Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json)
Hash identifier: HpPNPCngKG0cEic0iO5bbpLIApSMSK2Dykau+h1s3HY=
Subject key identifier: 12:AC:A7:2F:EE:66:DA:DC:EE:48:DB:BF:59:88:BB:C8:78:B0:11:5B
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 019A4DE21423EA2A160FEB089F1B2A99BCAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
Manifest number: 15AB
Signing time: Tue 04 Nov 2025 08:00:53 +0000
Manifest this update: Tue 04 Nov 2025 08:00:53 +0000
Manifest next update: Wed 05 Nov 2025 08:00:53 +0000
Files and hashes: 1: 2I_gyEpNZ4JuV81yJRUXBVu-KOA.roa (hash: r49ywNskr+Vb41Ou7x0XARQgE2G5ZH5biPRfE9u4cAc=)
2: 2tZ8QlZM2m2IpNLIvJ0W7pbf-Z0.roa (hash: 9Uhvy9O+l0zHDpQPVkCj98q8JIdj7ZhjiR3rxLVvfII=)
3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: kULG5xAj+kH+AsBwB7MTBx76ap+2ue0I9qU/hiGfDLY=)
4: Cqe38rpbTYcW3IBIj3GE-axW20k.roa (hash: rFb4HKGqgMrSh0TmO+Kz12Dni5W90nAeu/GsQNE5QbI=)
5: RW6wxE8PmfS_l7583dlKYTuULiM.roa (hash: NA5N2aFRPb0HCLNpvXiULoI8i28V3/zHm+oTFj2hW9U=)
6: XViXWtM4Qca08fEngqnKAjV8_6k.roa (hash: FX1LXPYDV9yZbUiSRuPd/ffSUdla1CU7pMstvEpaovA=)
7: cg5wyW1XUiTE1cAkUrbH-_fslDk.roa (hash: zkUw4K8Y/lRpRyDIEZKZW+jZfl1kW8PgsmLXFHW0Eco=)
8: pYT69ekFAz6AyMxjupc4L7m_By4.roa (hash: Cer1nHXkBg7TmA4VluMF+Bs6hly21XolmwIlPkVMAss=)
9: t292OmKp-GnX0MyFpL72FnDc9MA.roa (hash: uIDL5vQGM8ia+mjLC9CmEE4toRqUWbIawZ8YzQbIFpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:14:23:ea:2a:16:0f:eb:08:9f:1b:2a:99:bc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Nov 4 08:00:53 2025 GMT
Not After : Nov 5 08:00:53 2025 GMT
Subject: CN=12aca72fee66dadcee48dbbf5988bbc878b0115b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:d0:f4:7a:11:1e:47:24:8a:4f:ae:34:3a:
22:89:02:49:d3:9a:21:a2:c8:46:21:e2:c6:57:6f:
a6:67:9b:7b:36:dc:a9:45:cd:90:e9:0f:6d:c9:02:
31:88:ce:0b:f0:c5:3c:ca:a1:e6:7d:3f:d8:ea:f0:
0d:8f:17:07:91:73:d8:e8:94:6d:bf:7e:05:44:f4:
f7:c6:8e:45:c4:67:13:3f:47:ce:5e:cc:4b:b0:90:
e5:a1:69:83:4b:d2:33:97:9f:2c:f5:25:e4:82:7d:
52:ff:8d:1b:84:45:19:c8:d9:1b:89:c2:df:28:40:
41:92:39:8f:fa:6b:de:42:5c:b0:27:31:db:5f:f7:
04:5c:85:e9:4f:c4:7b:bd:21:bb:17:c3:b3:37:0c:
63:27:72:53:6c:7c:78:5f:db:e5:29:73:87:77:6f:
f2:c1:1f:08:81:6b:0a:2a:53:a3:1e:69:60:d2:a7:
fb:ac:e7:11:c9:c5:03:ac:78:18:42:53:d7:82:0d:
cb:18:ac:4e:e7:73:99:9f:76:52:b9:ac:18:70:aa:
40:7d:63:ea:36:16:a0:8e:ad:f5:c6:0f:01:ae:40:
58:01:d0:56:d5:09:06:54:01:1d:4c:0d:2d:0a:39:
a0:68:d5:98:ae:e8:da:c1:3b:d2:98:46:bf:ec:52:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AC:A7:2F:EE:66:DA:DC:EE:48:DB:BF:59:88:BB:C8:78:B0:11:5B
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e8:87:6e:db:16:3e:17:51:52:37:73:80:f7:ba:15:b1:17:
b5:71:4a:eb:fe:b4:c5:96:1e:bd:b4:ec:90:ad:51:da:c0:61:
c8:9e:88:bd:3a:52:d2:7e:6d:99:25:bd:e7:6b:f3:f3:da:99:
be:76:88:cd:be:54:aa:1e:5c:b3:ee:49:af:af:fd:51:1b:e1:
21:26:f2:7a:95:50:2b:a7:d4:1a:89:a3:54:22:cb:ea:56:71:
2f:4b:93:7d:a5:4b:a5:e1:c5:14:0e:a3:e1:2b:69:e9:e4:bc:
97:13:ae:a2:6a:92:f9:19:6c:7d:79:9b:c8:6a:70:ac:fe:66:
50:d4:06:b4:93:8a:87:16:d0:3e:d5:82:51:5f:f9:3a:37:d4:
5f:89:1e:4a:80:b3:fc:6b:d8:f8:14:05:1d:77:f7:ba:72:e7:
ea:3c:4d:34:e5:ec:2d:75:21:ca:77:3d:a2:6d:98:73:a3:df:
9e:f5:55:78:f0:39:66:92:60:34:a9:e7:e6:6c:99:30:83:20:
49:e2:06:fe:8e:0d:91:75:d7:53:26:58:20:bd:99:da:55:5e:
c7:77:32:93:e1:fe:29:e3:cd:21:dc:a6:f0:c1:0d:b8:12:32:
35:0d:5e:c0:4b:45:35:ec:b7:c4:29:2f:1a:0c:98:ed:db:a7:
a2:c8:3e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:58 2025 by rpki-client