Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File: 9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier: 6ArKCr/EggA7gyNsrEwCtAZEuZxO/WstjO9BaVvqy5U=
Subject key identifier: C6:E4:71:D7:C9:C1:3B:1F:FE:D1:3B:D9:63:11:46:E3:D2:47:F1:F3
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial: 019A5150CCE9F81C2A5F98766DBDABD2429D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number: 1108
Signing time: Wed 05 Nov 2025 00:00:41 +0000
Manifest this update: Wed 05 Nov 2025 00:00:41 +0000
Manifest next update: Thu 06 Nov 2025 00:00:41 +0000
Files and hashes: 1: 2Qdf3KbNG5NqoZJX8HW2axOKIks.roa (hash: aZGBYQ1YtddzlVOGQVr+1nQgozPaUhvPhqEz391ISKs=)
2: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: KDkiCMdg6xjQkdgueuz7Gyzb/bKQRD6NbwMyv0TOp5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:cc:e9:f8:1c:2a:5f:98:76:6d:bd:ab:d2:42:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
Validity
Not Before: Nov 5 00:00:41 2025 GMT
Not After : Nov 6 00:00:41 2025 GMT
Subject: CN=c6e471d7c9c13b1ffed13bd9631146e3d247f1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:dc:a0:6d:16:f5:15:ec:80:c3:b1:c2:4f:
38:ce:3d:2b:ef:ee:12:1c:d9:37:12:fc:d0:6f:2c:
44:3b:be:2f:06:ba:98:df:e2:3f:08:61:29:16:89:
82:50:52:dd:c1:67:e7:d3:02:a3:3e:34:a5:1a:c3:
05:3a:fb:1e:5c:3f:c5:6b:53:22:79:7a:a2:58:c6:
67:70:e9:c6:79:46:c2:e0:73:f0:b7:2a:01:7d:38:
4a:83:cb:fb:8e:f1:c7:07:4d:6c:a9:46:11:0d:5e:
fd:03:63:ac:71:f8:95:0d:40:30:7a:5d:8f:22:ad:
be:4f:eb:10:33:4f:96:b5:82:7e:fe:6a:7a:69:7a:
e8:e4:ec:48:18:1b:ca:35:77:c4:b2:14:b6:91:bf:
d6:03:e4:bf:b7:d4:f8:9a:5f:1d:a1:98:a9:77:21:
ef:f6:d3:2c:33:a7:95:6b:72:70:cf:92:f5:16:82:
d9:df:47:0d:67:41:a4:51:f3:99:2b:7f:0d:93:63:
0c:c8:06:b0:33:9a:2f:c2:1c:fe:eb:16:24:14:c4:
94:cf:9e:20:57:a4:83:60:4c:6f:9f:b9:03:e2:0a:
d9:ee:82:ad:4c:be:96:b6:20:8c:79:c7:a9:dc:50:
e8:49:94:69:66:0a:94:d0:79:ba:2f:7b:5e:9d:4c:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E4:71:D7:C9:C1:3B:1F:FE:D1:3B:D9:63:11:46:E3:D2:47:F1:F3
X509v3 Authority Key Identifier:
keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:02:ac:ec:64:a3:16:47:b6:88:5a:70:e1:76:3c:bf:a7:b9:
32:ab:ac:09:4e:72:5a:f0:5f:77:62:db:15:32:a1:e4:82:d1:
0c:37:b7:44:fb:05:4e:bc:ec:44:43:a1:a0:ed:cb:30:9c:16:
30:6c:47:87:0c:d2:2c:07:13:78:3c:06:d7:20:c7:75:01:91:
83:43:8a:f1:9f:16:4f:2b:e6:87:47:2b:7c:86:7f:db:f7:35:
72:4d:4f:76:d3:29:c0:75:cd:8e:ed:46:61:e0:0e:e0:a9:1d:
5a:40:1d:e0:72:b2:05:9f:2a:4d:89:cc:46:ba:ef:73:b8:30:
8b:e5:bb:51:fa:00:9a:18:08:36:a2:c9:f4:89:9d:5f:23:d7:
60:1f:d5:1c:12:d0:5d:41:a1:5e:58:aa:dd:38:04:dd:97:6b:
de:0b:91:de:49:7a:b3:41:73:1d:47:e0:8a:06:37:cb:ba:0a:
bc:14:4a:96:9c:51:4e:5b:a7:c3:b9:98:0a:6c:40:5e:12:8b:
de:4e:1e:02:6e:84:47:d8:f3:c1:20:47:d2:88:47:f6:0a:81:
ac:e8:fc:04:0b:71:57:25:b3:2d:11:8f:e3:42:03:3e:16:eb:
a4:f9:2c:0f:12:15:91:60:41:29:aa:c1:be:a3:50:d5:fd:1b:
f2:d9:30:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:50:54 2025 by rpki-client