Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: vaMR+1Hi+WrFS/7mRMubTRDNdeD4bd9budHrRnPTg8U=
Subject key identifier: C7:8E:E2:00:B5:F1:56:2E:C7:78:96:44:3F:B2:F6:BB:DD:A6:CE:75
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019A7113695B58A72F73CE04DA593BA1DA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 0F92
Signing time: Tue 11 Nov 2025 04:01:28 +0000
Manifest this update: Tue 11 Nov 2025 04:01:28 +0000
Manifest next update: Wed 12 Nov 2025 04:01:28 +0000
Files and hashes: 1: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=)
2: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: PXLf6gzwfQOTBBWzz8wwyrNPW6sRDSx/10Y9nK/v7lI=)
3: zxF5fdMEgwZjxjRCkFvtSM6cNiE.roa (hash: /aNfoxAWWXZ24dSnA+fFMNRvHS3pHzntsjJo5PzS3sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:69:5b:58:a7:2f:73:ce:04:da:59:3b:a1:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Nov 11 04:01:28 2025 GMT
Not After : Nov 12 04:01:28 2025 GMT
Subject: CN=c78ee200b5f1562ec77896443fb2f6bbdda6ce75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:95:02:4d:60:21:e2:3e:af:64:31:64:49:5e:
50:3f:99:24:48:c8:b5:5c:27:6d:a7:26:ea:17:fe:
2d:59:7d:c8:d6:87:5f:07:50:f8:64:f6:f3:be:8f:
56:93:1e:18:63:3d:63:f4:93:d6:0a:b1:f5:b7:96:
db:90:83:c1:e5:20:ce:71:50:71:ff:71:b3:8f:36:
82:05:8a:4b:52:e2:3f:62:6d:d8:d1:7f:11:cc:60:
e7:4a:b9:3b:6a:0f:7c:fb:eb:52:06:b2:77:96:b6:
f1:56:f1:af:79:82:53:aa:fb:00:19:9a:84:bc:aa:
c7:fc:59:d7:35:24:34:b5:85:a1:64:54:cf:79:4f:
d1:25:74:00:a1:85:f5:55:d0:0c:53:16:90:52:72:
7c:7d:f4:0e:b5:f6:2b:e1:7b:cc:4c:ac:4c:ef:6d:
05:18:80:ae:7c:44:3e:35:3c:9f:cb:2c:5d:cd:f8:
b5:e8:a7:51:60:60:27:b4:82:c4:30:79:7b:38:e1:
97:8c:69:12:e5:c4:8a:3f:ab:d2:6f:28:f7:d9:10:
fe:eb:70:a0:29:ab:91:5c:a3:7a:57:db:ca:00:88:
3e:96:fb:d6:ba:40:fb:94:ed:92:b5:8a:77:8d:d6:
5a:10:53:6c:a2:ee:59:9e:2a:c7:7c:e0:b5:c5:b6:
4b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8E:E2:00:B5:F1:56:2E:C7:78:96:44:3F:B2:F6:BB:DD:A6:CE:75
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:bd:68:6b:56:ee:77:c6:ed:ab:de:42:f8:a9:c6:c2:bc:5f:
6d:07:04:ec:b3:f8:8b:0a:a7:9c:77:9a:1f:b4:07:75:1f:e5:
33:19:b3:08:c1:62:6c:b3:5e:9d:63:2d:9b:7a:5f:17:fc:22:
81:e6:21:1e:68:b3:7d:3c:18:36:58:30:0f:2c:f5:49:59:0c:
f5:bb:cd:8f:4c:08:7b:f1:9d:42:95:2c:19:a6:fc:c8:4a:a0:
94:58:ae:07:af:89:d9:09:34:83:32:3a:4e:58:28:46:f2:3d:
4f:cf:80:7c:36:94:d1:fc:4f:a5:95:58:25:ab:ff:ec:27:e7:
aa:7d:93:5d:c4:78:b3:2e:43:c2:b5:15:6d:88:52:44:06:61:
e9:3c:f9:fc:38:75:ae:2f:fb:a3:00:0b:fd:2a:1e:85:ba:10:
f3:2a:e0:7e:84:e9:91:07:8d:be:88:38:4d:69:00:d7:25:ba:
b8:3e:ad:fc:69:b6:0a:e1:9c:a7:48:33:35:d8:9a:8f:a0:24:
fb:1f:3c:0e:60:10:c1:69:5c:10:03:c3:67:86:4f:a4:ca:e5:
4b:f0:55:81:7e:e3:f4:e8:14:92:87:e8:91:d4:02:28:66:be:
0e:a5:48:49:71:ef:c1:b7:7a:fa:51:93:75:3a:47:0d:3d:44:
0c:c1:88:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:18 2025 by rpki-client