Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier: Y1yVybwvAP3ePB7QRLyki8PFw/eAvjBv+O5HIZcjTws=
Subject key identifier: 9A:39:66:93:40:EE:BC:F2:29:36:FF:C3:E2:17:AC:25:54:0C:56:8B
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial: 019A71B7A5B1109B118B08F7381066D72DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: +NGBeRPkaappKxjB2j8gts79GB+5SyQWYNlmTNEJI6E=)
2: yhhMqOayivlP0HqWgBqkxI1f14U.roa (hash: w/NNRo63VlTAmPeepIG4fNxKMWjZVte8F0Xs65Wc7u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a5:b1:10:9b:11:8b:08:f7:38:10:66:d7:2d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=9a39669340eebcf22936ffc3e217ac25540c568b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:4e:23:f6:14:6b:c6:d0:94:df:2a:ec:fe:
4d:c5:56:c9:c3:ed:ca:23:2e:84:05:13:88:b4:69:
e9:c2:e1:f5:39:71:a2:a5:be:25:c1:28:87:2f:13:
93:d5:66:8b:b6:00:dc:c5:e4:37:69:16:31:ee:c7:
f4:8b:a4:df:f2:2f:ac:0f:27:0c:7a:da:68:23:de:
83:ab:7e:3f:7e:b9:c3:8d:f7:4d:58:d7:80:3c:8f:
9a:7c:e6:6b:84:42:88:e0:18:5c:f8:28:df:91:1a:
fa:4f:2f:2e:b1:09:20:55:0a:6d:8d:95:96:f6:f7:
50:81:a4:c3:54:20:50:aa:1b:04:95:cf:aa:4e:3b:
54:e3:c6:48:8d:ed:8a:ef:81:f7:25:cf:0a:8d:11:
25:c8:2d:ac:64:c9:f6:c9:81:03:66:85:69:6f:1e:
59:c3:d3:f5:26:f0:90:71:a1:5e:47:50:eb:a7:98:
6b:4d:c5:ad:25:bb:29:44:a8:d0:39:da:da:a6:09:
7a:ab:83:f4:5f:1f:29:1f:85:31:64:54:b6:a2:59:
33:f6:de:8e:33:33:7c:a7:87:bd:95:11:75:ef:9b:
6f:2b:9c:d2:14:88:6b:58:2d:fc:96:c8:b3:63:ce:
49:3e:fe:c3:52:25:de:76:49:c0:9c:b8:8a:1c:fb:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:39:66:93:40:EE:BC:F2:29:36:FF:C3:E2:17:AC:25:54:0C:56:8B
X509v3 Authority Key Identifier:
keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ae:86:c8:d0:00:ac:03:96:d8:12:f2:ae:81:45:45:ba:8d:
ce:ea:ec:00:d6:d8:0c:3d:a6:0b:77:a8:66:19:06:3e:5c:2f:
cc:60:44:80:53:38:8f:d6:e1:e5:b2:16:2e:05:34:55:ca:cc:
1e:29:e3:42:95:f9:7f:a0:35:72:ba:0d:a7:95:19:25:c6:97:
f1:9c:13:f5:47:46:dd:19:7b:fc:a9:ed:7f:0c:83:89:2e:8c:
f1:95:b5:24:b9:91:9e:71:2f:43:71:cb:75:d6:ab:f7:82:47:
aa:b3:d5:63:3f:ad:63:6d:a1:c1:ce:75:08:c4:11:00:e8:5f:
ed:de:e8:db:41:e8:74:c5:0b:62:a1:70:a6:16:12:09:3f:ca:
55:33:eb:2c:02:5a:21:8a:03:f8:d8:c3:df:20:37:13:7e:62:
51:a6:1b:b2:64:da:68:3e:c2:b3:be:b8:fe:63:23:cc:08:d8:
fa:d7:aa:f9:ef:06:f7:63:f6:44:8e:57:2c:03:f0:8d:0c:24:
04:f6:c7:67:98:0f:62:17:bd:87:da:0f:12:5d:c2:ba:39:06:
bd:3a:61:93:c1:16:7c:90:bc:f1:a1:ca:8f:17:41:63:89:6c:
72:80:61:40:6c:e1:08:11:a7:44:e6:9d:fb:c5:ef:cd:7d:1d:
18:81:e6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:43 2025 by rpki-client