Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: 3u+R4vBbyJDifLwaE1m0kH/kHIJ1FCZqOpfeTBwzzNQ=
Subject key identifier: 46:38:DA:F0:3C:6A:C8:2D:6B:F0:7A:F5:F1:25:2D:32:D5:6A:8C:76
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 019A307C3E0AF8697DA6457143F3BEAC1CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 0950
Signing time: Wed 29 Oct 2025 15:00:39 +0000
Manifest this update: Wed 29 Oct 2025 15:00:39 +0000
Manifest next update: Thu 30 Oct 2025 15:00:39 +0000
Files and hashes: 1: 9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa (hash: mLUd+UrxmldwwslKwjDeIf5bagEinj/YnRBNdn1A2Vk=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: NE6s9IjK394NC8AHPskLSkwhae4uVMSPXfsCnDIN50A=)
3: dBTi9V6Lj09iolupOZhzala-GHE.roa (hash: XgE5C6MotJsfB/9tY52qQR/CvntbYT/9aocAmt0KwNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:7c:3e:0a:f8:69:7d:a6:45:71:43:f3:be:ac:1c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Oct 29 15:00:39 2025 GMT
Not After : Oct 30 15:00:39 2025 GMT
Subject: CN=4638daf03c6ac82d6bf07af5f1252d32d56a8c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:de:d9:29:ed:4e:fb:99:92:e2:25:ab:7d:
b6:83:20:19:03:8a:a0:14:0c:82:b6:7e:b9:4c:69:
ef:fe:2f:42:aa:f6:ee:eb:e8:cf:31:16:76:91:c3:
2f:f6:9e:c3:bf:eb:e5:33:15:34:22:83:be:8f:2a:
9a:04:bf:90:42:47:87:d8:b0:74:5c:f7:c5:1d:ed:
66:35:73:0a:c3:99:7d:36:e0:b6:58:70:0b:6a:06:
1a:27:97:8c:74:45:fc:c4:30:5f:01:68:44:2f:0d:
28:32:73:b5:d8:f5:eb:74:d6:ac:ea:06:1c:d7:0c:
17:1b:d8:94:2c:47:89:5e:b2:1f:d1:86:02:f5:09:
1f:cf:21:32:71:71:b8:b0:69:a4:fe:f5:ed:c3:9b:
f2:bc:fc:7e:c7:f7:10:71:2b:d1:29:91:31:3d:d5:
62:97:89:4e:2b:64:07:14:57:a0:21:e5:c0:ee:1e:
89:b8:b8:e1:5a:ff:bb:59:7c:0a:19:0a:26:29:3f:
3c:a9:51:b7:18:31:6e:78:8a:bb:68:49:a4:8b:11:
b4:39:50:e4:88:38:6b:ec:63:3d:22:6f:1f:50:c5:
dc:f0:7a:3d:27:2e:f1:b1:fa:88:a9:45:62:d4:1a:
8f:6a:ff:88:a8:ac:79:6b:c2:20:e4:dc:ba:15:e1:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:38:DA:F0:3C:6A:C8:2D:6B:F0:7A:F5:F1:25:2D:32:D5:6A:8C:76
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:25:ba:d9:eb:42:1b:36:6a:4c:e4:76:82:2d:6b:da:13:4e:
b7:0b:a6:d1:d5:10:85:49:59:85:47:7d:d6:cf:f1:39:ce:6d:
7a:4e:11:63:86:83:78:9e:93:56:03:a5:05:22:3b:b2:aa:a2:
28:0d:17:21:54:9f:3a:dc:e9:81:a1:43:b1:11:b2:3c:cb:7c:
c0:2e:f7:63:f3:d4:3c:1c:8c:77:8e:7d:fc:60:60:36:fb:59:
51:d5:4c:eb:ed:fb:7b:ca:1e:14:bb:03:88:b5:41:b4:fd:6e:
a9:93:84:04:0a:02:bf:1b:49:c5:5a:9d:21:ed:2e:22:51:18:
ca:15:7b:3d:f3:a7:9c:02:e7:81:80:ef:9e:c4:0d:82:4c:ac:
49:6a:38:2c:65:0b:ce:88:8b:35:99:6f:b8:aa:5e:e9:ee:bb:
8b:53:8e:0e:23:88:52:a4:89:7c:03:c1:28:a1:a8:43:6f:f7:
46:f8:8a:ec:6e:53:08:c4:d3:62:ef:ec:ad:6e:29:46:25:06:
d4:8a:76:62:67:99:86:39:f7:94:51:ef:92:eb:de:fa:32:ef:
60:1e:1f:0b:f2:21:2c:6c:81:32:cb:a6:3a:85:a7:83:e6:97:
b3:ed:bf:f4:0f:a8:d5:15:56:54:3f:21:77:58:08:65:08:e2:
22:e4:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 00:41:07 2025 by rpki-client