Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json)
Hash identifier: 4a43AKOQhVp+pSYzEN7LA3smyIKZ0oOsQ7nJ4/0P0bQ=
Subject key identifier: FF:EB:0F:DF:59:EB:5D:57:84:88:3A:C9:85:BD:2D:42:36:83:CB:A2
Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Certificate serial: 019A7149A3478D253071F64BC634E2E5512B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
Manifest number: B9
Signing time: Tue 11 Nov 2025 05:00:42 +0000
Manifest this update: Tue 11 Nov 2025 05:00:42 +0000
Manifest next update: Wed 12 Nov 2025 05:00:42 +0000
Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: 0b9W543K3+unUOi9RN1vjvWPYY4EjC/zYiN/JZvdxHA=)
2: FoUBO1CLvHv9IUZgMqlXSTP27UE.roa (hash: UWDESR9+S/CWXTmG2rrRD+fM1FniiIp0n2rFP03so88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a3:47:8d:25:30:71:f6:4b:c6:34:e2:e5:51:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Validity
Not Before: Nov 11 05:00:42 2025 GMT
Not After : Nov 12 05:00:42 2025 GMT
Subject: CN=ffeb0fdf59eb5d5784883ac985bd2d423683cba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:4a:f3:09:66:7b:b3:d8:15:57:3e:25:92:
24:0c:3a:2c:32:02:9b:91:04:0a:12:5b:b7:37:49:
ec:dd:87:a4:f2:de:35:a4:6b:73:05:ab:ce:ab:0a:
ca:82:c3:44:c4:ac:b9:b3:4d:4e:22:df:95:06:52:
37:e4:ad:6c:0a:76:ae:a8:51:b5:88:97:0e:d8:1b:
28:0e:7e:8c:75:07:16:67:64:3c:c6:67:c6:b9:53:
1a:ca:db:2e:2c:fd:31:9e:30:11:f2:26:a3:e7:27:
2a:72:2a:24:3c:68:78:f8:09:f3:01:d1:d8:6c:66:
2e:fe:38:77:de:3e:5c:52:69:a0:e9:be:4e:a3:fd:
ee:50:78:d1:47:39:c8:27:68:49:5c:e8:be:d8:3e:
d8:44:a9:51:a3:ad:7e:dc:f0:03:cd:7b:81:ad:6f:
e8:cf:8a:5b:75:6f:d1:70:5e:09:34:2f:af:d6:7a:
20:72:e9:f5:ea:b6:5c:ff:b2:c8:c9:78:18:cd:6e:
e6:13:5a:0d:70:96:19:ac:14:7e:57:93:3a:a6:3c:
80:18:3f:e9:9b:f9:40:60:c0:cc:0c:b2:7b:68:64:
91:9e:49:a8:03:10:2c:2e:ec:eb:15:25:cc:3e:3d:
ff:34:88:51:5b:d7:fe:04:bf:9a:c7:0d:b9:2e:e8:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EB:0F:DF:59:EB:5D:57:84:88:3A:C9:85:BD:2D:42:36:83:CB:A2
X509v3 Authority Key Identifier:
keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:08:72:d1:e0:40:36:cf:20:79:23:3e:21:98:a2:49:e4:da:
f2:a0:29:16:8e:ec:c9:99:31:8f:c0:9f:12:cb:ca:79:59:1e:
0d:87:3b:cd:43:7a:8a:d0:0e:6b:2f:dc:aa:b1:49:00:e7:b3:
e2:06:93:3f:a7:35:1c:b5:d6:1a:9a:52:de:db:40:10:86:fe:
d5:d3:a7:27:51:67:92:45:ab:7f:f0:30:ff:e2:33:f4:0e:26:
99:85:e6:b7:e5:4a:de:73:58:8b:ca:a5:84:31:fc:77:69:eb:
21:e3:5b:37:4d:3b:bf:30:1e:77:b0:52:8a:a4:89:8b:49:31:
e5:e3:7a:00:d1:33:b3:2e:a9:ff:92:83:fe:d4:01:39:78:c5:
e6:a0:00:25:c2:82:6c:7a:28:bb:9f:d3:cc:3e:f0:0f:c5:34:
55:cc:aa:ce:7b:d1:30:b6:03:4f:c7:0f:c9:b7:75:92:98:e1:
d7:0c:a5:60:8c:35:06:14:04:1c:bd:d0:27:e2:31:8b:ae:b9:
12:40:93:89:16:62:99:b6:7c:46:fa:b6:a3:a2:ff:57:d5:23:
9f:98:5c:96:6a:71:d4:c0:93:24:db:b1:c7:02:e2:07:cc:ae:
36:78:32:21:00:09:e0:16:8d:5c:58:bb:08:64:8f:83:4a:6e:
69:f3:3a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:33 2025 by rpki-client