
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: 4lohFWpeiduCXvtJK91LvTIt1pJzW34Yuv4Z4OSEC2w=
Subject key identifier: 37:46:EA:51:21:1A:76:E9:42:04:3F:D9:6D:2F:4F:5D:A8:AC:3E:FB
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 019933805CD43303C7FA793F12EE4199E865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 08CD
Signing time: Wed 10 Sep 2025 12:01:14 +0000
Manifest this update: Wed 10 Sep 2025 12:01:14 +0000
Manifest next update: Thu 11 Sep 2025 12:01:14 +0000
Files and hashes: 1: 9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa (hash: mLUd+UrxmldwwslKwjDeIf5bagEinj/YnRBNdn1A2Vk=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: mpjHtJexoYztxW/vIgRuXivUC/B5P2W6bQeCtMiu1Pg=)
3: dBTi9V6Lj09iolupOZhzala-GHE.roa (hash: XgE5C6MotJsfB/9tY52qQR/CvntbYT/9aocAmt0KwNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:5c:d4:33:03:c7:fa:79:3f:12:ee:41:99:e8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Sep 10 12:01:14 2025 GMT
Not After : Sep 11 12:01:14 2025 GMT
Subject: CN=3746ea51211a76e942043fd96d2f4f5da8ac3efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:83:df:20:ff:a1:67:99:2e:8a:ae:aa:97:
52:0e:7d:85:fa:07:30:37:e8:a0:db:9b:4a:8a:75:
30:99:39:fa:0c:35:53:18:2e:28:9a:18:96:c5:15:
60:24:0c:15:67:9d:4c:9f:3e:b6:22:13:cb:83:3f:
d8:0a:1b:c6:9d:44:4d:a8:4a:b2:f0:94:25:49:48:
27:f8:08:5b:c1:60:af:f6:75:d8:08:0d:cd:00:36:
27:e3:91:fb:d2:e9:88:3e:8c:7a:0a:d3:96:c2:bb:
63:89:5f:ac:33:3c:52:0f:d0:8d:76:ab:f1:35:c3:
ec:10:5c:a9:9c:75:ca:d1:a7:51:27:c8:f6:0b:d6:
fc:42:96:94:1e:35:74:1e:7f:4e:e9:1b:f6:8a:51:
f4:1f:1c:c6:3d:bb:62:85:6a:ae:40:0f:24:f9:02:
46:83:80:1b:af:44:11:f4:55:d1:69:51:b3:73:ba:
3d:22:de:34:74:8f:70:f4:f8:b5:6b:7a:8f:91:8b:
92:65:88:4d:3d:81:c6:88:a4:ef:a5:d4:65:a2:1c:
79:bb:8c:76:13:5f:d0:16:27:d4:50:53:8f:0b:42:
f8:75:4f:73:37:65:64:b3:74:d6:6a:bf:aa:ad:9c:
e2:e6:7d:6a:ef:ab:d5:19:aa:7c:9b:f3:15:d6:d5:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:46:EA:51:21:1A:76:E9:42:04:3F:D9:6D:2F:4F:5D:A8:AC:3E:FB
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:28:c5:27:7a:0a:a0:08:b4:2c:bd:71:e4:c1:c9:6e:11:c6:
f1:8f:43:9a:b9:9a:b1:0f:21:69:d2:1c:a2:c6:ba:62:54:9f:
55:41:24:20:c1:af:4f:cc:0b:4e:cf:26:ef:1c:e8:c0:b2:24:
5c:30:23:85:4a:b5:f0:97:be:fe:bb:bf:a2:30:ac:87:88:08:
6e:7f:09:d1:38:48:b1:79:a6:9d:6f:d7:25:e5:3c:79:35:a1:
f0:63:bd:0c:7b:3d:f3:3b:44:2f:7e:db:26:5c:27:63:4c:51:
09:18:ee:55:e7:29:6f:08:7d:30:75:c4:b7:4b:43:76:21:0e:
3b:c4:21:71:e4:e8:49:b8:59:30:19:ff:7f:7e:f3:75:70:9d:
44:9a:49:85:f2:f1:2e:84:f1:95:4a:45:0e:6e:75:90:bb:51:
a5:91:d6:36:17:fa:52:c2:6b:89:4a:e3:28:c4:29:f9:8e:51:
da:dd:87:3e:e5:3b:ba:01:e4:44:35:f8:e5:50:b4:a9:0c:43:
14:25:12:89:3e:5c:54:73:00:7e:40:25:4c:3c:d5:02:fe:02:
08:09:f5:bb:64:2c:63:ee:22:60:0a:ec:70:17:72:00:7b:d0:
f2:85:a5:2e:92:90:62:6f:bb:f3:81:bd:4a:00:36:3d:43:74:
5d:c1:d7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:39:14 2025 by rpki-client