Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
File: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft (raw, json)
Hash identifier: PwfrzTLzAsaAh0fzWPwXuN2cGTHhW6N8sgl9UxugOK0=
Subject key identifier: 4F:5E:7F:DA:6D:BE:9D:0A:A0:58:7D:85:43:6E:E0:77:D2:7E:36:00
Authority key identifier: F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
Certificate issuer: /CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Certificate serial: 019A4F9911C1F2E6610A5DE7CE19ED9F8736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
Manifest number: 12D2
Signing time: Tue 04 Nov 2025 16:00:22 +0000
Manifest this update: Tue 04 Nov 2025 16:00:22 +0000
Manifest next update: Wed 05 Nov 2025 16:00:22 +0000
Files and hashes: 1: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl (hash: 9R0sDX/K6E9PCnxz56YAegzSM8mkSLvKeqLKRG+LifE=)
2: NdVRxEIMNBunZfZP9qXNSfaySc4.roa (hash: KRJlcuUveV33SEu3V+UuJaoqvZJ1ZgJGxVWpQ++tEBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:11:c1:f2:e6:61:0a:5d:e7:ce:19:ed:9f:87:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Validity
Not Before: Nov 4 16:00:22 2025 GMT
Not After : Nov 5 16:00:22 2025 GMT
Subject: CN=4f5e7fda6dbe9d0aa0587d85436ee077d27e3600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:a6:1c:57:91:c3:20:ed:d4:2a:f7:2a:06:
d4:be:00:3d:44:48:c0:c1:0a:7b:c9:8d:c6:9f:c5:
6d:ca:91:51:5a:5f:36:02:c3:38:08:01:97:97:09:
3a:6d:15:e5:4f:af:a0:51:8c:be:41:57:49:35:b7:
16:f0:69:97:2f:1d:1e:e3:41:cc:6e:84:5e:02:4f:
d1:a4:ad:19:e2:40:be:30:a1:3a:8f:28:84:c3:e1:
5e:76:a6:f4:b6:19:7e:9c:76:3c:a7:3c:75:16:29:
de:da:85:f9:1c:34:78:f1:e2:f2:23:b2:16:ef:ab:
75:af:53:6f:b7:91:02:16:bc:af:25:66:07:58:76:
aa:53:3a:80:07:07:f9:60:eb:4b:4f:55:a7:f5:01:
8c:cf:99:f5:22:67:7b:8e:b6:53:cc:27:58:22:0c:
90:ea:27:8b:55:bb:64:56:e1:2c:05:42:13:9a:23:
01:ae:8a:2f:bb:81:5e:44:58:c4:8f:d6:9e:50:97:
eb:a2:3c:1a:47:9d:3d:5e:da:4f:f4:2c:d8:7f:96:
89:15:75:17:81:c5:e6:fd:9d:cd:d6:45:50:ab:ab:
58:35:d6:bb:c9:d3:c0:63:5b:6f:7d:a3:f2:84:4a:
ac:6a:18:3a:66:59:c6:e9:10:cb:07:7b:14:a8:ae:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5E:7F:DA:6D:BE:9D:0A:A0:58:7D:85:43:6E:E0:77:D2:7E:36:00
X509v3 Authority Key Identifier:
keyid:F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:26:63:2f:da:99:a3:1b:ee:b2:3a:95:2d:a6:cc:46:9c:36:
79:a0:51:a6:67:8f:88:b4:7e:2b:03:d7:13:09:6b:b5:c4:ed:
3c:a6:1a:70:e0:4d:e3:05:5d:6b:46:4c:c8:b2:09:f9:04:25:
33:e9:ea:f4:dd:18:39:bc:7e:b4:89:2a:a9:1f:a7:a9:7a:47:
f2:fc:ff:59:85:93:f5:c5:3c:af:34:df:df:f7:25:a0:22:d4:
5e:fc:79:2b:5f:d6:13:d0:84:72:e4:f6:3e:19:74:74:f0:12:
9f:01:a3:ad:81:41:fe:ea:21:7d:6e:be:d8:56:b2:73:cb:92:
66:f0:c4:97:0f:79:0b:5e:bd:7a:c6:97:4c:0b:24:66:e0:d4:
aa:83:23:cb:61:c3:0a:4a:e8:c2:b3:22:ac:32:eb:8d:7a:47:
64:22:64:11:3b:9f:93:81:c3:17:7a:21:de:03:b4:9c:04:af:
5d:00:1b:37:69:ea:54:9a:26:0d:a2:2e:fc:9b:65:74:68:93:
12:fb:83:dd:4a:80:9c:c2:1c:02:ed:3d:20:68:53:58:b4:3b:
76:d4:3a:27:ab:7b:3d:36:7c:dc:f0:53:23:44:79:c5:ca:c4:
c0:92:66:58:67:ad:fa:f9:62:94:07:b9:10:4a:f6:8a:50:f5:
b0:d1:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:25 2025 by rpki-client