Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
File: V9mTMZ3MkpdpQxiyRus29V_xNw4.mft (raw, json)
Hash identifier: H9re7IUYS4km/syPWZvslRe7Y0yCOEFmMkLFrjXzlFs=
Subject key identifier: 21:75:43:A3:77:4C:38:AF:9E:7A:1E:CF:CF:FE:A7:88:DB:2A:CF:D3
Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
Certificate issuer: /CN=57d993319dcc9297694318b246eb36f55ff1370e
Certificate serial: 019A7149A76CBF591EAE0E225908A55D8FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
Manifest number: 1112
Signing time: Tue 11 Nov 2025 05:00:43 +0000
Manifest this update: Tue 11 Nov 2025 05:00:43 +0000
Manifest next update: Wed 12 Nov 2025 05:00:43 +0000
Files and hashes: 1: V9mTMZ3MkpdpQxiyRus29V_xNw4.crl (hash: maPuKtsq7VTtDZ4fddKTswgdUfdI4CiZGnS1fr/JsuY=)
2: VzLG7lyXvVkTshnFEB9kwkc4pkQ.roa (hash: wIvPT3vGaYWNNjOSrAOSHFQIN6FXu9GPlBXc77PLE/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a7:6c:bf:59:1e:ae:0e:22:59:08:a5:5d:8f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e
Validity
Not Before: Nov 11 05:00:43 2025 GMT
Not After : Nov 12 05:00:43 2025 GMT
Subject: CN=217543a3774c38af9e7a1ecfcffea788db2acfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:f4:63:db:a1:91:ac:26:00:a5:56:f3:05:
e0:3f:38:91:c8:73:8b:3c:5f:89:6e:4a:a0:05:66:
05:d7:6e:b2:bb:04:72:07:90:fa:04:11:95:49:8a:
84:60:00:e8:d2:1d:65:fa:2d:47:d5:df:c0:37:9d:
90:99:24:33:1b:69:16:a0:40:a6:76:ee:52:f9:6a:
f9:dc:d6:9b:48:20:52:24:c3:6e:c5:59:25:14:10:
53:35:1a:ad:5b:5e:85:ec:68:b1:8f:61:da:10:57:
e8:58:b9:ec:ed:92:45:07:84:56:b3:38:a3:8f:d1:
5d:bb:e9:aa:32:c0:7f:c0:35:d7:71:8b:06:6a:67:
dd:90:72:6b:77:86:5f:c8:fd:a4:9d:de:3b:ba:42:
d0:8d:41:98:b3:45:e9:39:b4:8f:b3:7f:4a:2a:e9:
1d:4d:e7:30:ec:63:e8:df:a9:6f:89:e6:24:09:b5:
16:48:1d:08:3c:1d:e3:ea:33:91:7c:08:25:e6:a6:
bf:2d:2b:7a:fd:7b:75:8a:6f:ce:5d:e3:d2:7f:48:
56:9f:7b:ec:b5:17:53:4d:dc:ff:66:aa:cc:20:2f:
b1:ed:9b:73:53:b7:14:4c:c4:3b:5e:41:ee:8a:30:
1c:0c:a6:00:71:4d:d1:17:6d:3a:46:e4:e2:1d:db:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:75:43:A3:77:4C:38:AF:9E:7A:1E:CF:CF:FE:A7:88:DB:2A:CF:D3
X509v3 Authority Key Identifier:
keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ec:95:2c:c1:8e:d0:db:4f:7a:a2:59:e8:6e:8b:5f:af:00:
ba:60:d8:38:fa:de:c6:0c:8f:de:8e:c7:85:23:25:9a:80:2f:
4d:15:c1:9c:90:48:54:0c:d7:30:66:04:d0:53:29:ae:f3:bb:
de:05:61:49:2c:eb:c0:66:41:0f:89:d8:91:52:23:9d:65:de:
54:7f:b4:d5:f7:c3:af:cd:1a:47:c5:5d:5b:17:a7:b7:f9:bf:
f3:6c:9f:1f:84:7b:90:05:02:4b:ec:42:c8:8a:10:21:05:1a:
66:13:b5:70:01:e0:ac:0a:64:f5:97:33:75:bb:2b:b3:1f:f7:
23:64:b8:8f:dc:02:88:df:07:d0:62:d1:33:75:47:cd:7a:4e:
dd:0e:70:5a:06:76:ea:a1:40:5b:c9:2e:16:86:fc:d6:91:d0:
a5:5d:97:fa:26:b8:72:94:1b:e4:75:5d:5b:de:ec:32:3d:04:
ed:8a:56:db:18:a7:3c:b7:a3:91:0a:03:45:2e:35:8b:c3:6a:
fe:10:b8:02:a5:64:b6:fe:2b:4b:80:2a:6c:b5:49:66:0c:57:
71:83:a5:22:e1:c5:d4:75:f0:fe:c1:99:a6:f8:69:b0:aa:26:
bf:7d:78:81:10:f1:48:65:7b:bd:34:6c:68:f0:90:f8:dd:79:
68:6a:dc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:43 2025 by rpki-client