Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json)
Hash identifier: hTFPYcVXNzxQRAqHNXbIzE6Q/49qt/Au0cSYd88bTNY=
Subject key identifier: CC:EB:5F:BD:1C:28:A9:A3:C6:79:25:42:D3:C4:92:21:B1:BB:C5:5D
Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Certificate serial: 019A71B880039F6D5045098DAA6C22F18A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
Manifest number: 128E
Signing time: Tue 11 Nov 2025 07:01:48 +0000
Manifest this update: Tue 11 Nov 2025 07:01:48 +0000
Manifest next update: Wed 12 Nov 2025 07:01:48 +0000
Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: qeoDhWm/rVBi8sRdPPVVdP0KFtZ7z/i1XgyBj7uv8nE=)
2: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (hash: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:80:03:9f:6d:50:45:09:8d:aa:6c:22:f1:8a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Validity
Not Before: Nov 11 07:01:48 2025 GMT
Not After : Nov 12 07:01:48 2025 GMT
Subject: CN=cceb5fbd1c28a9a3c6792542d3c49221b1bbc55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:ee:19:48:63:eb:03:57:36:ad:c4:42:36:
20:a1:ef:fa:f5:0e:7b:11:a7:8d:a7:5a:d1:9d:42:
bd:66:6b:00:82:0c:98:6b:a5:4a:9a:64:9c:40:b5:
da:25:a4:be:e9:7b:d5:fc:84:28:35:00:61:bf:ea:
69:f0:8b:68:3d:d9:2d:91:6c:58:99:b7:03:5b:02:
73:a5:31:91:d3:89:47:6f:af:5d:85:f5:d6:47:08:
05:55:25:99:a6:d7:b7:27:8e:0c:45:c7:a0:d6:d6:
4c:80:06:d4:eb:e4:a8:e2:03:2d:c8:3f:cb:d5:8c:
91:3b:1f:4a:0a:53:a5:9f:56:46:e6:3b:db:1c:28:
c7:dc:1f:5b:18:fc:e3:c2:5f:03:57:fa:90:fd:f8:
90:6a:35:a4:b5:eb:55:67:28:d4:d3:ea:8a:32:ae:
dd:5c:7a:dc:3c:12:20:ae:80:68:67:4c:1c:69:a3:
09:ef:d9:a7:d7:9b:82:e7:d7:54:d8:77:68:42:21:
33:4c:ec:cd:b0:d2:41:a9:0c:c9:2e:8b:0e:21:8a:
ff:70:f4:4f:31:2b:7b:69:4e:21:8a:cb:7a:e8:9d:
2b:7a:63:db:1c:80:87:f9:51:12:6f:55:ee:7a:0e:
bf:21:ce:82:b7:ff:29:86:79:f0:40:0a:7f:f2:36:
25:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EB:5F:BD:1C:28:A9:A3:C6:79:25:42:D3:C4:92:21:B1:BB:C5:5D
X509v3 Authority Key Identifier:
keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:73:7a:a3:89:8c:66:24:98:28:0a:3c:ce:af:48:6f:83:31:
3b:90:f2:1c:84:50:b6:0a:e1:5e:c0:ad:31:ed:31:94:68:46:
f9:66:25:d3:f9:2c:68:23:20:ae:95:b1:6d:ad:1f:43:68:02:
21:55:79:66:d7:72:31:c5:c7:1a:a2:65:39:f4:62:99:d9:58:
dc:39:54:8e:c9:62:f9:12:8c:a1:f8:ff:4d:e5:86:db:85:6a:
ba:6d:b1:e9:de:2b:16:de:93:6d:4a:27:cc:3f:5e:ec:75:9c:
09:14:f2:17:23:ec:70:7d:23:cf:d1:20:56:fc:98:bd:2e:83:
24:41:94:7a:a1:c1:c5:75:1a:b0:d0:99:a7:f2:10:ac:b5:85:
30:8a:a5:66:5b:c8:94:13:3c:06:23:23:95:bd:95:63:57:88:
85:97:c9:69:91:36:48:f6:f4:6a:5d:08:a5:06:5f:98:e2:65:
81:6e:61:ca:2a:14:9d:d1:3a:2e:e7:b5:0d:06:9f:24:b5:74:
0c:61:f9:be:b2:f0:f5:c6:cd:15:a2:24:5a:4a:d9:6d:ee:11:
c7:ea:6c:20:f2:e1:d8:9b:41:28:bf:d5:ea:8c:88:44:c9:ba:
67:4c:4d:62:27:d2:a4:75:30:7f:d9:58:0c:93:43:a5:4b:6f:
5e:18:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:04 2025 by rpki-client