Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: uxqzQoy+N8KVA6hZ7+2FrLNSZ9/MSx8s3DCjIV11Hj0=
Subject key identifier: 0A:72:AA:32:28:BE:59:54:D3:1A:84:82:74:84:FC:28:26:86:56:69
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019A0900CE51AC09AD3D40FD7E54389B71FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 0E30
Signing time: Tue 21 Oct 2025 23:00:39 +0000
Manifest this update: Tue 21 Oct 2025 23:00:39 +0000
Manifest next update: Wed 22 Oct 2025 23:00:39 +0000
Files and hashes: 1: MokO4jiYwe9TS2omj2ikwVpofng.roa (hash: gtOwexkMJ+fWFlaIuQkWe6uyxrapgzkAX5UJ2TjfWz4=)
2: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: jWT5p5VkWIqA7oFHlJHPuv5erNt+zu4E0jSkE9S1yZA=)
3: ecFUW2z0XsJzdPaPmfmi1NbravY.roa (hash: B/1KiGYT9I28lQbSFekF4v776yFSZOm/z2BZeazx7uo=)
4: pqlbIbNJ9fb6HI0B5-w4UgSYcbY.roa (hash: mcYLCtbaBwaS/xS6dmXpUntAVPZrHZ1andB/RjcjVcA=)
5: tY7BHUvnSszc7zTuhTRehaET6sI.roa (hash: KeG1ndmoCZ2IjHvkM2LPj9WePrlmC0S+eFWuoo10hmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 19:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:00:ce:51:ac:09:ad:3d:40:fd:7e:54:38:9b:71:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Oct 21 23:00:39 2025 GMT
Not After : Oct 22 23:00:39 2025 GMT
Subject: CN=0a72aa3228be5954d31a84827484fc2826865669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:66:d3:ba:02:14:e7:d1:11:42:fc:d8:60:
c3:80:7d:ed:7e:2f:2f:e3:be:33:90:8f:33:f7:ea:
2b:1a:6e:f8:e2:f8:55:97:a1:e1:5b:57:2b:dc:60:
aa:f7:81:44:cd:14:7d:4a:58:6e:c4:5e:fb:c0:08:
6c:a7:43:88:e7:4f:0e:9c:a3:84:56:76:dd:7d:72:
26:e6:80:61:c5:44:32:b0:60:40:f5:50:c7:7a:98:
e5:a7:ba:d6:1a:1d:81:cb:8d:de:7b:62:9e:f9:d5:
8f:12:84:df:89:86:42:4f:82:c0:ec:83:7f:a9:ca:
7f:27:59:86:29:a2:f6:c9:a7:de:ef:52:c9:a0:62:
bf:54:5e:d3:95:3f:cf:78:d3:a5:be:51:dd:47:b1:
5a:f7:2a:e9:1c:1e:3d:7a:c3:df:39:86:00:81:f2:
00:9e:f6:be:2a:fd:3c:19:49:86:d5:e6:a0:2c:a3:
c9:16:c1:e1:18:16:be:91:4c:c1:0f:8a:67:40:7f:
27:49:90:cb:15:4d:26:03:f6:b8:25:2b:2c:ef:1a:
e0:69:53:cf:8c:fb:da:5b:af:8b:59:69:2a:e4:0f:
5f:17:38:92:13:cd:5b:79:10:f9:dd:59:e2:44:d8:
5e:89:b5:ca:32:a4:9d:11:01:24:38:bf:89:92:4a:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:72:AA:32:28:BE:59:54:D3:1A:84:82:74:84:FC:28:26:86:56:69
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6f:66:84:72:2d:bc:91:02:e3:02:86:41:ae:69:45:f0:df:
e4:0a:d5:4d:e8:0a:68:f5:7c:e9:5d:b5:e5:ab:91:3d:55:87:
c0:62:8c:5b:a4:b7:4a:cf:32:51:1f:c2:2e:6a:61:14:9d:df:
73:ef:74:0e:b4:cf:a5:5c:8e:ed:9a:67:34:c7:a5:bb:ae:76:
16:40:16:4f:6b:3b:32:42:82:89:0c:1d:22:5b:c1:22:99:ab:
11:4d:2a:c2:db:56:f9:bf:66:20:fe:92:d7:06:c3:d5:bc:02:
58:44:20:50:77:a2:41:6b:59:e4:34:4a:1f:16:19:cc:42:34:
fa:64:83:62:bf:0a:d0:82:dd:b8:20:a5:18:0d:88:a0:15:45:
d5:27:26:56:2a:c8:5d:48:30:4e:d1:0d:66:43:c8:f5:55:5a:
19:49:ab:62:26:33:b2:dc:6c:b8:7c:8d:9e:96:8a:4c:2f:84:
8e:16:8d:d4:25:b0:c7:7a:f0:0c:89:1f:b8:b2:1a:2e:89:27:
27:0e:16:ed:38:1e:8d:f5:7f:49:ff:3d:f9:29:b6:76:bd:c1:
85:74:82:54:0b:da:29:aa:5e:85:eb:48:78:fe:cf:09:df:78:
ea:d9:5a:ba:9a:1a:b1:a8:ee:b1:27:2e:ab:f6:d1:9b:94:39:
9b:ab:9a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 01:56:20 2025 by rpki-client