Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft
File: F9elKrbseLxKdZt8RmMqo-Jgsug.mft (raw, json)
Hash identifier: 7nKuAAITEEzppE3flyJUgtV/sK0X6jRz9q47O379PVA=
Subject key identifier: 90:11:C7:55:1D:5E:29:5F:A0:5B:FF:78:78:BE:35:8A:47:95:C4:FD
Authority key identifier: 17:D7:A5:2A:B6:EC:78:BC:4A:75:9B:7C:46:63:2A:A3:E2:60:B2:E8
Certificate issuer: /CN=17d7a52ab6ec78bc4a759b7c46632aa3e260b2e8
Certificate serial: 019A706E86F1733050E0ABAF11D6D7FC1F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9elKrbseLxKdZt8RmMqo-Jgsug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft
Manifest number: E3
Signing time: Tue 11 Nov 2025 01:01:22 +0000
Manifest this update: Tue 11 Nov 2025 01:01:22 +0000
Manifest next update: Wed 12 Nov 2025 01:01:22 +0000
Files and hashes: 1: F9elKrbseLxKdZt8RmMqo-Jgsug.crl (hash: 5GeK9oK4mRGHa3EHp2uXQqBVYtG9Sque4iv24ec++jA=)
2: sbMYQYJxwfNPp6440gILA9mzbx0.roa (hash: RnVE2MTd07RWpWjHS41qs+TCVp95W8O0zBW8ou5pEzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9elKrbseLxKdZt8RmMqo-Jgsug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:86:f1:73:30:50:e0:ab:af:11:d6:d7:fc:1f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d7a52ab6ec78bc4a759b7c46632aa3e260b2e8
Validity
Not Before: Nov 11 01:01:22 2025 GMT
Not After : Nov 12 01:01:22 2025 GMT
Subject: CN=9011c7551d5e295fa05bff7878be358a4795c4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:70:e8:d2:2c:44:44:36:ae:a4:ff:85:f0:3e:
c9:de:fb:1a:a5:d9:dd:76:a1:52:7d:be:4b:b4:c7:
da:27:a8:ce:01:91:33:e5:5e:13:ea:1e:2a:7a:d6:
cd:24:72:cb:8b:f2:62:0c:2c:9e:ef:6f:7f:c9:66:
42:dd:59:f1:9f:e8:eb:dd:3e:87:3a:86:91:dd:b0:
08:ab:23:b2:73:aa:25:fd:75:10:01:3f:7e:8e:74:
77:4b:bc:df:d3:de:54:a1:b0:62:fb:9a:da:be:8f:
1c:f3:41:b6:28:ae:9c:94:d9:01:08:19:ba:5b:f4:
6d:45:35:33:46:05:4c:3e:e1:52:26:cb:86:86:c8:
10:2d:76:a5:65:84:36:1e:23:de:f8:2d:9b:cf:9c:
c9:3b:b4:66:33:50:46:e0:a3:74:44:f0:c9:04:5a:
53:5c:20:88:e9:b7:50:f2:7e:77:30:af:0d:07:5d:
7d:0d:52:78:f3:e7:53:95:a7:19:23:34:5a:8b:52:
24:72:aa:ae:f1:09:51:bb:15:a9:13:44:5d:e3:10:
9f:0b:bc:63:54:b7:76:3a:be:e1:b8:d2:a1:5e:3d:
01:37:1e:f4:62:4e:7b:8b:8a:9e:2f:e7:e4:21:5e:
d4:f0:11:b0:e6:5d:52:71:17:5d:14:4a:78:d9:28:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:11:C7:55:1D:5E:29:5F:A0:5B:FF:78:78:BE:35:8A:47:95:C4:FD
X509v3 Authority Key Identifier:
keyid:17:D7:A5:2A:B6:EC:78:BC:4A:75:9B:7C:46:63:2A:A3:E2:60:B2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9elKrbseLxKdZt8RmMqo-Jgsug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6b:b2:72:f9:cf:1b:33:b6:28:94:79:2d:0f:9f:20:e8:a5:
61:9e:a5:df:c4:de:a4:a8:20:4e:32:17:2c:1c:6e:1c:36:b9:
fe:a4:37:67:d8:cf:ea:e5:af:48:e9:42:80:c7:92:aa:31:21:
59:91:e0:e8:12:cf:43:af:f9:4d:a5:c8:ac:27:bb:c1:e0:3d:
3b:7a:02:12:a4:f6:a2:84:f9:f3:55:b0:10:5d:d0:65:bc:fa:
5c:e1:12:fa:69:1e:5c:39:92:28:8b:4f:ae:a3:3c:ed:74:f0:
4b:0b:c8:f5:d9:02:14:8c:22:54:ae:13:db:73:fd:91:5f:32:
09:99:90:e4:4a:d4:d7:eb:f3:1a:3f:2a:6d:63:6d:37:20:85:
d7:0a:55:16:30:eb:38:57:a4:f2:da:ab:a1:8c:aa:4a:e8:5d:
3f:74:50:e7:8f:8f:be:45:99:5b:51:2d:07:29:68:1e:23:1c:
c7:dd:cb:d5:db:7d:1d:f5:9d:d7:ce:d2:29:60:e1:89:e9:9f:
ee:8b:16:77:3b:56:59:c8:bf:f9:c1:b7:d2:16:41:43:32:8f:
df:fd:62:18:9e:12:c6:29:4b:36:7c:f4:56:3d:e0:70:10:b0:
d1:b0:4c:81:61:88:fd:1e:9b:93:fe:95:5d:6a:04:7e:f9:89:
fc:17:de:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:58 2025 by rpki-client