Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: q8VupgOuaT8gq+oEQm8kDlhLzK0b/DPMJvFWwFgaSQE=
Subject key identifier: 19:0F:9D:9C:D0:A7:CA:D9:96:AE:60:A0:81:7F:63:21:9D:93:47:D7
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 019A73380FF4B4B7C8B1E2F49484E14660F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 15F9
Signing time: Tue 11 Nov 2025 14:00:45 +0000
Manifest this update: Tue 11 Nov 2025 14:00:45 +0000
Manifest next update: Wed 12 Nov 2025 14:00:45 +0000
Files and hashes: 1: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (hash: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=)
2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: Sv5oAnb4RZGD8vVJe6+FH5a4IJc5LTXZZ2Y4/YIBft0=)
3: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (hash: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:0f:f4:b4:b7:c8:b1:e2:f4:94:84:e1:46:60:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Nov 11 14:00:45 2025 GMT
Not After : Nov 12 14:00:45 2025 GMT
Subject: CN=190f9d9cd0a7cad996ae60a0817f63219d9347d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:a4:96:90:a6:da:be:53:5f:04:5f:04:30:
56:19:00:83:42:ec:3b:bf:f1:07:ec:24:e4:2e:c8:
34:44:a0:d2:5a:06:92:f5:5d:81:c2:25:c1:b1:f3:
56:57:7f:52:e8:c5:9f:86:da:c0:24:e6:e6:a1:24:
a0:11:21:8b:bf:98:30:9e:e2:32:50:26:4e:b1:19:
d3:95:9a:fe:12:aa:dc:31:d6:7f:ce:e4:3e:29:dd:
f3:5c:b2:df:f7:21:ce:8e:e6:d6:6a:80:e5:2f:45:
01:6e:9f:13:6b:8c:ab:79:e5:66:db:b8:8f:25:8f:
52:25:0e:ee:8e:b1:00:31:44:62:74:48:d6:0c:27:
58:f5:93:6f:8b:0f:3b:9a:f6:f1:88:92:cd:29:0f:
68:53:ef:da:d3:3e:6b:61:ef:13:02:d8:1d:67:78:
44:d1:6d:b9:2c:ae:7f:f2:4c:e0:7a:5c:14:80:cb:
82:a5:23:3d:8d:8c:c1:f9:b3:23:64:6a:fd:c4:7a:
82:d5:a6:d9:a2:22:ec:76:1e:3d:c9:22:e7:76:49:
08:01:7f:46:2b:c2:08:f3:86:80:bb:44:37:ed:4a:
9e:1f:39:65:c0:a8:34:44:51:07:c8:8a:21:a7:3f:
58:cd:4b:8a:24:00:2d:49:47:03:32:8c:9d:ba:41:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0F:9D:9C:D0:A7:CA:D9:96:AE:60:A0:81:7F:63:21:9D:93:47:D7
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ff:ac:37:72:d8:94:98:e4:bd:97:ab:16:9e:74:2e:ca:f7:
4d:52:9b:97:dc:1b:f1:96:bc:35:d3:36:5c:20:82:ef:a2:6e:
16:02:da:e5:57:6a:c8:83:40:70:54:b9:61:ed:c3:51:fe:42:
61:7c:71:e4:4e:85:92:29:36:87:8b:8c:6b:fd:6c:e5:a0:57:
ed:5a:df:e0:87:6b:6b:6a:11:c8:12:39:ae:75:78:fd:ca:3c:
a6:2a:c6:73:5b:5f:ea:4b:8c:c4:56:d2:21:b6:28:0d:51:cc:
55:bb:c8:41:ab:c8:39:60:a3:c6:66:e0:49:d6:d5:b5:14:6c:
64:04:9d:90:d5:ee:68:78:4e:71:9d:12:7d:af:e4:86:ad:32:
16:57:fa:bd:15:31:c1:69:a0:86:b6:a2:9b:d4:88:5a:8f:67:
d4:5d:1d:e7:d8:26:e0:36:8d:6a:c8:4b:46:2a:29:7c:5b:9e:
e6:fc:77:2f:7a:9b:30:40:ca:97:fc:ac:1b:2f:d3:36:c4:e8:
03:79:87:a8:ec:b9:24:3b:18:86:db:57:ba:62:ca:60:88:72:
2b:f1:cc:94:c6:c6:f3:da:ea:4c:3d:b0:8b:47:e4:9b:92:c4:
a4:84:26:c2:9b:08:57:25:c8:23:1a:10:4f:df:e0:c1:49:58:
2c:22:31:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:00 2025 by rpki-client