Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0c766e-f332-423c-8c86-863147e464b1/1/sWwi3QEuJpMGmGT6lXYyXDc_Fko.mft
File: sWwi3QEuJpMGmGT6lXYyXDc_Fko.mft (raw, json)
Hash identifier: X0Y1naJGmoifwsSikb32oHb5t7TYoFdHE1fbUab6PpI=
Subject key identifier: 40:86:83:F6:0F:D9:CE:F9:28:4C:E4:D0:88:E9:57:90:F4:3C:CC:74
Authority key identifier: B1:6C:22:DD:01:2E:26:93:06:98:64:FA:95:76:32:5C:37:3F:16:4A
Certificate issuer: /CN=b16c22dd012e2693069864fa9576325c373f164a
Certificate serial: 019A7112B22F2EA3CC674F29CBEB69762D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWwi3QEuJpMGmGT6lXYyXDc_Fko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0c766e-f332-423c-8c86-863147e464b1/1/sWwi3QEuJpMGmGT6lXYyXDc_Fko.mft
Manifest number: A9
Signing time: Tue 11 Nov 2025 04:00:41 +0000
Manifest this update: Tue 11 Nov 2025 04:00:41 +0000
Manifest next update: Wed 12 Nov 2025 04:00:41 +0000
Files and hashes: 1: 3MlUdopr6E83tKgyGGmx8TV_EbE.roa (hash: LWe3y+g7hOYE1BmFocJEJPvXXI4WmcCEwh4a7CwwJOA=)
2: KI70QEEjKifA49lP9hNEf_ezkqw.roa (hash: l/PfIL49zHex1c51vTWEEhy6b8NXS0jEYZNGksCQb38=)
3: sWwi3QEuJpMGmGT6lXYyXDc_Fko.crl (hash: 5tIXEAgkQC4f9aN+vjysa8hp5V3zQ/QNq/gPFhIRt5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0c766e-f332-423c-8c86-863147e464b1/1/sWwi3QEuJpMGmGT6lXYyXDc_Fko.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0c766e-f332-423c-8c86-863147e464b1/1/sWwi3QEuJpMGmGT6lXYyXDc_Fko.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWwi3QEuJpMGmGT6lXYyXDc_Fko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b2:2f:2e:a3:cc:67:4f:29:cb:eb:69:76:2d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16c22dd012e2693069864fa9576325c373f164a
Validity
Not Before: Nov 11 04:00:41 2025 GMT
Not After : Nov 12 04:00:41 2025 GMT
Subject: CN=408683f60fd9cef9284ce4d088e95790f43ccc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:d0:59:6f:3c:f7:6e:3f:17:64:48:53:01:
a7:be:e2:e3:83:cd:bb:74:d1:ff:55:05:68:63:8d:
86:3c:71:57:1c:00:d7:63:80:06:4e:d4:e1:12:c1:
9b:97:e0:01:96:da:aa:f7:7d:5f:9c:01:e2:e7:e1:
c2:3f:63:ff:5b:b9:f9:79:e4:82:61:c0:0f:78:7d:
a5:ad:59:63:26:a0:5c:83:c7:c0:83:cd:78:30:e8:
b6:0d:4f:e7:ee:e5:68:71:41:02:c8:09:38:a4:e0:
f3:08:8f:92:69:a2:5c:4e:58:c0:ab:93:a8:ee:45:
a4:54:e8:b2:3a:4e:70:7c:94:40:da:df:1c:e9:72:
7e:0c:f3:b8:3a:55:17:c4:2f:d1:d0:a6:e8:78:96:
50:7b:15:73:43:61:e2:4c:a6:f8:5b:55:d4:94:5e:
ce:90:8e:7e:27:9b:ae:cb:fa:26:7b:b9:32:ed:5c:
4d:36:0d:82:30:54:33:ba:7f:38:a9:66:a6:6a:9f:
ac:40:e6:5c:02:c9:6a:a5:92:45:95:1c:bb:2e:4e:
fe:7a:70:9d:62:b8:19:4a:5b:90:a2:37:41:cc:84:
91:52:11:1c:25:2c:ac:5e:7d:e9:ed:b7:d1:67:ff:
70:3b:2b:dc:61:1c:e0:e1:b9:f6:17:4f:29:d6:09:
f4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:86:83:F6:0F:D9:CE:F9:28:4C:E4:D0:88:E9:57:90:F4:3C:CC:74
X509v3 Authority Key Identifier:
keyid:B1:6C:22:DD:01:2E:26:93:06:98:64:FA:95:76:32:5C:37:3F:16:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWwi3QEuJpMGmGT6lXYyXDc_Fko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0c766e-f332-423c-8c86-863147e464b1/1/sWwi3QEuJpMGmGT6lXYyXDc_Fko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0c766e-f332-423c-8c86-863147e464b1/1/sWwi3QEuJpMGmGT6lXYyXDc_Fko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a3:97:4a:a9:b3:cb:51:3e:f5:59:80:7a:2d:99:7d:07:ce:
40:eb:87:54:6d:a5:aa:89:d9:6c:41:41:00:94:69:c8:25:c3:
4a:22:4d:b0:0e:3d:8b:2c:10:e9:f1:34:13:49:bb:53:34:78:
6a:79:ed:4d:1d:d3:80:18:bf:17:89:d4:55:5c:46:97:d6:b2:
ed:21:b6:a3:f4:d4:55:7e:e2:57:f5:6a:8d:07:24:cd:e6:e4:
0c:fb:fc:5a:46:d6:e2:1a:85:f8:64:db:e0:84:22:d4:66:af:
50:46:79:f9:34:83:0d:28:e8:8a:33:e4:5b:fe:b5:32:ab:4c:
84:25:83:90:5c:aa:2b:28:42:e7:ce:d7:1b:ff:f1:43:dc:a2:
31:ec:42:42:f7:0a:08:b4:c1:92:4e:a2:56:f3:6f:f9:26:3e:
62:b5:72:86:ec:2b:a7:17:13:d6:4c:f6:ad:bc:b3:8d:38:f0:
e8:e2:10:d6:e7:49:a5:d7:51:3c:08:00:62:1d:f5:21:ee:fb:
42:33:f3:cf:cc:c0:d0:4f:f5:4c:b1:82:5f:1e:4f:a7:72:43:
96:f4:41:f6:77:a8:f7:f1:8b:20:2e:01:65:09:7a:09:cc:89:
a6:8d:fc:d1:c3:c2:26:fb:fd:12:a9:5c:3d:bc:92:d4:1b:9c:
e1:12:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:25 2025 by rpki-client