Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: MRG7H42yqovwsqPSYXDQKwHLWiAMgRt3mbhVHV6mNRY=
Subject key identifier: 50:54:E6:35:46:A4:D4:48:31:95:A6:4A:20:49:94:93:64:86:14:69
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 019A500742BE7EEFCF6AF86CD7A116CCD359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 0566
Signing time: Tue 04 Nov 2025 18:00:44 +0000
Manifest this update: Tue 04 Nov 2025 18:00:44 +0000
Manifest next update: Wed 05 Nov 2025 18:00:44 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: FowOJI6WaI+LGC2AxYeFFGp7uUOPCqugUQTYcAAEUZg=)
2: iJSQx0f1nTa0-CmNbadm7Gos7IA.roa (hash: LXabEDWzH1fx8QmFW8g5Pa/8Oh8pnxFijMUOQc1WwTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:42:be:7e:ef:cf:6a:f8:6c:d7:a1:16:cc:d3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Nov 4 18:00:44 2025 GMT
Not After : Nov 5 18:00:44 2025 GMT
Subject: CN=5054e63546a4d4483195a64a2049949364861469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c6:2d:7c:56:0b:56:cc:e3:ef:55:5d:45:5a:
8e:30:ed:f0:4f:21:62:08:9a:39:ad:aa:c1:87:ab:
87:b7:bf:55:43:56:dd:b9:13:d1:55:bf:90:57:96:
19:71:b8:30:75:8f:26:81:4a:64:b1:9d:d0:f3:97:
12:c2:08:e9:68:eb:31:44:43:14:2c:3a:81:47:82:
a8:c0:7f:65:86:4d:f3:2c:0a:2d:87:3e:cf:61:7b:
0c:b6:b2:e4:d3:4c:d4:12:44:cf:dc:38:81:a5:aa:
2f:a0:8e:b9:48:0e:f5:91:b5:ed:10:ea:3c:69:7f:
a8:67:e0:08:5f:f3:71:88:cf:aa:d0:32:52:03:77:
1f:14:be:f8:91:e5:12:30:af:a2:55:43:53:c1:d7:
05:1e:3f:a1:3d:75:06:3b:e1:19:2f:1a:3c:54:7f:
e8:87:e2:05:45:fc:d4:45:2c:47:b8:c6:70:c2:bf:
55:0f:02:cf:0d:d1:a0:52:24:d5:db:e2:da:36:01:
b4:e0:df:69:cc:6b:ee:4c:b3:da:b1:ca:89:48:2a:
a3:35:11:3d:79:82:be:8e:a6:e9:a5:35:c1:b5:e7:
8e:72:c3:31:e0:4e:b1:b3:1a:9e:65:da:43:f2:d1:
7b:7d:cf:df:94:5e:04:61:43:f9:27:fe:22:f7:0d:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:54:E6:35:46:A4:D4:48:31:95:A6:4A:20:49:94:93:64:86:14:69
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:10:91:71:66:30:41:98:83:dc:3b:68:c5:1d:0d:74:22:7e:
03:a8:b4:e5:80:33:5b:3f:d0:78:cf:4b:29:9b:86:1c:22:32:
39:d9:ee:ac:f4:38:c6:b0:7d:65:db:5a:48:9d:11:03:ca:e1:
81:e6:2f:ba:d3:1a:06:b8:9c:12:52:88:94:74:74:28:0c:f4:
9c:87:50:c5:ec:8e:55:e5:b0:7e:ea:c9:02:32:e0:1a:93:2e:
60:3d:2e:0c:e3:01:1f:3f:02:29:b4:aa:46:24:d2:b2:17:6d:
47:42:b4:56:19:f9:47:88:7d:8e:42:e6:c2:6b:0e:e9:ef:e8:
70:8f:aa:e1:c9:cf:15:56:bb:77:63:f6:05:25:ab:d0:1b:42:
4f:c6:3a:c8:1f:cc:01:80:6a:34:eb:d4:fd:76:62:1e:12:ae:
19:dc:94:a8:b9:16:9d:00:8d:00:17:f4:d1:f4:8f:5e:8d:10:
45:1c:a4:e6:42:c7:78:26:fa:ae:38:2c:89:55:38:63:c3:6a:
1e:d2:ab:c6:a0:f0:95:44:6f:59:d1:36:47:9b:f4:6e:2b:f0:
5e:e9:a6:c4:f7:1a:1b:94:0f:aa:df:ed:31:fc:0a:5b:bb:7a:
d7:6e:12:57:13:b9:8a:23:10:b4:3a:68:1e:f7:62:60:51:72:
bf:a0:59:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:32 2025 by rpki-client