Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
File: sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json)
Hash identifier: qmNOPjDw919C4+//yHKh9d98iuceETPmKtvtd561ejs=
Subject key identifier: 97:E6:6D:BD:7E:A0:95:AF:F9:9D:16:E8:AB:9C:54:3E:C0:FE:C6:E4
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial: 019A71B7A1F7034709EC9A2D81FD37A5E414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
Manifest number: 0AC9
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: 0YQNQfPH4Cu72DoID5FMdAcNaLI.roa (hash: spBps2jYr/x0LCQGlcWxdN+sgAztOxCYMMvfbn6x0Mw=)
2: 6h5fVqp2myypb-eBCHxV-qnglhk.roa (hash: ZaO1YIuZK1aJ4bq0FVDrgZWOhjGCW0XbzAeErXreqcU=)
3: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: Ps9bWLL1vyRRvSpsnn6Exd2czJEW4VDnVYPg5HA3iRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a1:f7:03:47:09:ec:9a:2d:81:fd:37:a5:e4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=97e66dbd7ea095aff99d16e8ab9c543ec0fec6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:8f:a9:5d:8e:4c:f7:a6:88:56:d7:e4:66:
bc:98:da:10:69:53:24:ca:57:df:56:92:1d:e9:16:
52:e1:bc:6c:45:36:92:d3:80:89:73:b3:be:8b:f6:
18:70:89:29:d9:d8:0a:de:32:df:de:f9:7b:f5:ce:
e9:87:60:5b:a1:f1:fb:86:50:c9:64:6b:5b:bb:88:
1c:9e:44:2f:34:20:1b:2e:1d:57:8d:f9:dd:6b:8b:
d6:b8:39:14:d4:c2:cd:f9:28:b8:1f:98:b4:c3:c7:
3b:17:87:4f:a2:8b:c3:3e:09:1a:80:b0:3b:e3:8d:
9e:d0:a2:e7:38:ff:55:29:a8:ca:69:cf:f2:b7:cf:
93:7d:a6:f0:d4:70:63:af:b5:40:57:44:5e:bb:7b:
76:a4:ea:df:45:2f:1e:0b:d9:13:f1:04:8c:cf:e8:
a1:24:16:6f:6d:51:2f:0e:bd:c0:7b:0b:28:5b:a5:
cc:dc:e1:28:08:43:7b:3e:ce:d2:a6:04:35:d4:5b:
c4:05:e7:39:c1:37:07:6f:1a:a9:80:78:68:16:5d:
0c:49:d1:19:04:82:6f:a2:eb:a5:64:57:ed:aa:93:
7a:10:f0:6f:49:00:b5:ff:88:2f:7e:72:d5:3b:44:
a6:dd:23:33:0b:44:aa:6e:6c:48:a1:8f:34:15:84:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E6:6D:BD:7E:A0:95:AF:F9:9D:16:E8:AB:9C:54:3E:C0:FE:C6:E4
X509v3 Authority Key Identifier:
keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4f:c9:99:0f:5a:af:4f:43:b9:9d:2d:bd:57:62:8a:77:7d:
f5:1a:26:cc:6e:93:04:8d:a7:5f:4d:5a:1b:0b:49:57:08:36:
7a:fd:11:2f:06:b2:e0:d3:1c:f0:d4:25:3c:72:42:7f:40:3c:
20:e7:b9:9d:4b:b0:31:4b:fc:56:21:cf:5d:5e:5e:0c:60:12:
ad:4d:87:e1:ce:e5:40:78:aa:fb:cb:84:7c:46:fb:1a:1e:67:
d7:4a:6e:96:1e:df:bc:a6:36:c5:28:1b:ca:6f:56:44:1b:bc:
a6:8a:d8:e8:29:86:80:e9:cd:5c:10:2c:74:db:8b:fc:73:1e:
b7:7a:cc:67:18:5e:0e:84:09:0f:01:8a:cc:1c:dd:a4:ca:4b:
1a:cc:28:b3:82:2b:42:87:af:ae:12:f4:78:d0:91:c9:e4:ba:
31:25:0e:d9:5e:f6:19:9c:af:93:fe:e8:ea:55:09:9a:7f:69:
8c:23:ef:dc:6d:56:20:f3:d1:16:33:66:24:c3:f9:70:df:f5:
05:ae:0e:ab:5c:91:1e:94:74:64:ea:03:0d:cb:6e:d1:36:8f:
e2:24:7b:42:57:19:ec:39:41:3c:69:bd:c0:7a:43:cc:ed:10:
1c:3c:21:28:a1:65:b3:a4:a1:40:a9:d0:13:3a:12:83:96:8f:
4b:7a:2f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:05 2025 by rpki-client