Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json)
Hash identifier: JyItVMUVmAjUzS5NwqFtTVD3VNnG6tCCHtVW/G6MzmU=
Subject key identifier: B6:AE:79:3B:A6:47:B2:C5:20:E9:CB:C8:E2:FA:D6:FE:54:F3:DD:93
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 019A589C823D3F0AADCD94DB7027AA4868C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
Manifest number: 108A
Signing time: Thu 06 Nov 2025 10:00:43 +0000
Manifest this update: Thu 06 Nov 2025 10:00:43 +0000
Manifest next update: Fri 07 Nov 2025 10:00:43 +0000
Files and hashes: 1: 2JNf8PoETHUWKrlbGvJA_rrI9NI.roa (hash: 1FKPW+J1lE2HkIdpCVRmwjCFGmaaz0tFXqdGn/MO/uM=)
2: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: IlVE5NMu1qN3F5kgQVaQG+yM354aCRYIX27QvydvLR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:58:9c:82:3d:3f:0a:ad:cd:94:db:70:27:aa:48:68:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Nov 6 10:00:43 2025 GMT
Not After : Nov 7 10:00:43 2025 GMT
Subject: CN=b6ae793ba647b2c520e9cbc8e2fad6fe54f3dd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:43:04:10:d1:92:f2:00:be:7c:38:cf:41:
0a:29:8f:e0:97:22:9a:5c:1a:36:51:4e:ab:65:93:
8a:39:eb:01:80:10:8d:6f:65:2a:1c:28:1e:b1:b2:
62:0c:9f:1d:38:b3:b3:39:ad:4f:ce:14:73:e0:9b:
26:ce:33:83:f1:2c:85:32:93:5c:39:7e:2c:06:e7:
0d:20:6d:91:68:85:bc:70:57:8f:7b:aa:62:b5:75:
d4:99:9f:aa:d1:2c:35:7b:c8:da:99:48:ed:80:3b:
bf:bd:95:d1:4c:d2:cf:6c:46:15:67:aa:78:15:30:
11:f9:6d:a3:91:25:0f:3c:84:35:00:9c:f8:fe:e9:
5e:72:e4:0a:34:48:f3:c0:a0:1e:c3:d5:11:bc:98:
bd:51:fe:1c:2c:31:e5:d4:6f:bd:f4:d2:35:79:86:
6d:ca:46:03:04:6a:f8:b8:f6:7c:cf:e3:42:5b:7d:
05:4b:83:26:e1:60:1e:2c:f5:90:01:9e:95:ba:0f:
7b:d2:fd:85:71:5a:2f:31:a6:83:7f:be:1d:61:55:
0d:53:bf:bc:e8:9a:79:96:fd:59:2d:72:76:1c:9a:
a0:7f:64:a1:49:b3:fc:88:03:4d:0a:cb:92:9f:44:
cc:ee:08:3b:e4:6e:6f:e1:87:f4:6c:c8:25:d9:37:
21:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AE:79:3B:A6:47:B2:C5:20:E9:CB:C8:E2:FA:D6:FE:54:F3:DD:93
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:10:9c:1b:6e:69:79:4c:be:0b:a7:1c:ef:3c:ef:75:14:3d:
22:49:75:71:8f:16:66:6a:cd:fc:a8:c3:a0:34:2e:3c:73:8f:
c6:32:ba:8a:8c:ca:6a:5b:65:eb:33:db:cf:9e:88:c4:85:2d:
b4:bc:14:c3:9e:1b:b6:1f:bd:cd:6d:a2:06:b3:73:76:cf:d3:
09:f4:24:a0:fa:18:4d:a0:4a:be:9e:1f:78:75:d9:ae:2b:5b:
90:22:95:d9:3a:a0:72:c8:16:bf:f5:ad:c2:fb:e5:52:af:50:
c6:f7:a5:9b:66:8f:fa:3e:7c:34:e1:94:18:f6:4b:34:77:48:
73:cc:b4:ef:a6:3d:5d:8d:ac:d2:ea:4d:3a:8b:da:b1:fe:e6:
7a:8c:9e:3f:d9:80:f5:14:5c:7b:48:b4:44:33:16:23:c2:0f:
5d:a0:05:31:1b:34:5c:48:23:e0:f0:de:ce:ed:86:cc:7f:22:
37:e7:d7:c0:87:08:d3:ec:38:e1:c5:75:b6:46:b4:18:ef:55:
f5:7a:47:9e:57:34:78:18:aa:71:de:c0:ea:3b:5f:b9:12:5c:
13:68:07:25:c1:ed:ef:3b:70:c6:d6:63:a3:77:e9:21:58:7f:
93:b3:22:4d:65:90:ca:50:27:e0:8c:7e:96:38:30:84:93:1b:
e3:17:4d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 14:27:45 2025 by rpki-client