Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: 6oGiEBJtmvfj40dme8faJ2frJLwymrCBnE0nJbPZ82Q=
Subject key identifier: B6:5D:30:5A:D2:C7:52:B6:C6:2B:7E:48:D4:AD:2E:4A:49:6E:BB:C3
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 019A54C0B815F6C30BFF67DED931F08A28BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 0774
Signing time: Wed 05 Nov 2025 16:01:47 +0000
Manifest this update: Wed 05 Nov 2025 16:01:47 +0000
Manifest next update: Thu 06 Nov 2025 16:01:47 +0000
Files and hashes: 1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: eqdfvpxQrzZGO1fuzEVQ+L+mIMuzGBfUfeuX7xsUrLE=)
2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:b8:15:f6:c3:0b:ff:67:de:d9:31:f0:8a:28:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Nov 5 16:01:47 2025 GMT
Not After : Nov 6 16:01:47 2025 GMT
Subject: CN=b65d305ad2c752b6c62b7e48d4ad2e4a496ebbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cb:12:bd:15:aa:99:d7:06:75:f9:28:eb:22:
80:dc:71:6c:d8:0b:e1:1b:b9:c3:40:fb:fd:23:94:
79:b1:f0:c2:14:88:88:79:5f:ad:7b:ca:61:37:cb:
46:b9:cc:c2:bc:23:15:49:ae:3e:98:31:50:29:da:
b7:69:1a:c2:22:5d:66:98:17:23:be:fd:2e:53:62:
c4:c9:eb:2b:2e:11:9b:3d:53:96:3d:37:a7:81:d3:
e1:f2:e7:7f:fc:94:7c:fe:ad:16:5e:01:26:d4:ca:
81:11:5c:e2:35:d1:3c:74:f0:52:e4:2b:39:42:93:
de:22:89:2a:37:db:01:6e:5b:8b:0c:31:ce:5f:dc:
ca:c4:48:c1:f0:17:e7:e1:c3:e2:f0:7c:fb:44:21:
85:c1:75:67:c1:71:b1:72:7d:4f:a0:0d:05:d8:93:
96:f2:ae:a0:04:eb:d5:2a:a3:89:ba:9b:9f:86:7a:
85:1f:fa:71:f4:e5:96:f0:26:60:9f:f4:41:33:73:
27:06:d5:f1:41:03:71:af:02:d2:c9:52:58:2a:27:
4e:6b:23:7b:e0:ff:30:74:33:3e:11:5c:f1:aa:be:
f5:ae:ce:7f:ca:02:49:59:fc:0f:dc:e9:34:e2:68:
b4:ad:b9:4f:95:93:8f:83:28:13:9e:8d:c7:b3:7b:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5D:30:5A:D2:C7:52:B6:C6:2B:7E:48:D4:AD:2E:4A:49:6E:BB:C3
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4d:91:a6:c9:37:ff:f3:e1:62:7b:ed:66:14:94:e2:e4:e6:
dd:00:a4:1f:a5:ef:97:dd:51:37:ef:4d:c3:b1:f1:4c:ec:80:
40:d6:c9:59:ea:4d:13:78:77:99:6f:02:71:9d:5a:d8:bd:a7:
36:e6:16:fc:c5:95:cd:86:a1:6c:04:b3:0d:a5:b2:7e:61:17:
a1:d9:6f:a7:1c:d6:fc:26:4f:7a:df:9d:8d:f0:89:ac:46:24:
5d:46:99:0f:8c:bb:5f:6f:de:ca:27:01:ea:e6:77:d6:b8:cc:
6f:77:d3:b9:8b:8f:2a:7e:38:0c:7b:80:fe:9a:a4:1c:8e:45:
ad:23:3e:77:ae:68:08:b5:91:37:85:36:a9:84:c6:d3:61:a9:
e6:4f:33:ef:08:82:19:0d:61:3f:e2:3f:93:a2:5b:cb:92:59:
bf:eb:a9:a8:c8:17:32:9c:da:7a:03:be:50:39:ef:98:fb:3c:
80:03:78:61:21:3c:96:48:e2:cc:fa:51:b2:3f:30:3e:35:23:
7e:e8:c6:27:68:0e:46:cf:4c:4b:09:0a:ef:1e:fd:2e:3c:96:
eb:7a:4b:5a:a3:cb:a3:e1:86:c0:c0:b1:88:52:88:e9:59:3f:
d1:7f:8a:d4:78:71:e5:6f:cf:83:4b:ec:a3:bd:df:9a:84:e6:
10:76:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:26 2025 by rpki-client