Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: H+w3f1bzFiQRWwqCx/FEM8P8gq5s3MbQ4mpYIgsa4Bs=
Subject key identifier: B1:60:0E:15:A5:20:8F:88:35:0F:BE:89:F0:6F:93:C2:21:DA:4A:D3
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 019A44A7B29C9CF6AD0C410F17A6073598AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 14AF
Signing time: Sun 02 Nov 2025 13:00:32 +0000
Manifest this update: Sun 02 Nov 2025 13:00:32 +0000
Manifest next update: Mon 03 Nov 2025 13:00:32 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: yjkEN3bP9jDanyKwQjcxL2x4kkpBE9f9ghE9e2+tnDg=)
2: JYVK5YIo9oFduSfdge32BhR1llk.roa (hash: MLgxgkj7xVD4j08JzP+4k7sw1diRLF6XHz+tW1zn9ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:44:a7:b2:9c:9c:f6:ad:0c:41:0f:17:a6:07:35:98:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Nov 2 13:00:32 2025 GMT
Not After : Nov 3 13:00:32 2025 GMT
Subject: CN=b1600e15a5208f88350fbe89f06f93c221da4ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:11:94:0c:bc:ac:4c:a3:35:02:cc:55:7e:
d9:0f:ad:3c:8c:e9:ff:15:34:cb:36:20:61:14:7b:
77:bb:4c:d3:1a:1a:24:1e:ff:4d:75:6a:be:1d:51:
14:a0:67:84:3c:9e:09:39:ac:a3:82:b3:da:f8:32:
cf:eb:ae:8f:08:b1:9e:86:2e:d8:bb:33:02:f1:ff:
dc:eb:5d:bc:fa:9e:82:41:ee:27:cb:6f:0a:e7:05:
fe:8a:3e:92:b7:dd:47:2b:fa:2a:5b:5a:c5:b7:08:
f3:76:19:9a:74:61:44:3a:da:9d:d2:e6:69:28:d4:
27:34:6a:5c:f0:70:c1:36:74:fb:fe:a1:dc:16:81:
cd:39:b3:fe:90:06:b5:e5:5f:ca:6e:80:f7:b1:14:
51:f0:61:19:15:3f:2c:3e:d8:13:9a:e1:b6:eb:4c:
df:64:fe:16:f5:6d:29:94:1e:87:1b:46:49:51:ea:
80:a8:99:96:14:73:c9:7e:23:07:1a:8c:8d:0a:a0:
ff:16:6b:8e:31:3a:0f:44:69:16:61:a7:82:80:18:
dd:de:ab:85:5f:f5:27:77:80:d2:26:b7:29:a5:6b:
6b:2f:f7:79:c1:5a:8a:f7:21:d5:9f:8d:db:6b:26:
dd:96:6a:64:b1:59:f7:20:b3:4d:31:68:ee:7e:3b:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:60:0E:15:A5:20:8F:88:35:0F:BE:89:F0:6F:93:C2:21:DA:4A:D3
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:46:a0:e4:b6:56:7b:d0:d5:26:18:07:e7:99:5b:c0:aa:13:
07:69:65:25:df:2a:3c:07:11:81:b0:2b:b8:28:4a:53:e8:62:
e7:98:34:77:89:a9:70:a7:cf:72:e2:a6:1b:5c:02:ce:cd:a1:
ff:bc:aa:6d:6f:72:50:43:fe:3e:cd:b1:89:6b:41:d3:d0:1f:
1c:d0:dd:c5:e7:86:a6:56:be:ff:42:0b:6f:83:31:5d:20:20:
04:79:89:45:05:ce:2c:25:fc:a2:06:fa:e9:dd:58:be:e2:ab:
4d:6b:94:34:59:53:53:ec:2c:13:dd:db:7f:74:cd:2c:03:3f:
4f:49:a4:2b:94:44:46:a0:6e:94:66:b4:2e:d8:a3:d6:8f:1f:
fc:b6:b4:c7:7f:68:f8:9c:e8:70:f1:5c:e7:f6:68:b0:72:ce:
be:2b:cf:6c:5a:f5:4d:06:1c:a4:e7:1b:e9:b5:8c:45:23:d3:
85:49:6b:7a:13:d7:38:41:50:71:7a:39:e2:b7:ef:3f:51:85:
24:b8:91:23:37:76:d8:70:76:38:42:3f:99:55:af:65:c1:1f:
87:84:75:d6:5c:53:31:8a:2f:5f:83:8c:1c:29:0c:5f:54:3b:
c7:27:c8:1b:7c:7d:ec:a8:73:78:ca:f3:69:33:f3:f1:16:ec:
70:aa:83:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 16:35:19 2025 by rpki-client