Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: eoE8pe01ifwdK73YYG1RGNpb7IHdD6atbyzamOsplm8=
Subject key identifier: 3B:DA:91:EB:1A:8D:25:3A:52:43:C8:00:CA:6A:32:1F:4D:CE:CE:CE
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019A2A441D2D763732708E390437AA8CF8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 14EE
Signing time: Tue 28 Oct 2025 10:01:38 +0000
Manifest this update: Tue 28 Oct 2025 10:01:38 +0000
Manifest next update: Wed 29 Oct 2025 10:01:38 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: AL9nw6VB4aXNv959Z3olF84HSyYOiElm+O0mJmbluHU=)
2: BiMv8HqHvhESPjdfNiZspDWMcck.roa (hash: VDtYCMJvov6A+4AQvfrZcV5PKPedCXfg7qI6T/gVIIY=)
3: Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa (hash: hD0+G5MXyDM1luyb7ODeIqLQR1bD/LfiGebJK14aPaI=)
4: id6tq9B8Miy7wJM6L5HxddzH87k.roa (hash: oCe30Ut+jcQoEpHEArIn6mGQ5oeRKOfvgjQV4Jelj2s=)
5: ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa (hash: kRBm8C5K+JyK4jIZs00HDTzQAvxAZ6ZeitYKBzGUqMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:1d:2d:76:37:32:70:8e:39:04:37:aa:8c:f8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Oct 28 10:01:38 2025 GMT
Not After : Oct 29 10:01:38 2025 GMT
Subject: CN=3bda91eb1a8d253a5243c800ca6a321f4dcecece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:23:32:3b:a7:25:0b:cb:17:78:c7:69:f1:
99:fe:01:5d:4e:32:3b:c6:40:3e:0a:9a:72:30:76:
48:47:f1:53:78:35:8c:e2:97:09:22:36:21:6d:00:
66:66:b9:77:bd:66:5b:76:3a:d4:34:fb:7f:91:f1:
e1:a8:5f:06:0f:a6:0c:3d:b6:c8:a3:5a:ac:f8:9e:
9b:ef:1e:2d:76:a3:5c:8b:f2:9d:5b:f0:51:4b:1b:
e9:c1:06:bc:e5:99:f2:7b:ec:29:8d:95:05:3d:cb:
b5:52:95:c1:11:74:2d:13:bb:af:25:9a:43:d6:73:
c8:2b:ba:48:69:ea:14:6a:67:2d:9f:66:5d:f0:7a:
6c:f9:7d:83:ce:ba:a0:7a:ff:be:36:1e:d9:ae:b5:
f1:4e:9d:1f:4f:e3:fc:dd:c6:e8:af:c2:3b:f2:ba:
ef:cb:01:3d:69:e5:ff:9a:27:dd:5b:f5:e0:44:b2:
96:1d:cd:af:70:8e:15:c3:05:c3:89:1b:2d:bf:d7:
8c:00:29:64:4b:d1:19:ae:33:4a:69:11:f4:f3:0a:
58:66:8a:f2:ab:0a:0c:6f:97:47:78:bf:89:da:44:
8d:c0:83:63:76:8c:05:5e:6a:15:01:a1:74:f5:9a:
01:36:b0:42:2e:45:14:6a:dd:f7:48:a1:d3:39:aa:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DA:91:EB:1A:8D:25:3A:52:43:C8:00:CA:6A:32:1F:4D:CE:CE:CE
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ad:7e:32:58:fa:c7:9e:03:0b:a8:bc:e6:42:02:f7:54:06:
ea:79:bb:ba:52:13:e1:d4:15:a3:a8:ab:24:90:23:8f:9e:e9:
52:e6:cf:f3:f4:ef:ae:5d:0e:56:a3:29:9f:6f:c3:c0:14:e5:
b7:4f:d5:a5:14:2b:88:b4:0d:24:fa:21:51:51:1b:36:03:9c:
78:b6:ef:33:87:5f:ce:93:21:aa:04:e8:19:fc:a0:42:8e:fc:
29:df:c4:77:f3:64:55:b4:74:66:12:ab:67:ca:79:91:90:cb:
b8:d2:5a:a6:bc:76:3b:02:b2:f2:73:e6:9d:f2:9e:4e:4e:08:
64:95:ae:7a:a8:a5:0f:cd:16:c4:04:1b:af:1c:e5:c8:be:4f:
3f:95:fe:00:3c:bf:ce:29:3d:bc:2c:ae:b1:3f:4b:19:fa:57:
a0:00:b5:9b:84:ad:7a:45:d0:e3:c0:d3:cb:eb:58:b9:f4:9f:
df:ac:18:8b:41:37:77:31:7a:8a:97:df:13:1f:da:14:39:49:
83:a3:22:04:ee:58:28:2b:7e:f8:32:5d:15:e5:e9:a0:40:d2:
2c:ee:4d:01:3c:16:f1:a4:0e:74:39:a3:54:b5:0e:79:5b:18:
73:b5:2b:ab:03:b3:e5:90:fb:6c:d9:4b:ef:87:f9:d7:d1:ab:
2f:ab:33:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:16:19 2025 by rpki-client