Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File: t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier: UviLvHSvgs2DZP2h/BlkEXnfSlUHvmENeHVuuR+DItk=
Subject key identifier: C0:4E:1D:FE:17:F2:E3:A1:8A:71:1E:FF:D0:E1:04:2A:7A:F1:2D:40
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer: /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial: 019A416FD23384162019074E905F28F9E15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number: 14A9
Signing time: Sat 01 Nov 2025 22:00:38 +0000
Manifest this update: Sat 01 Nov 2025 22:00:38 +0000
Manifest next update: Sun 02 Nov 2025 22:00:38 +0000
Files and hashes: 1: CTtxM-1YJnI7s2CeXEI8bJGchw8.roa (hash: m3vS1eOhVy8HVysz20rw/64QS2NyFhJNMyCoI4Eqes4=)
2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: Qxqrk1/C1DvcdXLRKui5p+mWY/aVrVNKZqnT4RH8sz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:6f:d2:33:84:16:20:19:07:4e:90:5f:28:f9:e1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Validity
Not Before: Nov 1 22:00:38 2025 GMT
Not After : Nov 2 22:00:38 2025 GMT
Subject: CN=c04e1dfe17f2e3a18a711effd0e1042a7af12d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:96:50:66:4b:1f:df:eb:91:ac:75:8b:77:
4f:6f:44:7e:60:ec:7f:d5:1f:3e:dc:a5:46:03:cb:
4e:62:64:4c:ab:0c:c4:c5:78:36:f9:a0:e7:27:1f:
09:b8:8e:52:7e:e2:5a:c4:c5:67:ae:11:ed:b5:e7:
37:ce:66:56:e8:bf:91:1f:4e:85:da:c6:70:3a:c9:
66:ac:4c:55:9e:47:e1:e4:2f:f6:64:ce:b3:a7:a4:
dd:79:df:47:b6:aa:a0:37:43:07:f6:27:8e:d0:f3:
e5:77:8b:3e:74:cc:ce:a8:de:b6:9e:fc:96:67:82:
a9:63:a7:8b:aa:6c:d6:60:18:c3:b7:b7:e1:8b:8a:
b0:e9:8e:7b:b8:71:f2:57:92:5b:2b:82:60:f7:04:
f1:a2:9e:e1:90:d3:ab:f4:71:15:5a:dd:1b:f3:ae:
4c:5c:4b:36:81:06:84:b8:3a:f9:e4:19:22:d5:5d:
f3:4d:bb:08:fd:a6:9a:0f:55:7d:99:df:e3:df:21:
6b:46:5f:4c:f6:2b:fb:e6:01:d1:c2:92:4f:fd:06:
75:0d:64:d1:64:8b:3c:95:bb:3f:a0:e1:2e:36:2f:
dd:0a:30:ce:ad:4d:77:85:0e:e5:7b:be:47:56:35:
ba:cd:a4:40:53:5a:5d:40:cb:27:30:cb:46:a0:9e:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4E:1D:FE:17:F2:E3:A1:8A:71:1E:FF:D0:E1:04:2A:7A:F1:2D:40
X509v3 Authority Key Identifier:
keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bb:f6:7c:44:21:ca:01:5e:aa:fe:2d:e3:ab:4d:e7:15:c2:
2e:ba:65:8f:a6:dc:19:57:64:a5:d2:73:66:cf:9f:30:40:8c:
c4:31:b0:4e:0f:7c:24:50:03:a0:2c:28:ba:7e:a4:22:5b:13:
5e:fb:65:a9:80:f8:e7:86:65:5c:a9:4e:e4:7b:57:3e:0c:d6:
fa:36:92:0f:bc:d1:ed:84:d3:70:1f:37:4d:bd:09:09:ae:ca:
5b:da:de:5b:3e:90:4b:c8:c3:0e:24:6b:4a:44:27:76:13:ff:
1d:52:d2:8f:44:37:49:f9:a8:b5:65:82:01:19:81:12:b1:ad:
78:a0:dc:ef:36:00:a7:80:fd:00:ec:53:30:35:11:aa:4f:3b:
06:cd:44:c2:35:2d:d2:cb:00:74:d8:93:5b:49:97:d9:b9:05:
3b:62:7c:e2:fd:91:28:8d:7f:da:4e:05:9b:fe:53:f1:69:e2:
f8:0b:dd:d3:56:fa:d4:5c:3c:a6:9e:cb:71:75:a8:7c:7f:1c:
97:ba:94:f3:12:39:b5:ac:78:22:aa:1f:8e:84:33:0e:52:c9:
db:37:17:55:c5:78:81:57:1b:56:fc:c9:06:a6:c2:b7:72:77:
15:09:98:65:34:25:43:a0:55:7b:23:63:91:16:f1:06:41:06:
96:08:2b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 02:31:28 2025 by rpki-client