Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
File: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft (raw, json)
Hash identifier: 88kjzc0kXi1hkMSohW/kGrFDBu/83yAmYZRgRmoluqM=
Subject key identifier: 40:21:12:59:8E:EF:A4:81:FF:FF:BA:30:9F:08:6C:09:00:B6:73:53
Authority key identifier: FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
Certificate issuer: /CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Certificate serial: 019A232E6BF42916B30CBBEAD3AAA759EA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
Manifest number: 1687
Signing time: Mon 27 Oct 2025 01:00:36 +0000
Manifest this update: Mon 27 Oct 2025 01:00:36 +0000
Manifest next update: Tue 28 Oct 2025 01:00:36 +0000
Files and hashes: 1: GDYfoKKG3yFaIjJkJ3YCAK8hLqA.roa (hash: erb5aM2h7W5I1XqnWYG/lDx7/8zDPLRd0RbZw0dE/qs=)
2: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl (hash: 2ktft6a3a/pzqdp6wsJKRQl/IzSetBR0bPaz/cD1/44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:6b:f4:29:16:b3:0c:bb:ea:d3:aa:a7:59:ea:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Validity
Not Before: Oct 27 01:00:36 2025 GMT
Not After : Oct 28 01:00:36 2025 GMT
Subject: CN=402112598eefa481ffffba309f086c0900b67353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:a3:a7:c0:44:4f:94:74:8f:c8:48:3d:75:
92:22:b6:77:43:f8:15:62:c1:0f:c8:d0:92:bc:8e:
c3:f1:fc:85:49:68:80:32:95:db:14:64:3b:72:5d:
c8:48:ae:7e:df:86:23:e7:5c:ee:41:b7:68:3a:44:
b4:24:e4:e4:41:68:17:bd:b3:b8:b6:18:57:1b:31:
d2:b7:86:b5:11:ac:f0:4e:1c:ab:91:cd:ca:26:dd:
bb:51:fe:77:29:75:39:18:df:9b:1a:20:85:67:58:
54:1c:9c:e6:b3:0e:7d:c4:8b:66:75:01:68:e5:ac:
d1:f2:93:0a:9e:95:49:8e:2d:8a:e4:35:52:2f:2e:
0e:53:aa:02:0a:6a:48:75:11:a8:50:33:d1:13:dc:
25:05:38:00:39:52:28:50:c9:9f:4f:1b:a5:5e:c6:
a9:20:d5:7b:a6:93:de:bd:0d:5d:61:1c:60:b8:5a:
b1:eb:4a:aa:48:56:53:55:6e:51:6a:b0:6d:3f:49:
8f:b5:c0:91:70:c5:91:b0:a0:6b:d5:d9:31:79:99:
d3:b9:e2:a7:11:1e:83:ee:6b:4e:2b:7c:c6:52:75:
b0:98:c1:69:ca:41:95:15:4f:96:2a:85:51:bc:3b:
3d:15:20:04:84:80:86:50:1c:c3:c7:82:34:b2:9f:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:21:12:59:8E:EF:A4:81:FF:FF:BA:30:9F:08:6C:09:00:B6:73:53
X509v3 Authority Key Identifier:
keyid:FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fe:2d:09:b4:84:3b:06:e3:04:96:5d:a9:3c:f6:31:e6:d5:
ca:03:34:de:b5:a9:0a:6b:64:58:28:09:e4:95:ae:cb:d6:3b:
6c:94:93:b6:04:fe:48:97:32:86:ed:0b:13:07:4b:b0:8c:5f:
47:ba:36:a3:d7:de:52:6a:78:f8:60:55:4a:80:47:72:4c:f4:
c4:3a:d4:28:44:25:bd:fe:90:07:86:b7:61:1c:78:45:e2:fc:
ad:a2:bd:4b:ce:f2:12:77:c4:ae:59:2a:08:52:a4:ef:1b:c6:
4c:98:5f:8a:21:0e:8a:8c:ff:cb:49:24:20:01:2e:69:10:25:
73:2d:3f:9f:5e:03:c8:65:23:00:57:08:6c:11:4f:56:d3:32:
33:d8:5d:66:8a:da:06:30:10:9d:26:4a:1a:9c:f4:c3:5a:65:
52:5e:a8:6d:23:e1:b9:70:2f:d5:84:bd:0d:06:62:59:05:51:
32:0b:18:41:f6:e3:0f:64:25:62:b1:40:02:68:17:96:1a:1a:
60:37:4d:f4:74:e0:5b:9a:7c:6f:bb:51:ba:f3:5a:c2:0c:fc:
91:02:6f:84:c2:77:66:c5:ae:e0:5b:59:d7:2a:e3:d6:d4:7d:
12:15:8c:ef:5d:e6:f0:05:e3:08:78:a0:67:9e:bb:ca:e2:23:
6d:ad:73:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 05:43:10 2025 by rpki-client