Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: qyafCCy2Wcs3+Y4BPgnj2FnGY2s5Hrdfh0cBhxYbOZI=
Subject key identifier: 48:A8:3C:7D:95:17:42:61:27:BD:14:98:31:93:13:17:FB:46:0A:44
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 019A299E5DB8D2247E072177818AB5EF08DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 080A
Signing time: Tue 28 Oct 2025 07:00:35 +0000
Manifest this update: Tue 28 Oct 2025 07:00:35 +0000
Manifest next update: Wed 29 Oct 2025 07:00:35 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: fqbyonXQAv6lGxJAPu+Vylzg8DA5U2wh/5qCr7lOxg0=)
2: K7A7C17ACPryQjif4dPHFWCYnmw.roa (hash: yO751NJRBOSn6gMdo40XzsiJt+C4xy6LseVpnpZi3tM=)
3: nkm_AqdgrcdDszFPZGQsvTeQ99w.roa (hash: tWZj3SfE+CRbF9Ic1OICFS30cFtSOef9JMakRYCQj78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:5d:b8:d2:24:7e:07:21:77:81:8a:b5:ef:08:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Oct 28 07:00:35 2025 GMT
Not After : Oct 29 07:00:35 2025 GMT
Subject: CN=48a83c7d9517426127bd149831931317fb460a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:02:c9:40:93:62:57:15:a0:94:dc:46:63:
09:a6:53:93:98:d6:92:47:3c:cd:a3:00:74:1d:9a:
ed:36:69:d5:f5:57:93:fd:c8:72:ce:17:2b:6f:c7:
f8:9f:ec:fe:78:9a:6b:64:08:91:eb:c2:b5:da:02:
03:96:5e:d0:5f:5f:c8:40:ab:47:5e:40:f3:b7:ca:
af:0e:07:54:e8:a6:7f:06:43:f6:d9:ff:85:35:c4:
0c:2a:c9:fd:75:07:ae:81:4f:7f:02:8a:1a:ab:7e:
cc:37:d6:da:d1:ba:e3:70:22:c5:05:63:d6:df:90:
0a:ae:63:ba:69:98:77:f6:30:b9:af:0b:7a:2c:58:
94:2b:b9:28:cf:2d:8e:74:8a:4b:ef:71:4b:ef:0f:
a4:f8:c1:a7:fc:de:a6:d5:86:c4:c0:c1:17:64:42:
5f:aa:90:82:f4:12:87:c6:1c:5b:0a:8c:ea:fb:b3:
4c:21:72:d4:cd:20:49:2e:13:3d:c2:5b:34:52:77:
c1:cd:20:ed:e9:7d:07:88:6a:44:12:b7:5d:11:0c:
f1:e0:f9:60:54:a3:8d:36:b0:1b:64:46:7d:75:0c:
f9:a4:ae:9e:67:57:49:b6:11:b0:2e:4f:45:2d:3d:
ff:61:8d:5c:88:4b:83:36:c0:25:36:d7:ca:f4:72:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A8:3C:7D:95:17:42:61:27:BD:14:98:31:93:13:17:FB:46:0A:44
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b3:c3:a7:2e:a3:39:4c:28:c4:0c:80:68:8f:39:4e:cc:d0:
4e:75:15:8b:e3:c9:c1:44:ff:67:16:c8:a4:22:61:46:a2:0a:
fd:68:44:dc:b4:44:64:66:9c:22:46:ce:42:ce:3e:0d:71:27:
fb:1c:42:28:8d:c7:9c:19:2b:21:d6:46:03:e3:38:61:e9:2f:
a5:f7:22:f4:fa:8f:c7:f6:b1:6c:46:93:d2:f0:61:c4:95:3a:
97:1b:12:a2:b0:68:c0:c0:88:06:83:9c:21:d5:a9:a7:bc:37:
54:77:35:2c:b7:23:f2:4f:a9:38:38:12:6e:1c:47:29:73:cc:
9e:09:a9:50:9a:75:28:1e:6c:1c:a0:b9:d2:3e:49:b9:a4:e3:
00:c5:bb:4e:74:b6:77:a3:41:75:57:1e:22:ce:b4:cf:dc:1e:
de:ce:c0:10:83:67:69:75:47:ff:b0:69:47:cd:b7:63:c8:8d:
de:0b:b3:24:b8:ee:8f:c1:e2:8e:dd:bc:9f:e9:e8:b8:20:0a:
d0:41:29:dc:94:85:06:d3:23:72:9d:fb:ec:d0:14:0b:b1:e0:
ee:5a:4d:49:17:fa:fd:51:a0:c5:d8:b6:d0:cd:59:b5:5b:51:
a8:ab:01:45:a7:01:12:19:34:69:a9:26:3d:1a:b9:23:a6:ae:
77:b3:0e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:14:22 2025 by rpki-client