Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
File: 9iZUZY9nKqzzcTO1xxz0sRwYado.mft (raw, json)
Hash identifier: 7cX0nFSDOdtP94+9w5YHgPIJlwf+MY0bcKxezTrytEY=
Subject key identifier: 52:05:09:FE:95:9B:72:DA:66:D4:66:14:18:00:DF:17:65:17:A4:48
Authority key identifier: F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
Certificate issuer: /CN=f62654658f672aacf37133b5c71cf4b11c1869da
Certificate serial: 019A71EE9312EEB74D85C3EBA108FFEEF6D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
Manifest number: 0229
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: 9iZUZY9nKqzzcTO1xxz0sRwYado.crl (hash: 3nwxXmdacoKWWkn7dRd51k63K2QZ1SMU5RBXMIXZbhE=)
2: XtP9uPkBbHpNbcrbfiapaGNstI0.roa (hash: RHc/YYxPI6eAj3ZZsuy3p2bKIUCYpGJbMLwSSRkfsBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:93:12:ee:b7:4d:85:c3:eb:a1:08:ff:ee:f6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62654658f672aacf37133b5c71cf4b11c1869da
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=520509fe959b72da66d466141800df176517a448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e4:f9:f2:04:54:46:36:ce:94:8c:5b:1a:01:
7a:81:bb:d5:ac:d6:6b:d4:40:c0:77:aa:99:57:d8:
0e:bd:a1:bf:31:70:89:02:14:68:c5:d2:f4:93:e3:
99:c3:0b:27:61:87:f0:d8:c3:cd:0c:f5:1f:a4:42:
e4:10:d6:52:7b:57:f8:a5:95:6b:85:57:e1:14:a8:
9a:01:37:6d:0b:43:79:fd:1e:4c:ad:bd:55:e6:6a:
3b:80:5b:65:83:ea:82:23:b2:b1:dc:70:8e:d9:29:
93:83:e5:81:58:73:b7:1b:d9:dc:40:f1:ce:50:f9:
48:d6:f1:21:f5:b3:6f:c7:8a:5b:d3:a8:a0:ac:24:
14:ab:f0:9b:d4:af:7c:e1:46:31:26:0a:07:a6:ac:
06:a6:82:26:3e:f2:ee:be:e8:17:d4:5a:be:d3:d5:
08:a6:f6:e9:59:44:93:e6:51:2b:30:8e:38:fd:fb:
4f:b8:34:d1:48:db:16:bc:66:b9:b2:53:5e:c1:a6:
17:de:ac:b2:52:39:c8:54:8b:94:3c:94:c8:61:95:
68:a2:eb:ba:c2:a6:04:ab:95:f5:3a:27:63:04:5a:
4c:5f:8f:8d:77:1f:0f:c2:02:5b:bc:84:d6:c9:8b:
c8:47:db:d3:5c:25:7f:35:5a:c8:1c:de:fa:0a:06:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:05:09:FE:95:9B:72:DA:66:D4:66:14:18:00:DF:17:65:17:A4:48
X509v3 Authority Key Identifier:
keyid:F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:71:a8:65:32:81:16:18:7f:50:64:3e:ee:97:88:0c:03:9a:
58:04:4a:1b:60:bb:75:8b:68:9c:e2:52:ad:fd:37:38:85:fc:
ae:6c:a8:68:d4:06:28:9c:d0:fe:58:fa:d1:89:be:4e:23:fd:
58:ba:dd:59:ce:0e:df:61:ec:b1:a5:28:aa:84:61:d0:68:82:
3c:8b:55:4c:58:3b:31:41:b2:71:9b:d7:b7:e2:b3:59:b3:86:
c5:74:a3:68:4a:c0:95:31:f7:1a:29:6b:99:7a:d2:ca:0c:d2:
ce:11:20:84:60:55:9a:3a:d9:ba:1f:c8:8c:de:db:a9:1a:1c:
a2:a4:71:04:73:d4:d2:0c:79:18:7b:5e:42:86:1f:b2:72:7a:
84:88:ed:e6:67:c3:86:3c:6f:de:1c:6a:1e:c6:73:e3:12:ac:
2a:bb:94:14:61:99:86:22:20:80:45:dc:8b:70:d8:3f:55:5d:
1e:dd:07:2d:1b:16:7b:6f:eb:64:f2:6d:a0:10:1a:26:4c:fa:
50:21:26:e9:51:95:8d:ba:7c:b6:eb:5f:d1:30:0d:8c:38:8d:
78:db:6f:2f:51:1f:cf:da:b1:04:e6:f2:55:14:98:34:a0:dc:
fe:44:c4:be:06:f1:0b:d2:9a:40:92:18:a5:85:a2:31:59:2f:
3d:7b:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:12:13 2025 by rpki-client