Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: LxTDD77y+6TxGwUkNSEY++aYUn/Rzl4hfmLh2k90cso=
Subject key identifier: B1:58:44:5F:58:D8:AE:4E:42:3A:A0:18:A9:D1:07:89:47:38:0D:98
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 019A7180986065C6B2367CA4B36B7CC82570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 04B9
Signing time: Tue 11 Nov 2025 06:00:44 +0000
Manifest this update: Tue 11 Nov 2025 06:00:44 +0000
Manifest next update: Wed 12 Nov 2025 06:00:44 +0000
Files and hashes: 1: TFa2ZOwxN7oGU3_kx6uIZniyCkM.roa (hash: HhfxSeGnWIjZES5ZMXYca+rgo27hAD/QZjezzNFWuIQ=)
2: TvEkbwZCtiDMDPynp6wy2daPG_8.roa (hash: 6+0k1c0jemPs8iK4NO+2VO17+OLAQGxnnHN1+3jUmGw=)
3: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: 6/9SFy2Osfh+OFV0hSlW+mxi3cbB6u8Wq4GBSxpPKzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:98:60:65:c6:b2:36:7c:a4:b3:6b:7c:c8:25:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Nov 11 06:00:44 2025 GMT
Not After : Nov 12 06:00:44 2025 GMT
Subject: CN=b158445f58d8ae4e423aa018a9d1078947380d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:27:f0:59:71:8a:c4:50:69:b5:d7:63:ef:
ed:10:d5:6d:dc:6d:ee:c5:d0:ac:22:30:13:56:17:
7a:d3:63:26:3e:a8:58:73:7a:5a:d9:46:fb:87:ef:
3d:df:d9:e1:bb:19:b7:e9:0d:c1:fd:80:db:c6:de:
1e:9c:a8:cb:dc:14:6a:b9:b8:9b:1c:13:46:59:29:
f4:c5:35:0d:8b:71:74:17:39:b9:f8:40:e4:31:40:
90:a2:47:c5:42:07:5f:4b:ef:a3:c9:a0:1d:58:da:
41:44:59:13:38:a8:86:36:e8:27:b8:34:f9:f8:6b:
d9:a7:1e:81:aa:ac:c8:1b:fa:fb:84:61:79:45:27:
bc:61:72:69:a4:73:c3:0e:f1:23:4b:79:ca:c2:6b:
de:81:06:fe:96:6e:73:8d:9d:40:d1:48:79:86:eb:
26:6d:85:86:b6:00:b5:7d:c5:8c:ad:ef:c2:c3:83:
cf:81:76:0c:5f:91:b5:58:8d:45:0c:8b:f8:f7:4a:
9a:f0:71:7b:33:75:62:1c:e6:42:93:13:be:d3:a7:
1c:1d:31:57:7a:05:84:b1:e4:bf:bb:44:f2:50:4d:
08:89:50:98:37:31:27:c8:76:71:11:31:16:8d:74:
53:93:8e:1a:54:1c:b4:aa:d3:09:3a:15:2e:f7:66:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:58:44:5F:58:D8:AE:4E:42:3A:A0:18:A9:D1:07:89:47:38:0D:98
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:21:54:b0:fb:24:22:52:c0:f6:ec:37:8d:49:ec:c3:6f:0a:
cc:6e:11:8e:07:17:40:63:30:57:f5:35:d6:47:29:a1:58:df:
70:c6:c8:57:8e:54:3e:72:c9:6f:cf:9b:d5:89:3e:01:34:c3:
2c:8d:aa:6a:30:1e:89:a0:00:24:26:a1:19:67:2c:b7:fc:d3:
ba:e6:8f:7c:fa:30:6a:14:4c:d3:16:87:38:1b:54:4a:fa:09:
dc:31:75:4c:7e:81:6b:94:11:55:80:a0:22:c8:4b:1e:48:cc:
ab:5f:5b:94:50:f7:b0:9f:4e:c9:ab:98:56:4b:dc:e1:28:56:
db:4f:1a:76:9d:d2:0f:a1:de:03:5a:35:07:0b:b5:a0:80:79:
c0:34:4a:2a:f7:df:5f:fe:12:4c:ad:83:15:7e:81:70:9d:84:
15:a8:1c:cb:3a:ee:9d:05:78:26:b5:f2:ec:34:25:f3:b3:c4:
d4:b4:c5:ae:9d:67:f4:b1:8e:92:a9:8a:e7:bb:30:34:0a:67:
b2:b5:e6:83:92:f9:25:d7:f1:13:0b:fc:1b:ad:66:2e:89:8d:
a7:1c:96:5a:3e:43:52:8b:3c:24:cd:3e:2b:6c:c0:92:1d:b5:
5c:ec:d9:28:4f:0e:22:5f:6b:cb:e7:af:7c:46:47:25:00:4b:
c0:46:5c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:52 2025 by rpki-client