Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
File: mo9LAp4p7t8n1FzU05AQgya-JvA.mft (raw, json)
Hash identifier: 8qf8P4GrkdwXY9OIYA7InFeJ4ozIam/URouo7uD6boE=
Subject key identifier: F2:AD:49:C5:AE:FC:3D:00:2C:D1:DF:42:67:6A:BF:75:69:3B:96:96
Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
Certificate issuer: /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Certificate serial: 019A70A531B02FC0D35BA3B56217E5BD8903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:01:05 +0000
Manifest this update: Tue 11 Nov 2025 02:01:05 +0000
Manifest next update: Wed 12 Nov 2025 02:01:05 +0000
Files and hashes: 1: Zw30iDu4jzobtmXOoRJnqyr607Y.roa (hash: 4CedzSiaWJKzH9a7MTqU1eCaCh1zeNHdX5Usa6vZk+8=)
2: mo9LAp4p7t8n1FzU05AQgya-JvA.crl (hash: T5LiUBAEPy1oRod1IW2zFuh/Fan7HDMduCu0Q+XXJaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:31:b0:2f:c0:d3:5b:a3:b5:62:17:e5:bd:89:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Validity
Not Before: Nov 11 02:01:05 2025 GMT
Not After : Nov 12 02:01:05 2025 GMT
Subject: CN=f2ad49c5aefc3d002cd1df42676abf75693b9696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:c8:ec:07:70:f0:1a:34:43:e8:e5:ab:d8:
bc:eb:71:7f:72:c1:10:3f:4b:93:7b:ff:ec:06:a9:
7d:da:4c:9f:8c:f6:83:33:3b:6c:c7:49:29:f3:9c:
f9:e8:4c:32:92:2e:94:0b:24:37:73:bc:04:4e:f5:
5e:10:25:a7:9a:ad:6c:e6:3f:ba:68:f4:b3:88:18:
20:9d:e9:69:4c:9c:32:c8:cb:5a:96:26:f4:a6:82:
15:7c:2e:49:40:f5:bc:bd:ea:6e:30:0d:17:cd:a9:
c9:9c:be:dd:67:b4:c7:31:9f:cb:3a:b2:9d:96:55:
e1:cb:36:81:20:60:18:c3:62:0a:92:23:cb:4f:58:
07:bf:f3:2e:0b:17:f2:ed:e2:89:30:f5:6d:59:35:
8e:96:c7:10:46:63:7c:ed:d1:82:35:05:d7:27:d3:
12:48:fa:bb:e6:16:1d:e7:6b:19:93:09:23:7f:45:
ee:9d:c3:e3:69:3b:fd:ca:42:55:c2:1a:34:88:c8:
47:bc:54:ed:c7:9d:68:33:c8:6d:c1:3d:7b:9d:cb:
5f:a8:bb:dc:9a:f7:78:57:47:3c:f2:ff:82:2d:c1:
91:2f:25:cc:0c:29:6e:12:e2:d1:c0:6a:f2:c3:f2:
59:80:f6:98:46:3b:15:5e:0d:fc:99:b6:cc:0a:8e:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AD:49:C5:AE:FC:3D:00:2C:D1:DF:42:67:6A:BF:75:69:3B:96:96
X509v3 Authority Key Identifier:
keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4e:f2:21:b7:03:a9:ec:38:e7:cd:8f:67:43:1e:65:c4:c5:
e9:76:94:b1:48:d8:ec:30:98:df:94:46:87:a3:63:23:3f:bd:
d2:27:2b:42:0e:e0:05:95:ee:ea:c7:b2:11:3c:f5:c8:18:e0:
ca:8d:67:59:2c:56:5e:71:5f:ff:af:c9:34:a0:f7:20:9a:e5:
45:40:47:fa:90:78:dc:55:d2:d2:e3:2c:7b:56:04:67:07:14:
c0:d5:c2:da:4a:8b:4e:9a:80:52:40:48:44:25:38:31:b8:80:
02:61:db:21:c4:90:bf:9d:d7:5f:84:29:35:e8:ba:57:6d:02:
49:74:e2:11:47:3d:db:db:b1:fd:0f:fb:8f:41:38:e6:f9:2a:
5e:21:4b:fa:22:55:e0:0e:36:7e:53:97:33:64:08:0c:b2:56:
59:37:15:10:c3:e7:72:a5:8c:be:14:ee:57:ad:08:61:f2:57:
9c:7a:b2:88:6d:06:60:96:63:a2:d7:ef:ef:26:02:88:10:f6:
fa:4e:d8:ed:64:1e:0b:3d:4a:aa:61:30:4b:d6:c1:8b:88:90:
b9:39:66:09:b6:b9:4f:87:0f:b6:57:b9:52:63:7b:dc:21:79:
f3:b5:c8:18:91:ba:1d:0a:40:ed:33:d7:91:45:91:69:c4:d8:
e7:27:5e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:31 2025 by rpki-client