Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: 51x6ALoSiwNyCE5T4r0mKTf1gXz5tqmIMtbsMmYusAA=
Subject key identifier: 6C:47:FE:AF:14:0F:82:B1:01:75:A7:A7:5E:8A:EC:81:C8:94:DB:4D
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 019A4EF536F82A502DE227ABF94EDA055017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 141E
Signing time: Tue 04 Nov 2025 13:01:24 +0000
Manifest this update: Tue 04 Nov 2025 13:01:24 +0000
Manifest next update: Wed 05 Nov 2025 13:01:24 +0000
Files and hashes: 1: 1tUtdPntOZo4oZY0gj-5-iL3XLM.roa (hash: qzUzuRDUtz2FZx8A/P+rSyUpdTrCQoQOZBqqm3OS2Vc=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: If9KtNvsjv4m2buVC5zXFFtQOE5UV+5EDB+rrsEts6Y=)
3: r0fYtM8vJLJuud_1zoCTV08hICU.roa (hash: N3MrpQwzFuxLwGpoLCDJQ7HCyHzM8rSnUBKZzdYMHOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:36:f8:2a:50:2d:e2:27:ab:f9:4e:da:05:50:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Nov 4 13:01:24 2025 GMT
Not After : Nov 5 13:01:24 2025 GMT
Subject: CN=6c47feaf140f82b10175a7a75e8aec81c894db4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:be:f9:8c:70:a5:02:1a:46:b8:55:e1:d1:52:
be:6a:7d:4f:ef:c8:f9:ee:64:87:a3:c1:55:86:f3:
26:c7:ca:2d:f7:82:fa:e8:f0:14:1f:54:e0:41:4c:
3c:c3:24:fa:f5:71:9d:9e:8e:bc:2a:e8:63:bd:0f:
93:8f:85:9a:0d:bd:99:6b:ab:90:bd:eb:4d:93:9c:
ed:46:57:3f:70:2a:71:03:77:1c:45:40:4e:06:60:
fa:d9:04:7f:e6:4b:29:0f:04:3e:c1:8b:30:b6:7a:
80:8c:a6:d4:8b:e1:13:b5:75:6b:cf:a1:ce:6e:ff:
17:a6:71:ad:58:40:fd:e3:e9:38:b4:eb:0f:9b:9c:
60:f5:c4:31:15:fe:17:5b:78:d4:44:b9:70:56:95:
6f:3b:df:fd:e4:75:81:92:41:f2:13:ad:ba:53:d7:
b0:9d:bb:64:2c:73:9e:2f:ee:6d:a0:24:f5:0a:ff:
9e:fc:bd:22:c0:69:2a:fb:fb:50:0d:f1:07:7c:62:
91:24:03:4a:35:1d:34:e9:c3:21:7f:b7:96:86:47:
7a:ab:ad:72:9d:52:9f:15:05:c7:67:01:db:67:c5:
f1:94:63:4f:d4:a4:c5:41:d1:0b:cb:16:83:a5:7d:
ef:3d:49:8a:3d:09:ef:59:7c:fd:60:4f:15:bc:91:
44:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:47:FE:AF:14:0F:82:B1:01:75:A7:A7:5E:8A:EC:81:C8:94:DB:4D
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:50:ac:bb:74:7d:7e:74:6e:61:48:1c:ba:4e:f8:0c:8f:8c:
8e:b8:4c:3e:bb:4a:d1:9a:c1:ca:34:eb:df:c6:93:47:17:1d:
d2:cd:e7:57:b1:41:8c:c7:3b:ce:c0:04:1a:9a:3c:da:df:42:
99:f6:dc:e9:3a:e6:d2:09:51:52:06:dd:39:10:ee:f0:82:e5:
f3:f3:d1:0c:76:bd:d6:51:ff:13:06:19:82:2b:96:1d:ff:e7:
d0:5f:0b:12:15:61:57:84:cb:ee:c6:e3:9a:19:cd:b8:9b:e0:
18:e4:e5:91:8d:35:4a:fb:45:59:ff:b8:7b:4e:56:56:69:56:
20:89:b6:58:7a:dc:b2:56:06:86:18:fa:fc:28:23:d3:39:ce:
b0:d5:ed:4b:e4:3c:51:37:fc:36:51:91:54:55:45:ec:87:7c:
7c:20:f7:b2:a3:0b:65:77:05:89:4a:e5:6d:74:5f:b9:a3:31:
a9:1c:24:95:17:0a:63:4d:03:73:0f:08:af:dc:a9:e6:f9:0f:
43:3c:e0:d9:bd:e5:4f:fe:0d:82:61:61:2d:82:3f:1e:62:7a:
36:d6:49:38:d5:b5:c9:d5:20:56:79:ba:a6:d5:dc:91:ee:95:
32:c3:ef:f7:10:13:92:ac:57:f6:7d:44:e2:34:96:74:78:9c:
74:ac:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:56 2025 by rpki-client