Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier: 4+ZqUXDedhAWqYtUQwDonuhJJb1SAdU311t0+0zj61Q=
Subject key identifier: D6:38:63:6C:EE:21:E8:25:05:E3:AC:50:44:35:97:CD:0A:00:0C:5E
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 019A7149A31B0B95119D5F7AD1C32C4C322B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number: 0DCC
Signing time: Tue 11 Nov 2025 05:00:42 +0000
Manifest this update: Tue 11 Nov 2025 05:00:42 +0000
Manifest next update: Wed 12 Nov 2025 05:00:42 +0000
Files and hashes: 1: 1qWzBwVhmQ6zdPJi5w7aMEYeKoc.roa (hash: QUUw5IgATMBX8godfHfSxzPR3Se/paZBDUtUUYMUESM=)
2: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: 3R/nZJiWTYx2aCqnmD5RaYhM0cgCxBmgTaiOtdRsCNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a3:1b:0b:95:11:9d:5f:7a:d1:c3:2c:4c:32:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: Nov 11 05:00:42 2025 GMT
Not After : Nov 12 05:00:42 2025 GMT
Subject: CN=d638636cee21e82505e3ac50443597cd0a000c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:61:db:ea:98:1b:d9:1a:22:4a:8a:ad:cc:
c5:76:0e:d8:e4:ec:47:14:84:65:1a:f9:c2:04:fe:
1d:a8:c3:cd:92:7a:5f:a6:7f:e0:16:93:bf:89:a1:
96:8e:85:d0:b3:ba:3a:81:04:54:5f:56:9a:14:25:
d5:39:14:91:d4:97:d8:c0:5a:c8:ff:fc:df:47:49:
4a:c9:fa:7a:c6:f2:be:04:a8:54:79:90:4d:94:4d:
32:5c:06:55:dd:28:6e:7b:78:8a:fb:1f:04:a7:d8:
08:60:cd:a1:81:46:64:ad:c6:81:18:52:46:a0:c8:
59:a1:26:49:f8:8b:ea:41:0d:74:50:3b:24:96:27:
f2:6e:fd:50:5d:60:85:77:82:96:14:39:e9:31:f0:
56:7b:23:18:14:94:fa:7b:ed:fa:ce:34:40:fa:b4:
0a:12:f0:71:fe:90:c8:cc:1d:f9:6f:6d:4b:37:b8:
6a:88:a9:b6:a8:70:ef:ff:f4:ea:60:74:21:b0:8f:
06:41:a3:c2:c5:8f:23:6f:db:d4:e8:89:3d:50:6f:
21:14:57:30:54:61:e1:2a:a0:f4:01:be:c1:01:b4:
cc:fc:3f:73:59:cb:b5:43:ce:cd:7f:db:61:d6:04:
d6:de:2a:43:ca:a2:9e:23:34:ec:fb:11:1b:c6:96:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:38:63:6C:EE:21:E8:25:05:E3:AC:50:44:35:97:CD:0A:00:0C:5E
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ea:ab:4c:59:a0:15:18:2c:a2:4b:91:05:01:69:a6:1a:ff:
73:91:6c:ed:97:d5:1f:b3:ed:da:f8:60:5e:3e:b6:2e:95:7e:
87:93:55:54:3c:a4:af:d8:2f:28:55:42:5d:79:12:6c:a5:f8:
43:f0:88:e3:18:3e:58:79:47:dc:fe:f7:34:c2:73:90:6b:c5:
f8:5c:41:8c:1d:91:d6:81:8a:ae:e4:1a:28:25:1a:28:3f:6f:
87:d8:20:73:27:8f:18:78:53:e6:e2:b1:51:90:74:32:49:aa:
da:3d:f3:d6:4b:7f:af:3f:36:c1:04:2f:37:2d:68:90:7a:d2:
60:d3:0b:a1:c0:13:cd:40:8a:35:e7:34:9d:48:96:61:8d:2e:
bd:d3:59:55:f4:dc:04:37:d8:0f:32:b6:01:45:b9:91:72:58:
3e:8d:30:b0:91:bc:4c:39:f3:52:6b:19:6e:dc:11:43:e3:f0:
9a:0b:43:dc:24:5f:32:39:b6:f4:45:12:66:ba:a6:ee:c4:a0:
0c:14:59:83:ed:b2:79:84:11:34:cf:8e:e6:a5:ce:d6:f2:66:
fa:ee:3d:ba:c7:a5:25:c7:2d:0d:c3:70:a8:99:02:d9:3a:60:
13:2c:9d:52:87:06:e4:50:b4:25:f5:6c:d6:fb:3b:c0:9c:50:
10:3c:9c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:18 2025 by rpki-client