Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File: 9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier: vfHyjr0hi78BRT5ODic3dUwuFvwN9iO1EdNNzfRmSmc=
Subject key identifier: DC:3B:E0:E2:8E:82:3E:5E:CA:BA:80:F8:13:F4:2C:EE:19:A6:15:BF
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial: 019A7225F210EBD053F62CF0BBF480F67159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number: 1119
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: 2Qdf3KbNG5NqoZJX8HW2axOKIks.roa (hash: aZGBYQ1YtddzlVOGQVr+1nQgozPaUhvPhqEz391ISKs=)
2: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: FtrMvjZRm12n7wEu4I5ia2Y/6FwgbPUZSy05Un06g/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f2:10:eb:d0:53:f6:2c:f0:bb:f4:80:f6:71:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=dc3be0e28e823e5ecaba80f813f42cee19a615bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:44:e0:10:77:ad:bf:10:79:26:85:9c:a8:
31:f4:bb:03:35:5f:c9:c2:11:6e:c9:59:27:3e:34:
b3:e2:95:0a:08:fa:08:96:9b:45:c7:33:e7:55:c7:
52:ed:7c:20:4f:df:ed:86:7c:30:7f:e1:e3:5f:5c:
9b:c0:ff:15:e2:9d:42:f7:69:5e:b4:c2:5b:b5:46:
7c:58:37:18:24:60:e6:9f:d5:67:5b:73:bd:41:5e:
46:4e:be:cf:63:bf:28:79:0a:6e:10:f2:92:61:13:
9a:29:bb:3b:79:6a:14:db:df:5e:01:86:75:ac:72:
61:f8:65:53:b4:f1:91:84:69:9d:c0:73:44:02:c3:
88:59:69:fc:e2:4f:14:cd:dd:0e:86:8e:31:cb:5a:
35:91:82:8a:ee:0d:9f:43:76:ac:b5:94:34:3b:aa:
e9:94:b2:27:8f:92:07:44:02:51:51:24:0a:5e:6f:
39:ac:9c:22:aa:98:80:6d:15:99:91:95:eb:58:79:
af:f0:b1:1c:f4:80:04:9a:9d:50:a4:02:76:82:af:
df:77:a4:db:3a:e4:0b:22:e9:d2:17:6c:79:f0:61:
de:60:f0:6e:ee:08:9d:a6:93:44:26:32:10:bd:a0:
49:2c:52:4c:e0:4b:0a:72:82:67:18:29:a0:d9:2c:
2b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3B:E0:E2:8E:82:3E:5E:CA:BA:80:F8:13:F4:2C:EE:19:A6:15:BF
X509v3 Authority Key Identifier:
keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3a:0a:76:a4:93:f7:30:10:e4:2b:ad:c8:c2:df:f4:f7:d4:
45:b6:d0:47:a2:f7:53:b7:29:0d:a6:18:32:f4:9b:6a:05:f9:
ed:e1:c4:c9:4f:93:de:be:a7:5e:16:91:e5:6a:6b:5f:7e:e2:
d9:ea:87:15:b0:4e:c1:58:ba:c7:d6:4c:f2:ed:e1:6a:af:d0:
c5:0e:03:7d:3c:de:38:b7:d0:6e:43:d0:ec:08:65:04:b6:d3:
54:bd:14:41:9c:82:b4:5c:f5:c8:a5:18:46:01:b7:7e:18:3c:
17:ea:2e:3d:7a:c4:1a:7f:32:93:a9:27:e6:01:d1:77:b9:9b:
6b:38:f0:b1:e6:fb:25:f7:10:70:78:33:f8:d4:ac:04:67:0c:
8b:20:37:b5:d8:2a:39:41:b0:35:33:d7:f4:f8:20:e6:8b:1f:
5e:ad:d5:a7:1f:6e:a8:ba:35:73:6c:a8:dd:22:fe:2e:f6:57:
a9:98:50:20:5c:5a:a6:a5:18:66:0e:6e:4e:41:f0:9c:60:3a:
6c:14:cb:88:c7:6d:bf:86:ed:3a:77:e4:28:20:97:40:b8:21:
65:51:0e:b9:ae:40:15:e7:16:d9:8b:8f:75:8c:93:37:0b:21:
ba:89:4b:97:bd:5e:e5:57:da:d9:0f:a2:23:b6:48:c4:93:ea:
ef:65:b1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:21 2025 by rpki-client