Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
File: _a9B0EvGh9D_mK19QHaEdRxGyj4.mft (raw, json)
Hash identifier: 62cFule6E/fFwaXD/hgRRv5TdP+WL23vqz2b943HKrM=
Subject key identifier: 44:FF:AF:9A:5F:05:EB:BA:02:AD:42:1F:D1:2F:3A:77:19:B4:29:DE
Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
Certificate issuer: /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Certificate serial: 019A41DE1996B1CABDD6E5C2000F57586B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
Manifest number: 019B
Signing time: Sun 02 Nov 2025 00:01:05 +0000
Manifest this update: Sun 02 Nov 2025 00:01:05 +0000
Manifest next update: Mon 03 Nov 2025 00:01:05 +0000
Files and hashes: 1: KAVL6kTny8TDOYbmZPaPDwl2wXM.roa (hash: aJfitKEgdn0yPAeBVox/YEVRIDod3KCN4Iqb7ST2CSs=)
2: Z_12fyPWjJvCb6FBNMUkeSsk2Qk.roa (hash: a0cw7dhkqyFjfij3KupwibkS70jrF4XOR8zbXlfILTw=)
3: _a9B0EvGh9D_mK19QHaEdRxGyj4.crl (hash: 7IozECT4KrNWzP648FxBaeD0/vV4lWYeun5K6albitc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:de:19:96:b1:ca:bd:d6:e5:c2:00:0f:57:58:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Validity
Not Before: Nov 2 00:01:05 2025 GMT
Not After : Nov 3 00:01:05 2025 GMT
Subject: CN=44ffaf9a5f05ebba02ad421fd12f3a7719b429de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:60:07:69:7b:00:3c:01:44:5e:77:ee:e6:
e5:9f:9f:cc:57:50:2f:1c:0d:a3:4c:3f:d3:91:e3:
e2:6d:7d:cb:7c:f2:40:1f:8f:0a:26:10:74:76:7d:
75:b7:a5:09:6f:07:c1:22:7c:6f:81:56:c0:25:a9:
c0:1e:d8:03:9f:7f:7b:7c:5b:3e:09:00:7a:74:ee:
79:bc:ad:e0:20:a9:4f:0a:db:3e:08:4d:3d:6c:1c:
7e:b9:ea:bf:12:cf:b7:8d:3f:c7:26:82:12:8c:80:
30:7a:89:15:78:3a:65:0c:0c:f9:14:59:e3:6b:99:
e3:fd:67:c3:4e:6f:82:e4:ba:2a:07:cf:8c:40:a3:
d5:5b:93:c0:ec:5c:e5:c3:f9:f7:9f:76:64:dc:96:
6a:bf:b5:57:90:8b:08:2e:fc:e9:14:06:4d:9a:7c:
77:9b:44:ca:50:e6:0a:f3:b0:8d:25:00:27:68:3a:
18:65:37:47:79:d9:01:7e:99:df:0c:e4:de:b0:b9:
10:52:5b:05:99:67:e7:5a:a1:d8:95:96:ed:02:cb:
b8:0b:db:1c:f1:b8:1d:32:34:f4:cf:48:5b:87:dd:
3f:89:82:7c:cb:42:d4:5a:23:a2:d1:27:16:1b:6b:
e8:9f:2c:e8:8f:8a:71:18:56:f1:fa:bb:8a:33:38:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FF:AF:9A:5F:05:EB:BA:02:AD:42:1F:D1:2F:3A:77:19:B4:29:DE
X509v3 Authority Key Identifier:
keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d3:f5:83:2f:5c:f3:cb:3f:5a:45:ec:3f:23:9c:e2:a9:e2:
08:73:3e:72:78:e3:29:13:e7:0d:0c:93:cb:eb:68:0a:e6:de:
06:33:f1:9a:47:f5:46:72:ed:37:22:1d:8f:d3:96:6c:b8:66:
3e:53:cd:6c:48:55:27:43:a0:78:0b:d7:48:d0:fe:1f:70:cc:
22:7f:14:f4:4a:9b:a1:21:a3:e8:33:3b:98:2f:d4:c1:dc:00:
1f:c3:83:9e:aa:d9:ad:bd:01:b5:56:b1:37:74:1e:1b:b2:81:
24:ea:42:ce:82:c4:b0:28:1b:8c:9e:3e:f1:f9:3f:60:ec:46:
7e:1d:9b:47:d9:af:45:54:11:61:2d:9d:89:5b:4c:73:9b:23:
28:8c:a1:62:86:5c:ba:fc:e0:c0:13:f0:e4:c2:7b:d3:d6:c2:
4f:93:25:18:35:8d:b6:05:e5:e5:8a:f2:49:15:fb:6a:49:04:
e2:d1:98:fb:46:86:25:0d:5b:f1:97:9e:98:c5:50:77:01:60:
41:ed:c2:c8:31:ba:3e:ad:6c:85:37:78:49:05:7c:e8:83:46:
7b:93:78:65:d8:66:07:b0:bc:c2:39:e8:44:50:0b:64:48:c3:
5e:9c:87:82:10:11:e0:97:ad:56:14:01:d6:d5:24:8b:80:37:
6d:ff:5f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 07:32:06 2025 by rpki-client