Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
File: _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json)
Hash identifier: J/MCyS1F6/oKN2Ptz3P3q1+J04Prna9UatzLd5eRPlg=
Subject key identifier: 8A:A3:9A:07:BC:46:B9:51:B4:A8:BB:AB:5F:C9:B2:2E:8A:DA:65:77
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial: 019A71B7E3A25392F3FF0E407C9A601E280C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
Manifest number: 14D4
Signing time: Tue 11 Nov 2025 07:01:07 +0000
Manifest this update: Tue 11 Nov 2025 07:01:07 +0000
Manifest next update: Wed 12 Nov 2025 07:01:07 +0000
Files and hashes: 1: GKGUA1ULBuEBg6UZcKqTCkNmhrM.roa (hash: S+MOcu2hV7fbEQM0gv8ckh0dyXeXiOXULnIXULZ3i+k=)
2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: AriIiFg8P982HFJS+dmdKQeYBqNGyVQIesRwx/pfSwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e3:a2:53:92:f3:ff:0e:40:7c:9a:60:1e:28:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Validity
Not Before: Nov 11 07:01:07 2025 GMT
Not After : Nov 12 07:01:07 2025 GMT
Subject: CN=8aa39a07bc46b951b4a8bbab5fc9b22e8ada6577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:32:34:d6:4d:b6:24:9a:8f:7e:9d:77:0e:
9d:f1:98:15:f1:b1:09:6e:30:07:1c:a2:79:ed:63:
a9:24:8f:09:7d:bb:a3:63:90:c0:74:54:08:30:6f:
60:90:06:e8:4b:da:f6:80:5f:0c:49:20:0e:54:3c:
5a:cc:a7:3e:da:93:6a:71:70:91:80:11:06:d5:af:
be:83:5d:cd:91:cb:0c:2f:95:50:50:43:b3:f4:b0:
cb:a4:4b:2a:e7:7e:40:ce:ab:71:84:aa:54:b9:8f:
49:88:59:1c:90:48:e7:ce:0c:6b:14:db:19:26:dc:
60:dd:51:8c:5e:e5:5c:98:1e:0c:20:3d:67:c6:7c:
49:38:06:fa:2d:ab:b2:9b:9c:94:d5:a2:fd:4c:b6:
cd:52:dd:6b:b3:09:e6:d6:8f:da:ac:1e:03:d7:00:
bc:91:7c:e3:0c:4e:a8:70:ca:c1:1b:51:8e:1a:9e:
b2:46:d6:5d:ac:d2:29:bc:a2:73:92:c7:f2:a3:14:
46:a5:f4:cb:4b:01:2c:e0:28:d1:b8:4d:a5:ef:83:
40:6a:21:60:65:77:9b:86:7e:9b:af:18:a7:c2:a0:
3c:fa:69:4c:64:39:b2:3f:aa:00:5a:6d:b8:40:35:
2b:c2:86:19:6a:15:ef:d8:e1:5d:c9:c4:d2:1c:13:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A3:9A:07:BC:46:B9:51:B4:A8:BB:AB:5F:C9:B2:2E:8A:DA:65:77
X509v3 Authority Key Identifier:
keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:eb:d4:cb:28:a0:25:39:e4:94:01:a5:59:bb:0b:81:81:13:
20:c8:d0:7b:8b:e0:92:10:f9:9c:ae:b9:ea:1e:02:98:b1:d8:
31:62:99:df:9e:bb:99:61:e5:0d:83:8c:a8:03:6a:51:c1:17:
a4:a4:8f:01:bf:51:60:eb:d3:8d:22:18:d7:66:f9:98:ee:90:
33:98:0f:9f:ca:48:16:1b:b8:a0:47:12:14:29:cd:78:76:e6:
62:d3:90:75:48:36:9f:b7:05:c3:df:ee:61:61:a0:2c:ee:ad:
96:d4:15:ad:61:ae:85:aa:3c:c7:b7:61:ed:e4:43:3a:f5:8a:
dd:e8:97:e0:64:bc:51:8f:89:fb:e5:2c:7b:4a:05:03:bd:b4:
7a:b3:ff:5c:4f:b3:8b:52:03:16:f4:c2:d2:3f:79:b4:f7:63:
7c:b9:92:d5:17:da:fd:83:f6:e7:a1:de:eb:36:f3:3f:b6:bb:
13:02:a4:a1:04:1b:04:b5:60:b3:df:ed:6e:75:3d:29:b1:ba:
ba:b8:6f:81:b4:3f:41:ca:1c:31:aa:4d:de:43:5f:68:1c:9b:
cc:e8:f8:bc:74:5f:10:95:d1:9b:c4:c6:c7:5b:8a:8c:24:30:
e4:d0:ab:4f:c4:38:73:04:42:80:2b:fa:f2:d0:bb:d0:e3:6e:
ae:33:67:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:21 2025 by rpki-client