Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json)
Hash identifier: n30BKinrNh9HFdebX5xt/SGVeV8lXuUZE3R+ReUwrOY=
Subject key identifier: F1:26:05:AA:A1:38:42:59:94:28:E2:51:5A:1C:56:8C:3E:D8:CD:4C
Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed
Certificate serial: 019A71EE7CFAC2B2F4E3FFF9E4352D9454C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
Manifest number: 042A
Signing time: Tue 11 Nov 2025 08:00:46 +0000
Manifest this update: Tue 11 Nov 2025 08:00:46 +0000
Manifest next update: Wed 12 Nov 2025 08:00:46 +0000
Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: jQ6L5SVbeZoXaULaMlk8Sk2neUdI9LNkCLn98NB1fcs=)
2: jYwiLy6C8PrH1zmVRebb5xoCcHg.roa (hash: B/91TwKxBsOKKHQE6s1Ydkjq/nj0hd3T+71Ppy1e7kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7c:fa:c2:b2:f4:e3:ff:f9:e4:35:2d:94:54:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed
Validity
Not Before: Nov 11 08:00:46 2025 GMT
Not After : Nov 12 08:00:46 2025 GMT
Subject: CN=f12605aaa13842599428e2515a1c568c3ed8cd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:f8:ed:ee:6c:79:50:51:6b:27:58:ec:88:
3d:27:17:5a:32:bc:76:3c:18:2e:02:67:5e:73:a2:
c2:a4:b6:2b:a7:8b:7c:56:57:af:06:e1:4d:7a:18:
56:95:57:93:41:dd:6a:40:56:62:17:da:97:60:82:
00:fc:fe:61:0e:70:e0:b3:a2:7f:06:07:3a:cc:e0:
9a:83:82:80:58:a7:c8:d3:38:09:87:45:d8:59:f5:
f0:58:20:0a:07:6c:58:e3:1c:87:3e:d1:f3:06:99:
8c:cf:6e:2f:d5:3e:f4:32:ec:d7:cc:b9:00:8a:5c:
45:d1:9e:6a:b1:f5:a9:dd:e3:dd:cb:1d:8a:ed:52:
6c:96:7e:44:cb:99:9c:0c:7c:2e:91:be:15:cd:5b:
81:50:6a:af:32:a3:07:e7:4b:a9:0a:61:af:52:6c:
93:af:9b:1e:59:b2:2c:09:47:c8:18:a5:94:fe:83:
04:b1:ac:fd:ee:dd:1a:b4:db:20:ce:60:e1:17:3d:
92:44:c7:86:3b:3c:52:41:d9:f2:88:b7:15:96:c6:
2f:d4:70:f3:47:7d:1d:a0:29:95:15:8a:89:35:8f:
df:b6:82:4b:37:a1:88:eb:0d:a1:dc:88:60:f5:71:
4d:ab:ef:94:04:33:e2:59:6a:51:ec:2c:a0:d5:a3:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:26:05:AA:A1:38:42:59:94:28:E2:51:5A:1C:56:8C:3E:D8:CD:4C
X509v3 Authority Key Identifier:
keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:44:68:fc:5f:e7:06:45:c8:b3:e0:62:bc:1f:b1:49:37:9e:
13:36:fd:77:fd:19:a6:01:11:f4:c6:df:44:e2:5d:8e:73:a1:
3f:af:94:ea:a8:f3:18:fc:fc:29:4a:34:8f:0d:e6:01:5c:e3:
e1:af:e8:3d:23:d5:57:b4:61:3a:55:92:15:92:89:85:f1:a7:
6b:95:9f:16:a4:84:a1:eb:8b:9f:96:3c:80:19:3c:7a:b2:23:
9c:c1:8b:0c:fd:d8:5e:5a:6e:d3:d0:54:58:5d:b3:d3:66:4e:
a4:b5:3a:16:c8:72:31:22:d1:f1:37:a5:f7:ff:5c:33:2c:11:
ab:82:d7:ea:c1:a5:e9:97:89:a0:e4:f9:80:82:72:3a:04:bc:
f7:a6:aa:61:91:82:b8:14:d4:78:4e:a9:e6:23:a6:d0:2b:65:
06:a5:42:75:48:f1:cf:92:74:e3:1a:f7:b1:ab:af:d9:f7:9f:
68:c4:28:22:85:10:8d:00:c2:96:d6:c8:0f:68:c3:cc:2c:ee:
95:07:fe:96:b1:50:66:90:1d:cb:6d:0d:68:09:f8:ed:bb:da:
cc:85:62:18:bc:f1:ac:03:4d:3e:fa:57:b2:72:4b:b3:cb:1a:
67:99:5e:96:b1:4d:26:cf:c1:bc:9d:20:0e:1f:22:9d:4c:6f:
9b:ea:3f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:52 2025 by rpki-client