Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier: 7NXnuNfm72gCKU8vBghY4+GhAMZf20ZS6JiboMY0PX0=
Subject key identifier: 9F:69:6A:EB:04:A4:4D:E8:9B:96:B0:3F:CE:5B:73:DC:F3:92:96:D3
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial: 019A4D3CCFF4BC41C3433F5845E318D38C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number: 0417
Signing time: Tue 04 Nov 2025 05:00:22 +0000
Manifest this update: Tue 04 Nov 2025 05:00:22 +0000
Manifest next update: Wed 05 Nov 2025 05:00:22 +0000
Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: ob56gBmzVHEwodgz86x03+Bb2lza7VQPz802I2ww664=)
2: jYwiLy6C8PrH1zmVRebb5xoCcHg.roa (hash: B/91TwKxBsOKKHQE6s1Ydkjq/nj0hd3T+71Ppy1e7kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:cf:f4:bc:41:c3:43:3f:58:45:e3:18:d3:8c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
Validity
Not Before: Nov 4 05:00:22 2025 GMT
Not After : Nov 5 05:00:22 2025 GMT
Subject: CN=9f696aeb04a44de89b96b03fce5b73dcf39296d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:4b:dc:a1:3e:58:52:c3:b6:ae:9c:73:04:
75:9f:b3:06:80:fa:23:90:84:05:28:a1:fe:43:ae:
fb:00:cc:2c:4c:d2:af:6b:a3:0b:11:a8:dc:bb:2a:
07:17:2e:e8:cf:af:3d:52:4e:0f:ec:17:6c:7c:ed:
54:07:54:24:a9:f4:71:63:79:f4:9e:da:84:eb:13:
7d:31:54:1f:a6:c9:91:b5:f0:9f:55:00:fe:e0:c1:
ba:d9:6c:49:34:5e:59:81:1c:68:e2:24:55:bd:3a:
49:53:9a:db:bc:c3:fe:c9:c7:63:91:96:d2:e0:a6:
da:2b:23:b0:c5:b6:a5:69:b2:3b:7a:5d:02:b6:a6:
e2:f1:8d:17:3d:1e:e8:8b:e1:70:4a:fc:dc:e9:fd:
55:b6:77:10:0d:cb:b6:7c:2f:14:a8:be:83:bb:90:
ad:3a:c6:02:7c:12:c7:13:4c:19:79:b3:86:41:e7:
8a:73:64:dc:0c:22:af:99:0e:a4:27:30:f7:1a:91:
2d:c2:01:a6:2d:27:d7:93:49:98:cb:cb:ae:87:cd:
0a:fa:7b:0e:56:f8:40:a3:d4:d3:41:1f:fd:ef:1c:
eb:4e:db:e8:cf:53:68:ee:df:7c:e8:d9:06:da:b2:
6d:9e:b9:88:d4:7f:74:96:33:55:8b:3b:40:65:68:
07:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:69:6A:EB:04:A4:4D:E8:9B:96:B0:3F:CE:5B:73:DC:F3:92:96:D3
X509v3 Authority Key Identifier:
keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:51:f3:e7:f1:b8:8d:0e:e7:ac:ba:8f:fd:48:5c:a9:06:3c:
a0:af:d6:f2:4f:0a:d3:e9:29:ba:9b:3e:b4:8e:d5:30:b0:3f:
2d:10:64:06:ac:31:94:59:34:cc:2f:cf:19:ba:89:d8:58:7f:
5c:0d:d7:3c:fb:f2:3f:66:d5:e1:9f:2f:a4:76:38:ca:17:67:
0b:3e:d2:c0:0c:95:b7:36:c3:d0:85:3b:0f:72:29:b1:d4:80:
36:0a:26:db:4e:9d:cb:be:5e:29:8e:e3:7f:fc:f9:0e:09:dc:
34:db:a3:a8:c8:e0:bb:b6:60:25:fc:6a:67:29:8c:45:e9:06:
64:23:fe:22:c7:48:44:c8:15:52:19:6f:51:59:ca:a7:96:7b:
fc:da:cd:f0:2b:ad:d3:fe:85:01:08:26:d9:60:ef:aa:2c:95:
9a:20:59:6b:9f:5c:62:43:fb:f1:a3:98:ab:ae:7a:d6:05:3c:
eb:e3:a5:21:fb:31:75:3b:69:90:f8:14:70:e3:c7:c5:8f:4b:
39:de:5b:d4:e9:a8:b9:3d:d6:a0:64:9e:10:35:8c:07:07:34:
9f:4f:e5:d9:61:d7:78:b4:58:8f:84:57:bb:1b:c5:63:9b:e5:
c4:57:18:5a:f5:cb:e8:42:d6:5e:53:ca:ff:a0:4f:04:57:ac:
2e:33:39:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:53 2025 by rpki-client