Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
File: Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft (raw, json)
Hash identifier: VAMVgDH2RuMwNktSQtk3HJ101Ir9jdcnnowRY/OHZX4=
Subject key identifier: 6D:C0:3B:14:E6:C1:77:A0:F1:9E:84:4C:FE:83:11:50:8D:BB:62:D0
Authority key identifier: 31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
Certificate issuer: /CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Certificate serial: 019A7112CE62F699699D1184B076F7AB542F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
Manifest number: 0996
Signing time: Tue 11 Nov 2025 04:00:49 +0000
Manifest this update: Tue 11 Nov 2025 04:00:49 +0000
Manifest next update: Wed 12 Nov 2025 04:00:49 +0000
Files and hashes: 1: 5_iMF-a8NMa1YPR_P3PyRQQW0y4.roa (hash: WcT24IP06Ufo9Qw11IKoVe7vKY2EcXtQIG8CxBVwap8=)
2: Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl (hash: MDJX36MYPkA6xEyq4WWm1txrBXfRNil496FPv8x1PuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ce:62:f6:99:69:9d:11:84:b0:76:f7:ab:54:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Validity
Not Before: Nov 11 04:00:49 2025 GMT
Not After : Nov 12 04:00:49 2025 GMT
Subject: CN=6dc03b14e6c177a0f19e844cfe8311508dbb62d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:0a:ad:85:60:a4:33:a2:3b:17:ae:cc:10:
3c:83:d2:80:be:c3:8f:4b:f3:9c:44:c4:ee:2b:e3:
b5:67:b8:87:ab:cc:5b:e4:cc:80:d2:e9:96:0e:c0:
6b:ff:af:05:b1:f0:a7:73:ac:4e:44:c9:f7:83:c2:
e7:fc:7f:2d:ac:c5:6f:8e:05:fe:b1:1f:83:ef:d3:
78:94:38:df:95:68:26:50:60:47:9d:5f:bf:6f:75:
08:b2:27:21:8c:a4:1e:fd:91:41:6d:a5:2c:fb:00:
e7:8d:f2:b5:76:47:41:d8:a1:3f:20:24:84:29:47:
41:1c:13:56:d0:68:c1:f3:a2:31:fb:f0:06:0f:f7:
2b:20:e7:29:2a:04:50:25:65:bc:a9:2d:cd:8e:b5:
9a:89:e5:ce:53:d8:d4:be:53:81:65:f6:b1:8f:2c:
14:c4:52:45:c5:86:b2:92:94:6d:37:4f:58:a7:5d:
64:3b:4b:ff:9e:43:92:a8:23:fa:6f:6e:c5:ca:52:
88:ee:3e:0f:01:e7:d4:86:2b:a0:40:7a:7c:e2:89:
12:08:18:48:a0:3c:71:50:e3:93:b0:ee:2e:4b:a5:
20:d5:56:4c:b8:8b:c6:81:ce:0b:68:4e:ec:b4:53:
cb:e7:aa:a7:74:85:45:b0:bb:b9:4a:3e:bd:de:ba:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C0:3B:14:E6:C1:77:A0:F1:9E:84:4C:FE:83:11:50:8D:BB:62:D0
X509v3 Authority Key Identifier:
keyid:31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:66:75:e4:be:29:20:8d:71:a1:65:75:6e:a3:27:03:a4:a5:
10:aa:e3:38:45:07:63:63:c7:5f:e0:70:66:dc:67:ee:60:ce:
71:d2:5e:ab:ea:96:ca:6e:ff:d7:0d:e1:4a:fb:8d:d3:f7:2d:
71:08:2e:7c:0e:92:a8:b7:4a:54:73:07:7a:4e:e5:c2:30:4c:
03:3f:75:f7:d7:bc:00:bb:3e:f5:a2:59:c9:05:4d:87:8c:cd:
62:10:c9:cc:d9:13:fe:6f:26:ee:cf:1a:7c:9b:f7:ed:82:77:
5c:2e:74:b0:e0:fe:aa:52:38:82:48:70:a8:c1:c5:27:fa:26:
4b:bd:31:c3:cc:96:4e:93:08:2c:85:43:b6:8a:02:3d:69:99:
93:49:12:97:6d:97:42:d7:e9:03:ab:aa:41:81:53:3c:4a:ef:
d5:20:34:1b:3d:de:65:45:98:21:56:9d:99:72:73:02:cc:d3:
1e:10:47:ae:2b:8b:04:c1:49:61:af:83:e6:55:e5:b8:82:32:
00:16:01:1a:dd:4e:7f:28:27:65:62:05:2c:3d:b9:0b:ed:89:
6c:43:d4:6b:36:e7:bb:58:d8:bc:83:ba:fc:55:4c:37:05:87:
a4:0a:4b:eb:9d:da:90:06:11:6a:80:36:82:66:1a:41:e4:68:
fe:65:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:20 2025 by rpki-client