Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: Oi33MSE1QOSdU5gdTZoeGyTIIbVYXT63dDCyVwyXLNk=
Subject key identifier: 40:3B:DF:B8:81:34:6D:E6:E1:F8:F5:6F:2F:82:58:67:3E:D5:3B:FE
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 019A4E18F24DF8729AAD2BC48C560951C37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0888
Signing time: Tue 04 Nov 2025 09:00:48 +0000
Manifest this update: Tue 04 Nov 2025 09:00:48 +0000
Manifest next update: Wed 05 Nov 2025 09:00:48 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: sd6/qCQAHFiq8QT/WHpK04zO/+oIAOeT5j4KV6irYWU=)
2: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (hash: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=)
3: jPbAHMtRmOOxtXFxyDN1-qXJjZI.roa (hash: rubF/nUj1Sxv+4U25Wjdi1dZZsv1ydBfmLAqRQsECUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f2:4d:f8:72:9a:ad:2b:c4:8c:56:09:51:c3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Nov 4 09:00:48 2025 GMT
Not After : Nov 5 09:00:48 2025 GMT
Subject: CN=403bdfb881346de6e1f8f56f2f8258673ed53bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:52:a8:b8:c0:1d:f5:9a:f0:ad:41:1b:e0:
b6:f0:af:d6:33:e8:d8:8b:8b:6d:8c:9a:88:5a:92:
03:1c:be:9b:85:95:5d:df:47:ea:d8:78:cb:75:aa:
b4:e9:df:7b:09:4a:4d:e0:e9:b7:a2:51:38:55:7b:
88:73:63:53:19:9d:34:b1:c4:14:ae:e3:6d:65:fe:
96:37:5d:57:69:ed:3a:17:30:9d:f2:af:61:92:4d:
5c:6d:b8:48:58:6f:ef:03:2e:b9:85:a7:de:8f:27:
b3:a8:9f:41:7b:37:5c:d8:9e:ac:be:e1:b5:88:ff:
8d:8e:8e:58:57:4e:f9:3e:70:50:61:68:6a:73:d2:
c4:46:86:ff:a7:f2:a2:7c:a5:ce:5e:20:16:84:e3:
49:d5:25:70:45:92:da:4a:5a:29:c1:75:b1:f2:a5:
cd:5a:46:c3:53:82:d6:c4:c0:59:0d:ae:a9:9e:0a:
d5:34:89:35:78:4e:a3:a2:1c:e7:2a:07:e2:01:ab:
9a:e1:ee:48:4c:f6:f8:11:fd:bf:64:53:20:f6:7d:
c3:91:3c:27:ff:5f:6e:e5:ab:de:e3:3c:39:69:7c:
f7:56:06:65:bd:7d:65:e5:7c:aa:eb:74:0d:27:c0:
aa:b4:60:eb:19:22:65:59:67:c5:3d:f9:0a:32:70:
20:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3B:DF:B8:81:34:6D:E6:E1:F8:F5:6F:2F:82:58:67:3E:D5:3B:FE
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b9:68:68:27:0b:c9:4d:5e:6b:04:9a:4c:08:31:28:fd:f8:
fe:ca:ac:95:f7:91:1a:f3:39:f6:80:a8:f6:8b:a5:aa:8c:68:
4b:19:2e:04:e1:1d:6d:63:c9:31:4a:7c:d5:2d:18:59:65:ba:
81:d9:2f:ad:44:e0:09:3e:8f:c7:f1:da:ff:d2:b6:cd:18:b4:
dd:bc:24:4f:fc:13:92:c9:67:dd:7c:9f:26:f4:a8:e0:6d:6a:
34:24:38:f5:df:f3:1b:45:a5:e1:f2:8b:c3:b2:31:06:68:ac:
3a:41:27:96:7e:89:6e:d0:ae:d0:4e:7a:a5:8b:af:c0:6a:39:
e4:db:c4:14:cd:54:3e:6f:03:15:92:b6:5a:2b:3b:38:a3:5d:
f9:54:7f:3f:bb:dd:5f:62:29:dd:f9:80:40:36:b7:bb:72:7d:
ad:7d:a6:fe:eb:98:28:4f:c0:9c:ae:7f:63:fb:b4:42:8a:6e:
c3:0d:f8:af:64:33:3b:e7:9b:a7:82:40:45:21:bb:65:8a:16:
04:29:ed:9f:de:6a:62:1c:82:7c:d9:73:1a:6c:83:5e:a9:99:
94:5c:2c:00:94:0a:d1:3b:63:60:01:72:9c:04:d0:81:b5:5e:
28:5e:8d:55:d0:8c:5e:4d:e2:b8:db:4c:8a:b8:01:f7:7b:1b:
d9:1d:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:14 2025 by rpki-client