Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
File: IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft (raw, json)
Hash identifier: M/04Mm3KPbH1rDNNBq9MWWMprnn8n6E1ok4gHB+ksP4=
Subject key identifier: 9F:59:8D:12:6B:B8:83:FD:A4:16:64:62:03:5B:D9:3E:BE:8D:8A:7D
Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
Certificate issuer: /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Certificate serial: 019A4EF5B3CD4E0D0E2C49FDAB5644D8025F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
Manifest number: 0D89
Signing time: Tue 04 Nov 2025 13:01:56 +0000
Manifest this update: Tue 04 Nov 2025 13:01:56 +0000
Manifest next update: Wed 05 Nov 2025 13:01:56 +0000
Files and hashes: 1: IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl (hash: C4BpzSlpHcpdfdHbnQ/sdxGSLQwC1MKFADiDL2Wxik0=)
2: gJhF5evxe8g-iDe3hBXACq-nKPk.roa (hash: qM5+n5uw27ndltKhnl7N0lO0fW10CmbET7TyhvcxHok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b3:cd:4e:0d:0e:2c:49:fd:ab:56:44:d8:02:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Validity
Not Before: Nov 4 13:01:56 2025 GMT
Not After : Nov 5 13:01:56 2025 GMT
Subject: CN=9f598d126bb883fda4166462035bd93ebe8d8a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:99:fc:f8:19:50:04:9e:7a:6f:46:7f:e7:
a3:27:b7:65:05:80:93:a6:bf:30:51:48:73:47:14:
e2:8b:12:a4:ff:95:76:aa:d3:05:8e:67:24:fd:77:
fb:f5:5d:6d:72:b8:5f:7a:d5:42:51:3a:af:94:82:
9f:50:7a:82:ac:c9:cb:0f:ed:40:34:b3:86:cf:d9:
6e:cf:24:58:ac:ec:24:a5:61:e3:97:aa:24:df:6b:
92:fc:4f:4e:91:b4:a4:70:16:a0:97:40:a1:01:41:
12:fc:be:9d:87:0b:09:06:38:62:3e:3d:fb:70:50:
5b:5b:22:97:3d:1c:82:af:51:f2:94:bf:d8:f8:4a:
8d:eb:43:d3:68:a3:a3:22:84:53:24:86:43:d2:ee:
26:f9:ec:9b:29:54:8a:19:13:e6:e9:79:e9:b0:4a:
4f:b5:a1:c8:13:48:01:6e:1b:72:f8:2f:8a:48:b4:
f9:6a:ed:f6:42:73:87:dd:ee:1a:55:74:8c:8e:c1:
aa:a7:a8:45:77:50:79:32:ff:13:0f:1d:79:7e:67:
0f:e1:6c:f9:50:7b:a4:99:e0:15:e5:db:ba:c7:1e:
cc:b1:c5:85:66:06:94:a2:45:97:2e:77:34:f2:a8:
29:74:fe:83:e2:7a:f7:18:4a:ea:9a:e0:ea:7f:31:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:59:8D:12:6B:B8:83:FD:A4:16:64:62:03:5B:D9:3E:BE:8D:8A:7D
X509v3 Authority Key Identifier:
keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:77:38:eb:84:49:33:0b:4c:1f:60:a0:b1:c4:c2:a0:c9:c0:
93:20:27:b3:1b:a0:89:76:c0:9a:64:5c:57:44:4f:0a:ba:08:
52:81:e7:9e:8e:d4:2f:82:53:7a:b0:ae:9e:35:4f:f8:55:9e:
b8:79:9d:2d:34:9b:43:2b:fc:da:28:5a:a9:b5:89:d8:c9:93:
7d:8d:b8:04:55:cf:d0:36:c2:70:4d:c9:ce:50:c0:ec:69:04:
b0:a5:25:e6:e2:5f:a8:a4:d2:4c:c6:2f:fe:86:06:d5:b5:ed:
53:b4:b3:77:e6:63:a7:5a:19:df:8d:f3:dc:92:65:57:44:5a:
e6:80:34:d5:cb:1e:e5:8c:fd:47:46:4a:ed:36:dc:57:1c:53:
5f:e0:e7:1a:f1:d8:9e:d7:df:9f:25:ad:45:db:b1:a8:8e:72:
33:c6:a2:b8:ab:4a:10:4a:02:28:92:eb:86:08:61:a4:88:39:
4e:27:ab:bc:ab:e7:5a:04:cb:0e:1f:81:05:81:40:a9:c0:30:
85:0f:85:5f:41:e2:d6:91:eb:d3:e3:c3:71:d2:30:bb:26:cc:
cc:45:09:5e:60:bb:c3:ad:80:a5:b9:d8:a5:a3:8c:61:5c:b2:
cf:a1:2b:d0:53:b1:4b:67:bb:11:e1:f8:80:c9:3a:ad:6e:dd:
83:4e:5d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:09 2025 by rpki-client