Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: xB+QHzqWR1r1/CIz5smu24TJ78HuP6H3WdNVqHJbHjk=
Subject key identifier: 40:6B:86:E4:4C:CA:4F:1F:A1:07:62:69:4F:D7:C0:B2:14:9F:D6:AF
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 019A2108E3F1D4B951D80D0B1B0ACFA993AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0A5E
Signing time: Sun 26 Oct 2025 15:00:21 +0000
Manifest this update: Sun 26 Oct 2025 15:00:21 +0000
Manifest next update: Mon 27 Oct 2025 15:00:21 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: mTzPy7ss2gNzL8647U0RvaNa310k4/yK2KnKmt3v+Kk=)
2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:e3:f1:d4:b9:51:d8:0d:0b:1b:0a:cf:a9:93:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Oct 26 15:00:21 2025 GMT
Not After : Oct 27 15:00:21 2025 GMT
Subject: CN=406b86e44cca4f1fa10762694fd7c0b2149fd6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:27:38:c7:88:b1:c0:a9:ca:3b:b3:ee:ac:
85:15:a9:60:fb:19:42:64:c8:8d:e3:62:8e:39:00:
84:53:eb:44:b4:e0:f8:31:72:33:60:6a:ff:24:3b:
cc:77:69:1f:bb:60:f2:25:73:08:c2:d8:92:df:ed:
ea:e5:da:7c:8c:31:ef:0f:17:98:f6:8c:3e:0d:95:
36:37:82:71:61:0c:ce:4a:d3:94:26:58:34:40:10:
c0:ba:d3:99:0d:96:1b:86:b1:29:34:9c:90:be:5e:
35:2f:93:12:a2:13:1b:5e:dd:c3:ca:2e:3a:45:8f:
58:ad:bf:f1:23:ec:21:d0:8e:98:5e:90:1b:98:d1:
3c:59:64:50:00:be:1e:3c:0b:e1:48:04:8a:67:d7:
1a:40:61:33:cb:48:cb:3f:a5:ad:61:5b:02:73:be:
d6:9c:79:55:7e:ac:21:0f:3d:48:43:0b:cc:51:60:
c0:cb:61:3d:97:1e:5d:8a:5f:3f:f1:bc:a9:2a:29:
82:9f:4b:72:83:3e:ee:0c:fb:09:fa:9f:41:09:1e:
66:05:00:60:24:dc:ff:1c:eb:ec:0d:ad:f4:5e:75:
de:2d:78:6d:44:a4:b9:14:ae:58:df:29:d8:82:49:
3f:93:08:25:cf:a3:21:48:80:9d:4f:92:d9:30:77:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6B:86:E4:4C:CA:4F:1F:A1:07:62:69:4F:D7:C0:B2:14:9F:D6:AF
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:39:95:5e:1a:64:dd:d7:aa:1d:01:1f:09:34:67:b3:5a:2c:
d4:7d:16:3e:80:b9:4d:08:4d:ea:46:48:a8:90:d4:e1:84:a4:
e5:34:8d:bc:5e:dc:9d:27:36:5f:b0:d5:4e:3c:71:9d:a4:ed:
50:db:cb:5b:4a:16:fc:16:bb:eb:24:8b:3b:c8:15:34:d1:3a:
87:08:5c:09:5a:2b:eb:15:de:0e:a4:5a:26:c7:55:be:01:6c:
6a:3d:c2:fa:91:88:13:90:3a:b4:86:e8:ff:4e:f5:41:6f:a7:
50:ac:b9:15:68:e9:2b:d2:bf:45:8f:ae:61:25:9a:8e:2f:76:
cf:d6:5d:64:7c:49:ba:89:ff:6b:b0:c4:d7:e6:e4:e6:a3:10:
96:5d:95:9d:ca:26:c0:90:c2:ef:24:73:9d:bf:83:0b:bb:c2:
7e:45:b9:b5:e1:88:c8:92:3c:2a:95:0c:d7:16:2e:88:ad:42:
ae:b7:e9:52:04:d5:62:44:33:2c:f1:b6:80:ae:64:dd:9a:fb:
d9:70:da:86:85:cb:69:67:7c:86:97:80:6f:8b:36:77:20:64:
28:70:d2:af:93:b5:cc:88:ff:d5:1f:b0:cb:73:94:e9:b7:fe:
c8:66:3b:18:da:8b:4a:a1:f5:98:ae:b4:09:ba:2d:42:ce:e7:
bc:9e:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:22:35 2025 by rpki-client