Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier: KCLqWJv9ZFNck1DPDDIkFB67MgcIgwKiWIAonR7xISE=
Subject key identifier: 06:7C:65:64:14:04:E9:A5:39:93:EB:A1:DD:AD:D4:0D:47:96:BC:82
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 019A4EF411CA9C2EE25DAB34ED6D19EBFD17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number: 1085
Signing time: Tue 04 Nov 2025 13:00:09 +0000
Manifest this update: Tue 04 Nov 2025 13:00:09 +0000
Manifest next update: Wed 05 Nov 2025 13:00:09 +0000
Files and hashes: 1: 2JNf8PoETHUWKrlbGvJA_rrI9NI.roa (hash: 1FKPW+J1lE2HkIdpCVRmwjCFGmaaz0tFXqdGn/MO/uM=)
2: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: 4zPw0qB1V0eI/cve/Qvhb34PXJUa72uqR/ZIWyGkkt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:11:ca:9c:2e:e2:5d:ab:34:ed:6d:19:eb:fd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Nov 4 13:00:09 2025 GMT
Not After : Nov 5 13:00:09 2025 GMT
Subject: CN=067c65641404e9a53993eba1ddadd40d4796bc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:37:80:15:83:43:5f:35:85:33:77:63:3e:
56:3d:45:25:14:eb:33:e2:52:ce:a7:74:10:2a:84:
f4:0e:8c:15:ff:10:d5:fc:e2:ee:7b:b1:a0:fb:30:
9f:ae:4a:5f:d4:8b:0b:80:bf:ff:42:03:12:d3:f3:
b0:64:37:34:02:dd:eb:7a:a4:fe:25:43:17:2b:75:
40:82:36:d5:9b:65:04:03:32:9f:cf:1c:f3:64:8d:
8c:53:c1:3a:e1:ec:82:df:46:d7:77:81:0e:dd:73:
d1:60:83:08:68:aa:d3:4b:b8:f2:8e:e4:f0:0f:fd:
6a:3b:6c:cf:ce:8c:02:0c:ed:56:bb:1b:69:9e:4b:
98:33:86:6f:6f:9a:a7:cc:b5:c4:1a:af:5f:55:3e:
20:25:9a:a2:74:9e:3f:4f:f1:7c:d5:7c:4a:cc:23:
51:25:c7:d1:b1:cf:97:b5:54:b8:68:53:07:e7:e1:
44:ce:92:db:98:bb:f3:a4:19:dc:52:e7:b6:5f:61:
93:d5:34:0c:03:19:a5:52:bb:58:63:48:79:45:f8:
67:cc:ef:cc:29:83:fd:ea:84:84:a4:93:0f:2b:41:
b4:42:d8:e3:28:09:80:99:a3:56:ba:07:aa:ae:ba:
fb:80:97:cf:04:63:4f:3e:2c:28:39:09:69:d6:15:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7C:65:64:14:04:E9:A5:39:93:EB:A1:DD:AD:D4:0D:47:96:BC:82
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:eb:27:1a:21:f2:98:57:95:f6:fc:92:96:be:0d:82:c8:c8:
2d:3d:5e:cc:72:f4:95:c5:79:c2:bb:e5:68:e3:f5:9e:1e:48:
25:94:7e:03:82:30:37:ff:9b:08:63:1a:32:17:e6:12:af:a6:
6d:1e:93:87:6f:5e:86:47:73:80:ea:0f:a4:1f:18:21:b5:d7:
15:db:5c:c6:c4:5f:f3:ff:b1:d7:af:ec:66:cf:e6:c0:d2:6b:
3e:c1:0b:64:03:41:84:7e:b8:45:e7:f4:69:c5:c2:aa:48:de:
1a:65:a6:7b:9c:3e:ae:ac:dd:07:76:55:67:80:5f:fd:ff:95:
d8:d3:11:5e:af:b1:26:75:c5:4c:a9:f4:7e:63:8e:cf:02:d3:
28:42:d5:87:4f:d2:68:d7:3e:5d:df:7c:03:9d:d0:2d:7c:c0:
ef:9e:d9:cf:6c:a1:05:01:b1:b6:26:15:83:86:d1:5a:e4:03:
96:57:88:9b:0d:31:d8:b9:88:96:45:21:eb:e4:76:b0:02:18:
cb:a8:d2:d4:be:1d:f3:b7:f6:a1:ee:7c:a3:2c:73:5f:86:d8:
d9:54:d4:d9:24:7d:64:c2:ba:8d:67:31:03:fe:9e:7a:ec:ba:
8e:ba:32:d7:51:c8:26:4a:5b:82:57:76:08:c2:13:d6:ce:e4:
98:ee:1b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:12 2025 by rpki-client