Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
File: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft (raw, json)
Hash identifier: uhNgltfnhB7MX1ujiWxoYuK81C/2iFasAmUKFqqPC/E=
Subject key identifier: CA:48:AF:F3:DF:B7:61:2A:0A:C0:4F:D1:07:41:A8:C5:EE:38:3B:AF
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Certificate issuer: /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial: 019A541A5C38759732A53B60987917D1904F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
Manifest number: 12A9
Signing time: Wed 05 Nov 2025 13:00:04 +0000
Manifest this update: Wed 05 Nov 2025 13:00:04 +0000
Manifest next update: Thu 06 Nov 2025 13:00:04 +0000
Files and hashes: 1: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl (hash: 4Kjen3KGMXkVNFpPemUP9gtev6gNw4G2hQD1kby0Zkg=)
2: VulQHWhzzPXQiRPOfzUk9fbQoJg.roa (hash: 1pq8LhNOVu3KfmYwRxokFt42T5gBAiGcBFnCuEB+z6M=)
3: mGb7BxKlXQ1k9CHjDWD7BMFZHSQ.roa (hash: tJF8uovUStWmO8f7TDEtjdEZUW2noIjEbpOLcO1y40s=)
4: nGPZ_NATggl_6nfv7Xs72s2omBg.roa (hash: Ctlvy2xSgma+HOqaqZwfMsyO5ZwXHLYT1LbAR4ndsm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:5c:38:75:97:32:a5:3b:60:98:79:17:d1:90:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Validity
Not Before: Nov 5 13:00:04 2025 GMT
Not After : Nov 6 13:00:04 2025 GMT
Subject: CN=ca48aff3dfb7612a0ac04fd10741a8c5ee383baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:35:d9:a0:7a:67:1e:98:f9:51:96:78:6a:
a9:01:6c:69:5c:9c:eb:77:c0:47:bd:85:14:b7:4b:
2c:fc:87:3c:0d:da:51:73:c8:c6:17:58:35:3f:8e:
80:38:84:91:9f:0f:fc:89:9e:c3:23:c3:f8:e7:3c:
eb:5e:e3:1f:ed:69:c6:48:6c:a0:6c:95:78:1e:14:
0c:6a:11:db:98:db:22:cf:23:4c:1b:48:92:29:dd:
97:0a:76:40:77:ce:c7:58:34:9b:24:2b:99:0b:d2:
48:4e:39:e5:04:45:29:38:2c:a9:13:02:f2:e7:cb:
fa:e3:44:35:3d:6b:d3:f3:da:98:ff:6d:86:a7:14:
0b:fb:16:65:f8:0d:ac:15:58:90:4b:24:35:c6:02:
6a:ba:ca:60:5a:eb:fa:d4:72:20:b5:11:ff:29:82:
c5:fc:5a:82:9b:35:0c:77:12:86:ee:f9:93:26:3f:
a9:d2:d0:65:79:94:fb:e2:04:06:df:06:0f:99:2d:
00:2c:86:2d:63:07:ac:5a:84:81:7e:f3:88:05:1f:
11:a4:79:76:d6:51:66:63:4c:a2:fa:a4:69:75:42:
2f:8a:09:70:3f:d6:b9:9f:0c:2e:16:45:54:9d:b7:
35:3f:a1:12:79:7a:7c:19:cc:a3:cb:a3:6b:c3:3a:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:48:AF:F3:DF:B7:61:2A:0A:C0:4F:D1:07:41:A8:C5:EE:38:3B:AF
X509v3 Authority Key Identifier:
keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:73:ac:fc:cb:11:a6:d7:06:d7:20:38:28:fe:b9:2d:2b:fd:
a3:15:ea:a9:bd:06:28:08:0c:7e:80:c2:65:3c:d8:06:5c:6e:
9c:c0:b8:a1:3b:57:ed:94:50:82:ce:d9:fb:a1:ed:44:7e:fc:
57:e5:f2:38:1a:af:aa:a2:53:5d:36:18:1b:b3:06:1b:d5:12:
05:ab:1c:d7:39:cb:14:c4:1f:7a:9b:d6:f6:17:91:11:06:e6:
37:42:02:8a:2c:9c:d5:22:ab:2d:4a:18:fc:f6:ba:0d:56:26:
a5:65:47:54:a1:8c:4d:54:e6:c7:44:8b:aa:a1:48:c3:35:f1:
29:a3:00:da:d0:6e:06:e2:38:ca:10:49:30:fa:d4:e5:fa:9f:
e1:66:50:1c:e3:a7:e6:d8:21:a8:38:cb:8a:97:70:b4:08:3c:
9a:f9:ab:1b:ef:a9:d5:51:3f:d7:95:c9:37:be:f5:72:80:bd:
da:cf:dc:b5:9e:24:7a:0c:5e:30:8d:f7:ab:7b:1b:65:55:e8:
47:c8:92:ef:fe:ec:aa:4e:31:dd:05:4f:ca:e6:61:b3:29:d1:
8f:a3:a6:67:d8:4b:18:5d:82:5f:fa:31:29:1e:25:6c:83:55:
3a:61:3b:67:76:5c:f0:33:ce:ab:0e:fa:56:c1:04:7a:89:b0:
7a:3a:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:06:25 2025 by rpki-client