Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
File: 9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json)
Hash identifier: BHdD1qEKfE4TgLJFub8idcnHjBLTTWw9jCPIC+314io=
Subject key identifier: 02:91:94:A5:15:4B:9B:32:B4:CA:67:C2:92:F4:25:3F:57:51:51:27
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 019A2D442C6BD8D04695DCB4C6BCB66A3476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
Manifest number: 0968
Signing time: Wed 29 Oct 2025 00:00:33 +0000
Manifest this update: Wed 29 Oct 2025 00:00:33 +0000
Manifest next update: Thu 30 Oct 2025 00:00:33 +0000
Files and hashes: 1: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: o/YsV3+04yERKKWtM5V9QPg/65fCjszelfdeTKUc6ww=)
2: AmSXBHT3ckJxS__llRle1pOg_Gk.roa (hash: NGUzsrMFkYpqygz3V48C568ROl1XZloZCRkdB8fnGRs=)
3: RqMgMpdcD54HUHiiovgo2_7eo94.roa (hash: eRUbOt1afNalKvV81WeaR6eAgifd6J7LvG2r3czI9hc=)
4: gzBqFqX-GOiBCBUlEgTsEnHuXvM.roa (hash: d9Lvaxwm2cOVNLGx1WtIoyEgpf/MLPQzSYnTj875od0=)
5: wdTC4RawEs-5fFZUa4R_HIRxO2U.roa (hash: Rtc4DEopTsErPd8Vo2cqobz/fHQCAfYf819UnyzhAlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:44:2c:6b:d8:d0:46:95:dc:b4:c6:bc:b6:6a:34:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Oct 29 00:00:33 2025 GMT
Not After : Oct 30 00:00:33 2025 GMT
Subject: CN=029194a5154b9b32b4ca67c292f4253f57515127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:b1:c5:7c:84:ed:c7:40:ab:e2:22:0b:05:
20:35:d0:bb:df:8c:47:cc:88:09:b1:25:74:a4:f8:
34:e9:ad:1a:0e:65:c8:7d:ff:b8:91:a7:cc:8f:da:
8b:90:c5:69:40:02:0d:bc:d9:40:1f:57:5f:43:a4:
8e:72:20:9d:6a:75:cf:50:1a:48:90:9a:26:26:92:
c8:6c:f0:94:75:0d:03:19:3e:78:0c:69:85:6f:59:
e9:98:f7:37:30:8f:c9:ed:1f:ef:a7:fa:46:25:5e:
96:32:e9:65:59:f8:a7:3d:33:64:f0:69:09:2c:e9:
5d:a6:43:35:ff:a5:ae:96:5e:39:c3:0f:7c:ea:53:
fc:5d:6f:ee:eb:58:2d:37:53:9d:a3:8d:3e:10:9b:
80:3f:ed:ed:39:ec:4a:d2:f3:fc:62:56:38:4c:b0:
2f:c2:c5:7d:58:7d:87:f6:df:8f:c6:3c:74:91:be:
be:7f:09:5e:7d:bc:38:ac:0a:0d:92:4b:9c:c4:74:
34:6d:25:48:c2:87:88:1f:cb:e4:af:d8:45:d0:79:
71:dd:bd:02:62:2c:83:b9:50:58:6d:be:71:5e:fa:
a9:a5:2e:ae:9c:f5:45:be:75:89:7c:69:0a:9e:1f:
d9:2d:4b:98:f0:66:85:d4:5f:94:52:e9:ad:7e:4a:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:91:94:A5:15:4B:9B:32:B4:CA:67:C2:92:F4:25:3F:57:51:51:27
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:66:97:be:db:bd:ea:12:d8:50:89:d5:d0:10:a8:2a:05:c1:
1c:fe:83:79:c4:ea:a0:ca:36:b8:5b:8a:ab:0d:e5:9f:b3:bd:
62:10:8b:21:fc:b2:21:04:4f:0e:b1:f6:39:aa:f0:5f:e2:66:
d2:cb:a9:bf:b4:52:c1:57:27:d0:dc:69:49:5a:1c:86:53:95:
3b:55:2e:d9:89:89:1b:f8:58:22:af:ba:92:5f:b9:84:38:f9:
c0:07:42:f3:ca:88:7c:59:10:08:84:6b:83:d0:01:75:f4:4b:
95:38:08:aa:e0:f7:84:48:b2:bc:0f:5f:0d:2c:87:d4:f8:cd:
5c:51:2a:50:04:b1:60:55:93:e7:97:fa:7b:11:ce:e3:3d:b8:
93:cd:0d:9b:34:a3:f9:bc:38:de:43:db:59:a6:e8:fa:5f:75:
e7:0a:0a:a6:58:da:8f:57:f1:0a:bf:fa:ef:a1:07:18:b1:8d:
ab:5d:41:4f:2f:fa:5a:11:49:7b:16:0f:63:7c:3f:14:53:c5:
74:35:ce:34:41:de:3d:3e:70:af:df:a3:ce:eb:09:89:eb:e6:
80:63:b2:86:d0:c3:f2:f0:af:fc:31:c1:77:c2:4c:dd:92:b7:
8a:5d:40:e0:96:9f:93:19:f8:01:65:43:c0:2b:5f:bd:4c:46:
2b:9b:e9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 03:02:24 2025 by rpki-client