Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
File: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json)
Hash identifier: OwBV+CQ8TCw3Av2hp8qCKfJYAd0zM+HrouBhC/p1E44=
Subject key identifier: 93:F0:B0:DC:9E:FD:52:E0:E6:20:34:F3:B6:08:D9:C5:88:E0:CE:72
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Certificate issuer: /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial: 019A71B90003F18C09565AA044FBB09B7201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
Manifest number: 1274
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: zk4cuBh8pxlWv/cEQcJ8l/jX8T1USy4y/o2ySbYambw=)
2: ftXv30Hlz-_EICPh46zy3bfImAc.roa (hash: 3S31teaHx8GBvsqpB7SE49UNoJHeSlzxpM1K7KnfX/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:00:03:f1:8c:09:56:5a:a0:44:fb:b0:9b:72:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=93f0b0dc9efd52e0e62034f3b608d9c588e0ce72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:f8:fe:26:5b:3c:bf:fc:5c:3f:ca:ed:71:
4a:82:4e:0d:40:c9:7e:5a:f1:46:c5:cf:dd:72:d5:
ac:95:1c:72:25:8d:e0:1a:78:96:1d:85:09:01:64:
30:37:47:33:ba:26:e4:65:1b:be:af:47:2e:12:87:
5c:bd:02:30:8c:2b:18:5f:b3:4b:cf:33:49:87:71:
0e:80:42:61:04:ce:8b:a7:20:02:e8:05:3c:d1:2f:
72:9b:b3:3e:34:d7:d0:30:d3:1d:a7:3e:69:5d:0d:
29:11:64:da:34:c3:60:12:41:c1:9b:0b:5d:25:4d:
9a:b0:af:e3:83:a4:10:0e:90:83:bd:e3:36:5e:d8:
55:2b:01:8b:b7:88:35:54:6b:0e:32:38:b4:a2:82:
ef:90:32:40:55:0c:c5:3b:45:70:66:fa:fb:30:7b:
f4:5e:d9:50:45:e1:a1:3a:11:db:1d:dc:01:ff:55:
76:66:77:b6:b5:52:31:d3:ba:80:e7:c5:18:50:97:
d1:eb:27:2c:5d:a9:f2:00:1a:79:9c:37:db:ce:aa:
15:9f:15:9d:c2:ec:a4:e5:35:3c:e8:6c:34:7b:e7:
d7:a7:28:74:b5:71:93:76:08:38:ab:85:34:d1:a1:
cb:10:e1:bb:37:24:02:e8:c8:a8:05:a8:f8:dd:65:
9e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F0:B0:DC:9E:FD:52:E0:E6:20:34:F3:B6:08:D9:C5:88:E0:CE:72
X509v3 Authority Key Identifier:
keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:17:43:41:e9:82:66:b0:03:51:f5:2c:17:70:9c:16:84:1f:
71:5c:96:38:15:e8:f6:9c:e8:38:7b:4a:34:56:89:b1:3f:19:
80:74:d1:12:fd:7c:08:6d:68:04:7a:34:50:69:80:8b:1d:89:
c8:2e:6f:7b:aa:54:22:b1:7c:bc:9d:63:18:02:5a:16:e7:2b:
5e:59:ce:6b:1a:60:f2:fd:92:ca:fb:22:b8:a0:30:d2:ef:38:
f9:4a:b1:2d:b7:ba:10:dc:ad:c3:22:ff:29:73:2c:9e:71:4a:
11:2e:a7:58:87:31:43:60:af:7e:66:da:f5:e9:84:c3:54:9d:
ce:25:27:71:46:2f:3c:26:ce:c5:d8:29:c2:85:c9:23:f6:43:
1c:96:d5:85:51:17:63:f8:39:db:47:09:d9:eb:f1:71:03:7e:
a9:1b:f7:82:93:c1:bb:7b:40:01:df:5e:e4:c8:14:02:ef:f5:
31:46:75:13:76:e1:1b:c1:21:a5:5a:a8:6f:a7:02:cf:ef:c8:
1e:a5:40:9c:9f:0f:db:8b:81:1d:46:9e:77:a1:49:60:9f:27:
f9:db:d1:d0:ba:50:7f:62:54:de:07:75:45:53:e0:f2:f0:a3:
f5:8a:60:99:92:30:90:2d:01:61:22:23:55:01:ea:a8:cc:fd:
f4:53:8b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:19 2025 by rpki-client