Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
File: 9B_-fSl-5OHU0jM1qatKAIjAJdc.mft (raw, json)
Hash identifier: uH0EYSrd2/7b24bBEaCtMpJqiSAyCS5h1dYva+xiRvA=
Subject key identifier: 8E:5A:E8:EC:A7:C3:F6:17:1D:87:EB:63:04:29:D5:7B:FF:74:2C:B6
Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
Certificate issuer: /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Certificate serial: 019A71B8543ED7A430FFA60636533A3147D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
Manifest number: 0CF3
Signing time: Tue 11 Nov 2025 07:01:36 +0000
Manifest this update: Tue 11 Nov 2025 07:01:36 +0000
Manifest next update: Wed 12 Nov 2025 07:01:36 +0000
Files and hashes: 1: 9B_-fSl-5OHU0jM1qatKAIjAJdc.crl (hash: MhgZ2ni7otLYTvIAjS5se9dF02RTuwQjySIP54CjYWI=)
2: PRDF7uUUDEgvhpybsRj704dqk1M.roa (hash: 1hJ8QC4+sDAxjl4A67W+QBueyb9hgkEoDhfUwnkhNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:54:3e:d7:a4:30:ff:a6:06:36:53:3a:31:47:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Validity
Not Before: Nov 11 07:01:36 2025 GMT
Not After : Nov 12 07:01:36 2025 GMT
Subject: CN=8e5ae8eca7c3f6171d87eb630429d57bff742cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:99:fd:af:d0:13:40:92:a1:6f:d3:45:14:
9d:30:c5:5f:f2:b8:89:6d:4b:71:f0:f1:f7:69:e1:
fc:33:60:d6:15:5d:dd:ee:53:ee:95:16:a8:d2:8c:
89:15:ed:44:cc:bd:5d:d4:46:74:2a:69:b9:df:8d:
b6:04:6a:d3:f9:3a:d4:79:3d:06:83:30:80:63:4e:
b4:fc:54:e3:56:cf:1f:d1:de:a4:3a:b1:d4:bb:d3:
fb:89:3e:48:8a:27:8a:e4:53:30:87:ec:f6:0f:2d:
65:fe:26:e9:00:a1:f8:51:90:99:18:f5:10:f4:53:
e3:67:f8:66:c0:61:2a:89:02:ca:e5:53:72:3e:6c:
b4:51:ab:13:38:57:e3:b1:a6:62:39:17:78:1a:ed:
44:0f:f5:af:ce:b9:f5:b9:5e:10:40:70:72:88:90:
3e:83:e6:4a:70:86:2c:d7:a1:82:43:99:13:2a:c7:
d3:1e:a3:cf:14:0e:38:2e:ac:a2:cd:2f:8e:cb:ea:
96:e1:65:14:a2:b1:48:ac:a1:fb:71:13:2d:ea:78:
ac:1a:3c:66:5e:d8:2d:14:d0:14:69:1a:3c:85:0f:
f5:75:3d:0c:f0:87:91:06:17:34:90:6d:6b:e0:f8:
2e:5c:da:c0:7c:84:b4:f4:4f:9c:1e:49:41:f2:0d:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5A:E8:EC:A7:C3:F6:17:1D:87:EB:63:04:29:D5:7B:FF:74:2C:B6
X509v3 Authority Key Identifier:
keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e5:90:75:1b:3b:93:b3:c3:8c:a5:25:cd:9e:a0:98:ab:29:
03:a3:3f:b8:7f:c0:3b:f9:81:8b:8c:8f:e5:68:1a:f2:77:be:
55:30:e2:e4:b0:7d:3e:bf:f1:a4:2a:d9:6d:fa:86:33:46:7d:
c4:17:aa:b3:9c:ef:be:c7:f5:21:82:81:55:db:17:cf:44:4b:
d6:be:2f:42:ae:58:ff:5e:f4:d1:67:2a:ed:9d:29:c7:ec:8b:
1c:3f:12:e0:ad:19:71:07:0d:18:f0:d5:e3:d5:45:ad:ba:d8:
85:b3:19:f2:b5:99:a5:84:b0:28:18:06:47:7a:53:ef:ee:77:
a6:2c:35:15:be:c6:ce:be:18:44:68:66:71:e8:ca:ee:b6:d4:
41:0d:75:37:01:47:36:70:04:56:db:3e:ac:b2:2c:f3:93:3d:
81:2b:e7:ce:34:ca:18:fa:85:fb:ed:00:15:5d:e5:66:79:a0:
b9:54:96:a8:13:d4:cc:47:6e:a6:d1:9b:d5:08:09:57:3b:b2:
73:22:50:07:10:79:7f:1f:34:f7:14:fd:0e:59:f7:91:c3:d5:
a7:01:88:45:80:b8:78:d6:d3:4c:34:8b:ee:cc:ce:30:6f:e3:
c6:83:70:79:71:ec:f5:93:2a:a3:1b:7b:11:e9:c1:c4:8a:a5:
48:02:17:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:46 2025 by rpki-client