Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
File: 9Y3yxGnJeIlfhFgCTFBugByPsho.mft (raw, json)
Hash identifier: aEnUWCIjUPk/NO0oikQc+VMtvojW/NUqgoef+S3skaw=
Subject key identifier: 01:B2:0E:71:38:C3:E7:5C:53:EF:D7:D0:E7:8C:5C:25:1F:70:45:18
Authority key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Certificate issuer: /CN=f58df2c469c978895f8458024c506e801c8fb21a
Certificate serial: 019A4FD02F18589E945DE696F5C8B48B0F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
Manifest number: 1495
Signing time: Tue 04 Nov 2025 17:00:34 +0000
Manifest this update: Tue 04 Nov 2025 17:00:34 +0000
Manifest next update: Wed 05 Nov 2025 17:00:34 +0000
Files and hashes: 1: 9Y3yxGnJeIlfhFgCTFBugByPsho.crl (hash: cX3yOUJeQs99a/2Uf2s8Iz3FKFTvnj6j7LZOtrPey2I=)
2: uTgF90O7aHLO_G7cSzTbj_nzdao.roa (hash: lwZMpyCYU1xDcN6IVFSHMP6G+054GMvXirawB6lbtsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:2f:18:58:9e:94:5d:e6:96:f5:c8:b4:8b:0f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58df2c469c978895f8458024c506e801c8fb21a
Validity
Not Before: Nov 4 17:00:34 2025 GMT
Not After : Nov 5 17:00:34 2025 GMT
Subject: CN=01b20e7138c3e75c53efd7d0e78c5c251f704518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1a:96:c2:83:b2:3c:00:b6:20:2a:6d:04:ad:
e6:2e:97:40:9e:ca:64:01:c6:c3:35:98:6e:35:3e:
6b:fd:5a:63:b5:aa:73:eb:f7:36:06:aa:46:10:c0:
c8:89:f6:e9:30:23:e4:02:35:6c:65:65:a3:e4:e7:
2a:d9:60:ee:51:b1:15:07:64:f1:d9:7a:26:dd:1b:
14:a3:3d:59:ee:bc:47:2d:2b:6a:a6:78:56:9a:96:
6b:b3:16:11:83:3b:41:c9:42:12:19:c0:71:9b:98:
5e:1e:5e:e8:75:c9:f0:85:eb:5c:6c:d6:cf:0a:dc:
b1:c4:31:b6:8a:4e:3c:fd:31:07:31:9c:73:2d:3e:
9a:f6:5c:13:50:d9:03:cb:26:1f:e6:ff:8d:43:4e:
d8:98:b8:96:81:6c:08:95:25:49:8d:83:be:e9:e1:
95:81:ab:35:a1:d4:25:9e:b4:b9:38:4b:3d:82:e5:
f8:a0:d3:85:2e:f5:a5:23:73:7d:1c:f2:bf:ec:ac:
e9:d8:e3:7a:18:e5:31:44:35:13:99:17:e4:aa:d9:
2e:f4:62:da:77:0c:df:91:b5:16:37:05:ab:d6:b4:
8e:88:d1:f0:8f:82:d0:7a:d5:6b:d9:3a:73:fb:c0:
da:1b:54:e5:65:dc:cd:87:e2:1f:a3:9c:97:22:25:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B2:0E:71:38:C3:E7:5C:53:EF:D7:D0:E7:8C:5C:25:1F:70:45:18
X509v3 Authority Key Identifier:
keyid:F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:24:50:c5:2a:88:7c:22:59:12:51:47:17:59:20:32:c7:40:
75:f4:4d:1d:03:96:12:36:a0:42:3b:f9:c8:e4:22:27:c0:9f:
0d:68:7d:d4:cc:9b:5d:08:f5:66:90:86:2f:64:35:89:86:ed:
04:7a:d6:93:32:e3:ce:f8:ae:6d:c4:3c:a8:6a:4a:d2:e6:4c:
fa:dc:c9:36:eb:71:b3:48:0b:bc:72:3e:3a:8f:a4:03:97:61:
af:67:44:6e:4b:09:b7:ff:ad:04:16:8e:63:9d:91:92:be:f3:
bc:58:fa:d9:db:3f:da:86:ee:6f:6a:0e:b4:7d:75:73:c3:44:
ec:21:ee:b1:5f:90:97:e3:5b:ce:46:a5:20:9c:72:28:16:ab:
1d:ab:e4:49:1e:2e:f1:1b:d3:89:ed:71:0e:c1:a8:c4:b0:e4:
2a:f9:d7:e8:5d:cb:6d:18:be:06:36:ad:97:6e:71:76:89:2c:
4b:ee:c7:15:59:e0:be:f5:20:e4:e5:46:8d:ac:9f:2c:1b:5d:
dc:ec:df:68:1d:99:e7:6a:03:db:10:d1:a7:78:43:ff:66:6d:
91:04:8d:1c:e5:5a:cf:3d:14:b6:70:e2:ac:56:48:59:9b:af:
06:e0:25:e0:bf:d4:ef:c0:e7:5b:ba:91:06:84:14:47:30:97:
ae:01:d6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:59 2025 by rpki-client