Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: tp0tRcIf8a5HD7ROlJAUmAbq8KDIUxmOrmXb3t/TSbY=
Subject key identifier: 4E:B2:6D:E5:7D:F5:C8:12:F5:E4:E6:51:F2:C4:B6:B5:3F:0A:13:05
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 019A71EEB1C01A90367EC56104824E51463D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: n1HLHKTi1PbSpc8eKdwiN7cUrNasmqnv9G/pQZbwagA=)
2: WMejWLM-fXx9J5hQgJ4TNGxlL40.roa (hash: 9oO47gALmpiotO1VgFePsYnaYk2I9wrq424pEV3SiMU=)
3: n5VL-9G7-YZixQJP-BPKVSDqpR4.roa (hash: t+3M+svFb4/LG8WrDBM3x4yGiPVd0ez6gYqaJNLI3Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b1:c0:1a:90:36:7e:c5:61:04:82:4e:51:46:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=4eb26de57df5c812f5e4e651f2c4b6b53f0a1305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:bf:53:de:f8:d4:22:e4:80:c7:19:28:60:
23:54:04:e0:78:ad:48:47:9b:d2:19:7a:20:91:9c:
9a:41:a7:a8:4e:6f:7a:01:05:c4:31:0d:ed:a2:7d:
05:94:f0:64:0b:b4:52:3f:31:e7:bb:8a:13:33:a0:
8c:d3:eb:92:fd:27:a6:81:77:ca:f9:71:69:5f:ee:
4e:8e:6f:4a:9a:af:d3:ad:95:9c:08:4b:ef:31:4c:
cb:b2:ba:8d:5f:89:de:05:fe:9e:14:f6:92:7f:e6:
2d:e1:0b:58:e6:b6:8a:75:c3:11:da:e9:45:0e:85:
b1:84:dc:64:e2:ac:2a:41:0a:af:30:86:86:56:74:
34:64:d2:46:d1:be:81:70:a6:6c:ab:a6:62:d1:b4:
15:85:da:2a:a7:57:5f:19:4b:dd:7d:12:af:2c:8d:
ba:08:28:c1:b5:e5:97:c7:2c:33:7d:8f:34:fa:0b:
dc:6e:a3:07:58:14:57:42:7b:0d:b4:1a:b7:37:d8:
4f:0a:95:f0:d7:8d:3e:95:d7:6f:ab:f1:f6:6d:c6:
5d:95:b6:4c:4b:4b:44:87:32:f6:9a:e6:07:b1:e9:
ac:b2:18:a7:94:05:2c:e3:92:24:24:64:1e:a6:3d:
f1:27:cd:ce:77:93:5e:fb:24:d8:6d:0f:8d:3a:d1:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B2:6D:E5:7D:F5:C8:12:F5:E4:E6:51:F2:C4:B6:B5:3F:0A:13:05
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:63:46:24:84:c9:86:a4:66:78:9d:b6:e5:a4:41:5c:b9:b3:
9b:11:1b:86:fe:fc:99:66:b5:a2:0f:e1:0d:fa:88:92:1c:91:
09:1a:87:dd:b6:19:64:3e:c4:f9:1b:6f:ab:af:bd:50:0e:11:
cb:d6:56:11:ec:75:a3:b8:19:a3:07:e8:2a:2d:ba:f7:ac:8a:
c5:33:2c:35:f3:ad:48:a3:cb:55:94:2b:e0:5e:90:f0:39:48:
f4:ca:0e:5b:00:00:e8:b7:8b:c3:82:b4:35:5b:a1:58:a4:b8:
f8:c2:67:53:30:08:09:11:69:52:df:d2:77:f8:26:89:4e:31:
bc:a7:62:e3:67:b9:ea:33:9f:56:9c:37:46:54:f6:00:8c:6a:
e7:8d:94:7a:82:78:73:40:54:87:f8:90:bb:e3:30:e4:09:3a:
c8:5d:88:53:ed:2a:7c:49:74:53:61:a6:dd:a7:6a:84:a1:c8:
98:17:62:d1:ff:4a:4c:87:ad:e6:b2:89:4c:1a:2e:f1:bd:78:
bf:09:bd:7f:c9:39:3a:12:d8:58:8f:01:b4:89:c0:09:3c:77:
c1:78:a3:fa:69:22:dd:4a:37:ed:01:a1:49:38:31:ec:4f:9e:
3e:89:40:be:7d:f9:91:76:a9:d5:2f:be:d7:79:bd:60:cf:89:
90:42:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:17 2025 by rpki-client