Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: 2CIgZQ5BBTiI+/zjddW4gea8NJdIBfTakFjwxL5fm3s=
Subject key identifier: DA:5D:B0:3B:7E:7F:63:18:1C:2B:36:1C:AA:01:A2:14:41:F1:D5:5B
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 019A725CD105A78DEEE49391887466EBB9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 0860
Signing time: Tue 11 Nov 2025 10:01:16 +0000
Manifest this update: Tue 11 Nov 2025 10:01:16 +0000
Manifest next update: Wed 12 Nov 2025 10:01:16 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: 8R+KTcHjyQRmZBWXIdQ0tXGHbJuqRGeLiuf5+m25pWE=)
2: uNPxSzoBaXvBOJFQn-2SS8eLdrE.roa (hash: aQ7mvpV3ivI5FkoVAB6sSeBflcpGk3YWeApRgwYyH1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d1:05:a7:8d:ee:e4:93:91:88:74:66:eb:b9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Nov 11 10:01:16 2025 GMT
Not After : Nov 12 10:01:16 2025 GMT
Subject: CN=da5db03b7e7f63181c2b361caa01a21441f1d55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:c6:16:bc:ee:a0:99:4f:94:bc:1d:c2:f6:
da:1d:f2:58:50:eb:6b:a6:85:42:bd:b6:22:89:07:
ca:61:d7:7e:5d:51:2d:32:dc:80:f2:e3:54:3e:59:
44:cb:00:2b:bb:c9:f8:c4:e1:ec:4c:ac:e4:62:7a:
53:3c:42:5d:5c:e6:d6:01:b9:27:c4:88:75:d0:03:
42:58:fd:e9:13:60:a2:d7:50:82:28:23:25:24:32:
55:c4:7d:e8:4a:a3:34:f5:36:60:65:6f:4c:2f:20:
08:fc:08:42:ca:0b:37:40:89:ee:66:89:45:ed:ba:
0f:39:f3:f6:b1:28:96:e7:08:b5:cb:0a:60:c1:c6:
97:ea:fc:25:5e:33:7a:8d:84:ca:1f:bd:fc:7f:c1:
3c:fe:22:3a:1b:7e:32:60:e2:80:12:1d:5b:d6:28:
40:5a:fb:08:10:02:e0:c9:6d:48:5d:03:a1:32:2e:
41:a0:c9:94:3d:c4:05:5d:f2:b6:4b:17:1a:e9:3d:
6f:f3:54:93:f7:e8:a1:e9:4c:7e:ea:20:24:23:6e:
51:b4:8e:ff:45:24:b8:7c:a2:28:ca:8d:d6:48:e3:
84:bd:76:17:f0:a8:9c:e3:12:bb:95:66:ad:36:c6:
1e:65:e1:11:c7:66:a0:f0:fe:ff:7c:33:de:e2:57:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5D:B0:3B:7E:7F:63:18:1C:2B:36:1C:AA:01:A2:14:41:F1:D5:5B
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:68:2a:19:2d:8c:0e:e8:33:04:36:8f:fb:ba:4e:3f:57:5d:
5c:67:20:be:f5:23:d5:f7:73:41:0a:29:32:e8:07:91:53:e3:
38:1a:1d:c0:aa:fc:1e:4a:ed:e5:40:af:1e:3b:df:76:9a:67:
94:13:37:c8:10:40:b1:c5:e3:16:73:a3:3e:36:b6:15:08:2c:
f2:e8:5d:62:db:2a:4a:b0:54:c3:a9:bc:e0:44:33:22:72:da:
95:7e:54:42:3f:0b:06:44:ae:6e:4f:c6:3a:d6:5c:23:db:f8:
c8:37:17:b0:b0:ab:c9:60:e9:11:a1:96:68:d0:45:e7:1c:ba:
a1:81:34:c6:84:54:8c:29:29:fb:f3:b9:93:74:b4:a6:07:0b:
62:90:fd:7b:6a:52:c9:54:82:bc:f9:c0:bc:c8:f8:71:1e:ff:
c8:40:cb:60:51:ae:fb:c4:cb:34:24:61:fe:0b:5e:af:2a:2c:
a3:6b:39:1c:6a:1c:d7:44:f2:af:8d:c1:ad:8e:7b:46:f9:18:
92:59:b6:1e:d5:c7:51:57:c4:13:dd:bd:33:fb:e0:c3:ca:d1:
63:c3:a1:4a:94:8c:40:cb:69:35:9b:e1:d2:0b:3d:08:d7:f3:
40:e8:57:bd:4d:25:5f:19:76:b2:a4:3d:bc:8e:15:c2:5f:6e:
4a:8b:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:28 2025 by rpki-client