Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
File: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft (raw, json)
Hash identifier: 6x1GDxdhLFKsICm41OtPx5Ey7kXMM+2yu4gbX9rEdjE=
Subject key identifier: C1:93:AE:63:EE:9E:0E:B4:1F:1E:8F:98:E0:14:78:EF:76:8E:1F:DD
Authority key identifier: F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
Certificate issuer: /CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Certificate serial: 019A72260ADB3D387C2C049E210DBBA12139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
Manifest number: 02CA
Signing time: Tue 11 Nov 2025 09:01:26 +0000
Manifest this update: Tue 11 Nov 2025 09:01:26 +0000
Manifest next update: Wed 12 Nov 2025 09:01:26 +0000
Files and hashes: 1: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl (hash: KXGQpJCgUULnTJSnTUgavpM2yG86lLqdk56LZrYWf0c=)
2: PPSqCB6yaGdvCZ-tsYoPWq8l0VU.roa (hash: LL8gW3Q1TN3/WR1DSBlXf67Lrrr8/Z0DptcYdMs1Ro4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0a:db:3d:38:7c:2c:04:9e:21:0d:bb:a1:21:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Validity
Not Before: Nov 11 09:01:26 2025 GMT
Not After : Nov 12 09:01:26 2025 GMT
Subject: CN=c193ae63ee9e0eb41f1e8f98e01478ef768e1fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:07:60:65:55:9b:85:c9:1e:2d:4a:f2:6e:
52:84:89:9f:1c:04:b0:ca:f3:bf:44:1d:c7:00:fd:
19:7c:87:aa:4a:ae:44:29:54:29:8e:59:67:c1:88:
99:a6:47:e4:2a:54:af:72:74:ac:86:d0:00:6f:59:
c8:c2:82:60:bb:7f:8d:b9:13:49:66:ca:a6:6b:01:
bf:80:a8:d4:95:40:76:63:9d:9c:37:fe:0b:a9:2b:
d1:2b:ee:8d:1e:8a:4f:65:76:10:7d:cb:f2:80:37:
5d:e1:a1:79:80:60:4b:e3:f2:7b:8f:89:83:81:1a:
bb:b6:2b:d3:30:e1:da:3a:2f:c6:52:d9:55:42:a0:
ff:cd:af:26:80:93:cf:3d:97:54:e8:90:19:05:ba:
c0:0d:0b:08:df:26:3c:90:1e:02:46:ca:74:34:d8:
24:71:f8:c6:81:e8:e0:b8:99:79:76:df:53:fd:56:
b4:0b:1f:39:83:72:fa:e8:c3:0b:54:7c:e2:2d:d6:
4d:ad:c7:83:75:97:6c:b1:6e:8f:d0:c1:ee:2b:04:
9b:43:15:db:0a:7f:7e:0b:4a:6b:05:bf:fc:e1:b9:
cc:97:42:76:5d:3f:01:2c:e4:d8:34:67:1b:23:73:
c0:7a:47:a8:d2:82:2c:26:17:7c:2a:2c:5a:67:a2:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:93:AE:63:EE:9E:0E:B4:1F:1E:8F:98:E0:14:78:EF:76:8E:1F:DD
X509v3 Authority Key Identifier:
keyid:F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5b:5f:13:03:0e:56:b1:e1:b7:5f:62:b6:c3:f9:39:56:6a:
2b:b5:71:50:ec:bf:ba:74:b7:2e:2e:a0:20:e7:e7:70:b0:0c:
6b:22:a0:9c:96:0b:cc:ab:3b:5b:d9:b1:72:2d:3e:4a:7f:e5:
2a:34:10:e7:02:e5:7a:20:d1:81:7c:14:19:9d:23:5d:3b:c6:
b5:6c:36:09:db:78:a1:c9:95:d8:de:ed:ab:52:22:4d:8f:7e:
35:78:69:58:0a:d2:d5:66:94:34:13:0a:a1:ec:80:7f:4a:2f:
52:64:86:0a:f1:48:cb:29:be:d7:ab:df:c2:b2:df:c0:9a:3d:
10:fc:9f:47:af:10:2b:ea:e1:1e:09:2f:89:94:85:e9:e5:01:
bc:90:c9:a0:a7:bb:8a:f2:cf:9b:15:0e:f8:7c:ab:73:07:10:
1f:5d:f3:58:3b:43:8d:9b:ff:56:56:f9:35:fe:7d:13:52:62:
7b:ea:6a:62:05:06:be:cd:1e:a8:b8:9d:99:a2:dd:0d:b2:fa:
df:82:70:c8:59:61:0f:98:b7:2e:b5:68:55:d5:ae:7c:f5:e6:
40:ee:6e:95:d1:69:94:5b:25:d4:69:e3:f3:ba:e1:0d:a3:f0:
38:d7:b9:91:f6:e3:9f:df:cc:a5:f4:3e:90:e2:1d:df:b1:af:
b8:8d:80:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:48 2025 by rpki-client