Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json)
Hash identifier: AaZKHEqy0FciWDOMXNJyw3OcF9Bgq1kDa1vhsP+T448=
Subject key identifier: 5F:8C:F9:F6:95:B8:AD:9D:2A:52:C8:18:48:ED:AD:AD:C5:C2:B6:7D
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial: 019A71B8FD428CF1117F32571AAE3DB773E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
Manifest number: 140C
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: bITDPMckbzsLVEXYW41IHk19AwSr8EQdALmsHZwQsC8=)
2: v45LP4AF3yoZv3u_cLa6vnH8FvU.roa (hash: wIRAiX/f/YijUEe8NVGZoMtagmreVjKidBvqPjwb7Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fd:42:8c:f1:11:7f:32:57:1a:ae:3d:b7:73:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=5f8cf9f695b8ad9d2a52c81848edadadc5c2b67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:e1:53:b9:d6:4d:68:eb:9b:96:ac:ae:42:
fb:ff:52:4f:7e:ec:d5:0e:c6:a8:15:45:a2:9c:6a:
74:70:44:37:35:88:ec:b1:3c:9f:02:d4:3d:aa:c5:
fd:25:86:44:17:f4:d4:fd:8b:ea:6b:20:cd:d5:c3:
d9:0f:b8:4a:b0:25:8f:ba:46:16:d0:a2:10:f5:03:
c1:2e:70:0f:c1:ed:01:47:98:0b:86:7c:72:34:af:
ea:27:22:c1:ee:2c:fe:60:e1:3f:77:03:ee:7f:a3:
ff:9e:2e:fb:83:41:75:f7:d7:a5:3b:a6:ab:8a:1a:
00:e3:90:6e:98:12:7b:27:32:2f:f8:28:82:af:4f:
a4:ba:c6:d0:49:e8:c2:1c:00:f1:13:7e:a2:91:c9:
36:b3:2d:5e:e4:69:cd:45:08:44:9e:79:61:b8:92:
c9:42:e2:57:66:f9:06:e7:42:13:35:23:30:28:db:
84:a8:4e:43:f0:97:1b:44:6e:e3:74:c0:91:06:43:
90:f2:a9:3c:e0:3c:f6:bd:87:2e:c4:02:1d:12:0a:
3c:20:66:be:69:a1:16:ae:7f:77:2d:b6:da:1d:46:
44:ab:7b:86:ba:5a:c4:33:3b:9b:33:8f:03:66:ff:
59:91:a2:ac:a9:97:bf:80:56:54:80:da:f6:b2:43:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8C:F9:F6:95:B8:AD:9D:2A:52:C8:18:48:ED:AD:AD:C5:C2:B6:7D
X509v3 Authority Key Identifier:
keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:04:66:04:f4:d4:1f:4e:1c:b1:63:a5:da:b6:cb:0b:13:ea:
57:4d:bc:ae:97:f3:17:8e:9f:19:c5:87:0f:a7:0d:e5:77:c6:
6e:0f:06:a4:59:03:89:74:f5:42:73:aa:cb:7f:d3:07:3d:43:
35:76:66:93:4d:64:fb:1a:37:a4:38:62:57:4a:f5:a6:79:87:
94:01:6d:3b:2f:90:3d:c9:e8:4b:6e:aa:88:04:13:1d:dd:c2:
61:c0:8a:e5:10:ed:e9:c9:af:d6:96:77:14:2a:c4:ca:2a:d4:
37:01:85:0e:0b:c3:11:e7:95:3b:c2:ee:70:4f:3b:01:54:c0:
a4:63:7c:d7:4f:37:fa:5b:5d:93:84:5c:2b:30:96:13:30:0b:
6c:1c:60:76:53:a6:01:0d:f0:3f:e3:a4:df:03:19:b2:59:d2:
da:22:5c:32:92:4f:2d:c8:ce:7f:36:d4:c9:1c:4c:dc:94:f8:
4d:66:ec:3e:32:f1:ff:80:05:dd:61:c5:b4:3c:ff:4e:c2:fb:
ee:5c:0a:e2:1d:93:ae:3e:7d:c7:fe:f0:8d:78:17:5e:5c:4f:
17:58:1f:bd:2d:ad:f2:59:15:9a:e3:c4:24:51:b5:9c:8b:2b:
c1:27:c9:0f:64:36:5f:20:ad:57:29:7d:6b:8a:c5:38:20:cf:
09:6f:06:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:03 2025 by rpki-client