
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
File: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json)
Hash identifier: E7t6IKUR4AWHWNshK0iAoZnQ94FzNHVqN8llM+ZaRCo=
Subject key identifier: 0E:4C:3B:A9:55:C1:39:1C:3D:B6:3E:98:5B:8F:7B:A7:14:51:97:17
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 019A4FD01EFBF8A1796EC78BA731C4EC4C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
Manifest number: 0361
Signing time: Tue 04 Nov 2025 17:00:30 +0000
Manifest this update: Tue 04 Nov 2025 17:00:30 +0000
Manifest next update: Wed 05 Nov 2025 17:00:30 +0000
Files and hashes: 1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: j7mP2iPPpldn0eCKJrp1HCXKBBlN8IhxOYL+ILZK4HA=)
2: QYL-bJP18_uE1vIYufetQA8LNBw.roa (hash: 5iykeFNsIB7WkpEwkyxi6tSK6cOuYKMgbt5OfyYFMpc=)
3: mfDwEiGRmiWMmFDQIE-xmSECzg8.roa (hash: iS/PokmAhVq2sVGbLhXCo+Ur9JIXXT1eTOi1veSDLr4=)
4: mfVSR44fIY6bkhiOSueC1ITxv6w.roa (hash: xZqOi81DoSglCV29EBbiUSqFQDxJr7C1mJvYXhv2Pug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:1e:fb:f8:a1:79:6e:c7:8b:a7:31:c4:ec:4c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: Nov 4 17:00:30 2025 GMT
Not After : Nov 5 17:00:30 2025 GMT
Subject: CN=0e4c3ba955c1391c3db63e985b8f7ba714519717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2d:1f:9e:ee:51:b6:e2:7b:6f:27:b5:65:75:
66:b5:91:a6:97:72:1d:b9:41:ed:45:a1:5f:09:4a:
7a:c1:7b:06:0f:c6:9e:6b:4f:cf:7a:86:72:c0:71:
e3:5d:f0:77:c8:34:20:60:05:0a:3c:1e:82:8e:8d:
51:c0:43:34:28:d4:08:96:75:1a:6d:76:76:11:b0:
8c:4d:2a:c5:1c:2f:fe:06:4f:88:99:df:d2:50:69:
22:2b:df:69:fb:85:6c:f5:66:61:46:2a:4a:4c:5d:
56:d4:cf:42:b1:de:0b:a5:e9:58:63:3e:b5:8e:91:
e1:4e:fb:f4:6e:54:81:62:49:31:74:96:22:f4:4c:
ec:65:a9:b8:d6:34:0f:cb:56:ba:fd:13:8f:bc:2c:
7d:39:df:12:6a:3b:61:bc:8d:7b:c0:77:ee:58:f7:
4f:26:8b:42:fd:ce:f3:79:6f:bb:b9:b7:6c:24:6d:
52:fe:6d:8f:c6:0d:1f:8e:43:72:49:a3:dd:f9:3a:
f1:65:55:70:52:78:60:de:c5:43:46:e0:71:21:38:
5a:7a:8a:3f:e0:93:67:0d:aa:1b:6a:ac:79:8a:77:
83:aa:80:dc:e3:27:80:50:5e:b8:b6:5a:b3:3e:95:
9e:cf:90:87:72:7e:94:99:07:02:27:d6:75:05:96:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4C:3B:A9:55:C1:39:1C:3D:B6:3E:98:5B:8F:7B:A7:14:51:97:17
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:15:ca:ed:cc:b6:a9:55:d5:ad:24:02:6e:ee:67:81:bd:49:
74:46:89:b5:fe:72:71:12:02:00:80:9a:84:d7:57:a1:c4:6c:
54:bb:06:18:2f:9d:20:d3:d8:c3:b2:b6:dd:07:85:9c:db:ed:
58:fb:4a:1b:eb:78:1f:5d:4a:b6:1c:0e:c8:9b:37:2d:89:3c:
02:18:9c:d1:52:58:51:16:3d:4e:37:53:15:64:05:bc:6b:5f:
4c:92:82:f7:e8:b4:a5:03:17:a5:17:f7:c1:2d:4c:46:ba:71:
9c:ee:72:39:7e:f4:40:2e:2f:b4:4a:4f:aa:e7:74:9c:29:74:
ae:df:2c:23:0a:68:4e:d7:3d:61:49:b3:4a:68:a5:e0:64:3f:
27:dd:1d:c8:44:cf:88:ad:78:30:e1:8d:4a:b5:65:55:f6:c2:
72:a1:35:97:93:83:58:30:ef:23:0c:4e:21:6a:0c:fb:a0:85:
dd:98:34:50:95:ba:12:cc:55:1d:29:2c:44:59:37:06:c5:38:
b8:bb:a8:26:fe:12:c7:62:97:49:b3:a9:85:b7:bc:ba:f3:ad:
da:c1:99:34:1b:6c:a3:9e:28:ad:60:fd:d5:0e:49:61:fb:d4:
a5:a2:65:1a:76:d3:a6:ea:9e:0a:09:30:e9:96:c1:d1:78:03:
67:1d:13:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:40 2025 by rpki-client