Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier: v6vt5eoUegivImWBrstGpFfMLWUJFCMUX72xxJ1S9Jo=
Subject key identifier: 41:8D:CA:3C:3E:BF:DA:F3:4D:80:11:64:86:EF:C8:C5:AE:20:BA:C6
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial: 019A4F627D2431400DCA2135AEDEE1C353DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number: 1442
Signing time: Tue 04 Nov 2025 15:00:45 +0000
Manifest this update: Tue 04 Nov 2025 15:00:45 +0000
Manifest next update: Wed 05 Nov 2025 15:00:45 +0000
Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: 02oo+8npHun/T4Fen2WYe4yR6DTuh5B41moaSTHC5BE=)
2: k_l8rtQi2P6fa9dQhkQ5j5jaCYE.roa (hash: sMo/6l6OJgyWFVqU8cFbnDYPktbERaDpmId+0GVplIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:7d:24:31:40:0d:ca:21:35:ae:de:e1:c3:53:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Validity
Not Before: Nov 4 15:00:45 2025 GMT
Not After : Nov 5 15:00:45 2025 GMT
Subject: CN=418dca3c3ebfdaf34d80116486efc8c5ae20bac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ad:28:2e:bd:27:49:2e:5c:1b:c2:d7:d9:bc:
d4:05:07:8f:de:29:2c:76:19:dc:72:e0:e1:9b:cc:
a2:b8:47:51:91:a1:86:aa:b4:3e:f1:ef:c1:e9:a2:
a6:11:30:d0:b4:80:fb:b6:fe:85:f7:b1:e9:9f:33:
13:fa:86:3d:7e:bd:36:bd:79:3c:8d:75:4a:ad:7b:
4a:20:b8:a8:c2:4c:6d:53:36:b7:e8:3f:bc:85:e9:
b5:a2:0b:2d:92:27:9f:b8:06:59:bb:d0:8a:7e:01:
e6:6e:df:70:c7:ea:73:3c:df:d1:22:b6:bc:56:21:
a0:4c:3d:6f:ad:5c:b0:a9:ab:c0:ff:1b:8e:b1:ea:
8c:f5:00:4f:a0:c7:b8:a0:33:0f:1d:1d:a1:a6:ca:
4d:ee:05:6e:96:c1:d0:2f:84:dd:54:20:04:fd:c0:
32:cc:1c:f4:cb:5e:1e:d7:71:4e:22:39:46:c1:9d:
ee:95:c1:48:76:36:b1:2b:4f:30:46:18:71:0d:e8:
60:03:27:cc:d4:cd:78:8a:82:87:93:dd:f5:89:6c:
25:ea:4b:ae:1e:0d:48:10:5c:fe:33:2f:df:9f:97:
09:5e:3a:68:da:69:ca:c7:36:7d:0b:14:d7:7e:47:
b2:dc:ef:41:63:a6:bd:ca:e1:87:72:ac:35:09:5c:
ed:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8D:CA:3C:3E:BF:DA:F3:4D:80:11:64:86:EF:C8:C5:AE:20:BA:C6
X509v3 Authority Key Identifier:
keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:36:e3:da:45:ea:9e:70:3a:5e:3f:0e:1c:a7:7a:17:10:59:
76:d5:f2:50:f8:87:2d:06:1e:ae:c4:d2:9d:88:3f:56:40:95:
ad:55:4d:a0:05:fd:7a:32:05:1d:93:fe:dc:73:61:e3:b9:45:
17:41:d9:4f:45:cd:d6:62:37:cf:bd:93:ac:cf:66:71:95:84:
66:ed:7b:ef:9c:07:5e:bd:fd:08:47:ec:01:0b:58:ea:09:c5:
71:20:cd:8e:cb:32:3b:7a:3c:df:f2:0f:73:6f:ce:da:f3:ff:
76:77:77:7f:4e:41:0e:61:e0:cd:4f:9a:08:81:62:fd:40:d7:
11:71:64:d2:74:44:c9:9d:83:e6:fc:ec:36:61:ed:7d:b5:3b:
32:09:55:79:ed:c2:f5:2e:6b:88:1d:80:42:09:3e:5e:64:0b:
87:b0:8e:63:6a:89:6d:c9:ce:f2:5e:8c:61:38:7e:bd:0c:6a:
df:8b:e5:8e:0e:ab:2b:77:b5:b5:ff:8a:2e:d5:c2:f5:92:4a:
63:bd:5e:f5:3b:06:f4:48:14:46:e8:b5:35:b8:bd:d0:44:dc:
ae:4a:b3:cd:52:06:9e:48:a2:dc:b3:4b:a8:49:9b:1f:ee:05:
95:d9:f3:91:ca:40:2d:9e:21:78:bd:4b:db:45:1e:b7:7d:60:
8a:49:87:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:23 2025 by rpki-client