Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: IuRK9GJJQCkRmNlhKd26hXcnMsMp8hUJbQDIdnpJCOs=
Subject key identifier: 29:D4:81:7B:99:F3:81:8C:4E:B5:29:85:3E:AD:A6:F4:DF:16:7B:4D
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 019A70A4C418F7F9BBB38E126EDE14332B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 02:00:37 +0000
Manifest this update: Tue 11 Nov 2025 02:00:37 +0000
Manifest next update: Wed 12 Nov 2025 02:00:37 +0000
Files and hashes: 1: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: As1TU2e7Y86UxTEyzLnPsxkXPxqCx7QA/m/zNwp/yR4=)
2: HjzoahI6pyoFvP1ahRTakCdHZL4.roa (hash: gQHNv9As0iCn+ZAtcLVQ3zoAJ3Ne/2k5eR6SdkKMktQ=)
3: bH_KNyzPL_yx3OPEWTRFLsAi8nE.roa (hash: 72jCdlITtcwR18704/NTzfyeqmvwBsSw2iB9YQtGN+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:c4:18:f7:f9:bb:b3:8e:12:6e:de:14:33:2b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Nov 11 02:00:37 2025 GMT
Not After : Nov 12 02:00:37 2025 GMT
Subject: CN=29d4817b99f3818c4eb529853eada6f4df167b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:a5:02:d1:34:c2:e3:ea:d6:7e:b6:0a:d5:
99:72:d0:63:cb:e0:8e:48:c3:55:79:f4:8e:41:17:
84:a8:46:6a:b8:7e:5a:8d:f4:6a:18:0c:0a:61:e3:
be:ce:66:9a:d9:9a:86:13:2b:7f:dc:4c:d0:ad:59:
1b:17:a1:ae:eb:4f:ab:62:f2:1f:59:15:51:4f:6b:
cf:26:b5:47:d2:50:d1:04:2f:13:a4:1c:7f:86:cf:
63:2c:5c:47:38:bf:9f:94:dd:be:0d:56:45:10:2c:
5c:10:a5:92:61:b8:55:7f:5f:90:72:3b:a9:66:98:
45:07:4d:6f:81:48:29:48:1d:35:26:21:5c:c5:62:
c0:81:91:31:fb:ee:91:47:2f:3d:37:d6:94:50:d7:
d5:d1:06:71:42:b4:92:5a:d4:82:67:0f:d3:6c:a6:
c6:29:ed:e8:27:82:de:86:24:1e:e2:80:be:00:ca:
e6:36:9c:3b:29:d5:cd:e2:af:29:f5:6e:0a:5f:23:
ae:0e:7b:45:73:77:42:e4:ec:aa:61:20:67:88:4e:
06:89:59:36:73:90:ba:fd:32:dc:fb:0e:29:f6:03:
21:c1:e7:da:fa:82:49:9b:e7:2d:f9:c3:c9:cc:54:
de:d0:d7:c5:5c:23:20:97:16:b9:df:4d:76:ee:61:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D4:81:7B:99:F3:81:8C:4E:B5:29:85:3E:AD:A6:F4:DF:16:7B:4D
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:69:26:1d:1d:35:6b:2c:a9:64:ea:cd:d4:35:e0:75:cc:8b:
77:11:df:2c:70:c2:45:5c:02:b4:c8:fc:c6:66:98:fe:82:85:
7f:d2:35:57:b2:d0:c5:8c:e2:53:0c:3c:57:4d:0f:f7:9c:33:
df:95:3c:0c:f4:64:16:78:e1:26:32:00:a3:cb:d5:e5:51:d9:
ff:70:03:d5:af:f9:b8:71:76:e1:ca:b3:b3:f1:1f:1c:5f:31:
1f:07:52:78:95:f8:33:64:fa:0e:2f:cb:bc:c7:15:43:cf:3e:
ff:32:e2:af:1e:84:f6:17:37:81:6c:08:19:ef:6d:f8:af:88:
21:89:ab:21:6a:87:11:5c:33:c8:07:26:9b:df:f5:58:ea:e6:
9d:d6:d9:fe:05:18:4b:48:1a:6e:3b:a8:8d:a0:ae:a5:f8:7d:
23:6a:4f:fb:d9:10:61:0f:e1:0a:7f:21:6d:f5:f5:bb:f3:5d:
f6:74:66:8c:6f:fc:cb:e7:39:9d:2e:32:c2:cf:bc:19:2b:68:
cf:c8:78:e4:49:84:02:37:8a:39:f6:87:24:aa:f2:95:01:d8:
f8:a8:6e:fd:57:92:89:bb:21:05:36:ac:2d:82:a9:fa:10:14:
f9:ba:46:7f:74:33:26:1a:83:30:37:c7:5a:c7:fd:ae:1a:2d:
a6:bb:b1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:31 2025 by rpki-client