D:49:A1:FD:F9:4D:39:6D:C1:34:85:CF:91:BC:67:15:C4
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9e:98:03:c7:98:0c:09:be:df:89:e1:21:02:db:33:21:df:
31:18:ed:f1:ff:ac:e0:48:78:33:77:14:bc:a0:04:c5:99:1b:
8a:a3:78:75:3c:8f:84:65:4f:82:fe:d5:9a:4a:f9:2a:3e:82:
21:c8:2e:70:94:4f:09:40:21:f9:b7:78:c3:90:ce:32:32:ce:
7f:7c:45:8d:71:4f:f2:75:8e:32:95:34:5e:cf:4e:02:cb:09:
97:d1:fb:e8:c3:48:44:70:44:7e:72:8e:4c:fa:bd:e7:d0:e2:
4b:dd:38:f8:74:bb:a1:e2:b3:d8:81:84:5d:81:db:68:b7:3f:
78:ba:10:d3:b5:4a:db:9a:28:8e:6f:16:2f:0c:8c:c7:21:f0:
2e:da:74:27:e7:dc:1a:4c:15:21:d2:9b:11:9d:05:f7:30:37:
f9:3f:d1:3b:21:6a:b8:83:40:af:08:cc:6a:57:2a:39:92:4a:
a1:93:91:5c:eb:38:b1:cc:5b:e2:b9:fa:1f:b3:e9:9b:1b:94:
66:7e:df:21:58:e8:c1:86:36:4e:45:50:6d:d5:d1:42:e2:70:
e4:ea:9e:87:4d:4e:2e:57:46:55:e6:9c:fb:ed:94:47:90:12:
86:02:be:2b:37:3f:c3:6c:a9:a9:fe:a4:54:70:d3:20:e5:a9:
90:d8:cf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:20:33 2025 by rpki-client