Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier: PohxpCaEWIf2rCIHexZefa5YCLy6Yxsd7QIytpTKHqI=
Subject key identifier: 9B:D5:79:63:24:25:BD:5E:B7:F9:18:87:18:91:B0:B3:81:01:04:BA
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 019A71EE9071AB9FA7007B02DDF809B50924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number: 0D9A
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: CYD_Z2qF6mHZ92tY0ftxYfveSAQ.roa (hash: IVgjWp28wTnlbtVuEQ1FT4HkeEGAz5yGW6fM8IpM3RI=)
2: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: mN1hPexHw7fZsZTF7XMfNFddbQRZjH9RIqHuPor7NB0=)
3: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (hash: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:90:71:ab:9f:a7:00:7b:02:dd:f8:09:b5:09:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=9bd579632425bd5eb7f918871891b0b3810104ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:13:14:13:48:2f:cc:02:f1:85:8d:2d:49:
bd:5e:d3:21:1d:f8:a4:cb:c6:f7:df:05:6c:64:ae:
ad:f9:bd:e8:83:ba:fe:8f:7c:00:d8:b6:8f:e2:64:
99:09:e9:67:a3:00:ec:1e:39:a1:40:46:7b:ea:b7:
ed:ba:ef:f7:a7:6a:72:b1:5f:87:3c:26:2b:9d:49:
56:c5:2a:90:b3:ca:68:b6:f1:4e:4d:4b:34:df:f9:
51:40:82:2d:b8:89:9f:da:d1:cd:79:f3:2b:f0:d2:
72:b1:93:19:b6:ac:c6:55:a9:8b:c0:1a:4a:c5:33:
31:a3:12:86:2c:ac:e5:32:61:ec:68:ea:6f:0d:15:
3a:1a:d6:d5:4a:8b:7f:c9:1d:b5:16:89:88:d6:51:
25:b0:97:35:e9:24:1a:87:0b:fa:4a:06:83:c0:4e:
d4:c5:89:4b:e7:71:d5:4c:e3:ad:48:4b:f5:67:eb:
18:ea:90:45:37:4c:59:db:ba:b1:bc:09:fa:cc:6b:
86:34:b7:45:cb:7d:09:3b:8a:c9:6a:33:85:db:c2:
d2:fb:14:94:fe:67:03:98:29:97:9e:b2:fe:86:85:
44:1f:e9:d3:ee:aa:e3:60:5e:6f:06:8b:7d:d4:72:
c8:51:c3:4d:bb:a7:50:ec:94:1c:62:f3:c5:68:d5:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D5:79:63:24:25:BD:5E:B7:F9:18:87:18:91:B0:B3:81:01:04:BA
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:36:53:f7:8f:6b:b1:ba:d4:c3:0d:c1:ac:7e:fe:ab:07:01:
3f:71:e5:d0:a4:a7:1b:6b:12:a7:bb:1c:66:3a:20:49:a5:58:
e3:3b:31:22:4b:da:e9:f5:30:ef:ed:65:d2:0d:a6:44:d1:34:
0d:d0:f2:9b:d8:88:c5:b9:1d:f1:18:88:2f:8b:e2:28:5a:05:
68:af:8c:95:cb:9f:ab:a9:5f:39:88:b9:e1:71:47:0d:a3:1a:
57:85:96:4b:97:59:34:c0:96:aa:33:50:1c:04:99:46:41:b2:
31:7a:fe:cb:69:ad:20:a1:4d:13:e1:8e:28:dd:d5:7b:1b:6e:
c8:b8:54:fd:ff:78:0e:90:3e:0f:cd:30:03:5d:3c:cf:fd:85:
ad:c8:ae:51:b6:73:67:e5:d8:0c:b3:86:d2:9c:ad:76:23:b0:
7c:b5:8a:55:5e:a5:c1:10:14:c1:e8:88:81:67:44:d1:de:b8:
a1:5e:dd:00:6b:97:05:a9:04:b1:c5:93:5e:e2:bf:48:3c:8a:
2c:e5:f7:9b:ff:43:7e:04:a6:a5:f1:bf:e8:ca:bf:8d:db:ec:
a8:48:79:77:b8:f5:1d:bb:fc:ee:e7:cc:fb:8e:fd:ad:4b:d2:
44:ba:ef:fe:0a:ce:33:f6:da:53:44:1a:7d:df:16:28:f1:79:
27:0c:d8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:50 2025 by rpki-client