Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
File: 9EDl66L4v8j-j-VsyIpCiWUjkLo.mft (raw, json)
Hash identifier: sHhXlx1zKcDqar0Mns1QCNgJF6tf/1IV5gZQBMZnm60=
Subject key identifier: BB:93:DC:03:A4:34:8E:C3:D2:53:C2:E0:54:08:55:6F:66:3C:41:01
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Certificate issuer: /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial: 019A70A52313BB8EC57A28D21D7622012D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
Manifest number: 0F3B
Signing time: Tue 11 Nov 2025 02:01:01 +0000
Manifest this update: Tue 11 Nov 2025 02:01:01 +0000
Manifest next update: Wed 12 Nov 2025 02:01:01 +0000
Files and hashes: 1: 9EDl66L4v8j-j-VsyIpCiWUjkLo.crl (hash: icPPeFRB1MXy4kISrJJL4Fa5SO4hAFzZ4RiqcvVzC4Q=)
2: XZCD2ozMadKu5ppRclcjA81adQM.roa (hash: 5bgsDhtiRsAZtWQwU54/e6IL5DKPg91iF0EEc9dqPDs=)
3: cHDBlBO6N0ca9YSLdLpALyyHWaI.roa (hash: o2xngpUpZnDRvPeXgXjlZjCICvbC/BE21jFOWmBqYGA=)
4: iUk2qAaYanuhC0yHx75ofbbtDfw.roa (hash: 6NTe6e0s9TjAs580GSrWi1bA7imMCeeLHXSr5hAoGzk=)
5: mTa0tBmnc-EZQRSpAfUf53n7dTc.roa (hash: 1CRclX1Yx0St5CAEJDWGoq4O3N6WotLgVbncs/lahzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:23:13:bb:8e:c5:7a:28:d2:1d:76:22:01:2d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Validity
Not Before: Nov 11 02:01:01 2025 GMT
Not After : Nov 12 02:01:01 2025 GMT
Subject: CN=bb93dc03a4348ec3d253c2e05408556f663c4101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:66:22:08:e3:65:63:b3:d1:bd:50:9b:37:
ad:f3:52:ae:89:c4:3c:b8:c1:53:31:e8:bd:8d:01:
a9:b0:2b:17:33:fa:55:04:a7:fc:f1:57:d8:c5:9a:
c7:ef:47:80:8c:50:11:5a:f2:af:52:b1:c9:65:f4:
d0:a6:94:fa:b3:dd:e1:c4:ae:84:5c:dd:5c:e2:93:
4e:04:c8:b8:09:c9:a5:e5:3a:d5:16:30:fe:52:e5:
f5:c6:0c:7c:c7:7e:6e:a2:9c:2e:c8:90:da:aa:2f:
c4:dd:2e:2c:be:60:c8:09:b1:0a:d9:b8:bb:70:b9:
a4:df:23:7f:08:f2:86:b4:05:96:6d:f5:df:b7:42:
10:4a:cc:62:4e:71:1d:88:0d:3d:2d:9e:78:92:94:
7b:53:e0:47:52:5a:d2:0b:ce:c6:18:df:26:10:91:
9a:0a:54:78:31:eb:a1:99:18:1e:73:96:67:8d:0b:
31:34:53:c1:7d:e7:e7:4b:12:87:63:3e:b0:29:30:
8e:f7:84:8d:60:8b:a3:ab:3f:90:4f:79:cb:de:d3:
23:1a:e8:40:b5:ca:c0:ff:97:27:d2:b1:05:e4:a8:
72:54:1a:31:fd:ff:62:a9:10:fb:67:ea:3c:c7:83:
66:6c:e1:ca:13:da:45:c2:82:9c:73:71:ed:75:2c:
c0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:93:DC:03:A4:34:8E:C3:D2:53:C2:E0:54:08:55:6F:66:3C:41:01
X509v3 Authority Key Identifier:
keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d3:79:d1:b6:cb:cf:3c:e0:fb:66:90:80:28:8c:93:68:07:
47:dc:76:83:04:cc:8d:6d:40:ab:5c:31:53:b7:5b:ad:78:2d:
66:e0:c3:6b:eb:e7:71:04:eb:d6:9b:5d:e1:74:9a:e8:01:7a:
96:56:65:a3:77:cb:2b:e7:6a:f9:51:94:5d:55:e0:24:a1:4b:
79:5b:f7:e8:39:ad:10:ea:e5:91:45:d9:df:53:3a:d7:9f:e9:
ab:32:66:8a:ac:cb:2a:7f:1e:5a:91:be:de:50:1c:89:81:e1:
2b:87:a3:2c:0c:21:90:58:da:fb:d9:d9:a5:20:49:96:17:bd:
14:40:55:52:c5:d9:96:d0:a6:60:41:93:30:0b:f5:4d:69:48:
e2:a0:a1:49:ed:33:aa:11:6e:fe:3a:91:3a:fc:72:c7:dc:21:
16:b7:80:58:71:fc:14:6a:7b:92:b4:30:c7:fd:d7:4d:b4:27:
4f:6e:13:1f:c7:aa:58:ad:46:15:a1:f1:f5:a3:3b:14:9a:4f:
75:8c:5e:39:0a:77:30:a7:8f:40:0b:a9:6d:95:6e:ba:93:9d:
60:41:5f:e1:c0:8a:b5:87:4d:d8:54:d1:36:53:c3:82:09:cf:
fc:cf:cb:f9:0e:14:d6:87:0d:eb:52:c6:42:8c:ec:e3:68:c7:
05:cd:dc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:16 2025 by rpki-client