Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier: 4uJDBVvg6jxnO0CL/vu3PVw4FQARYzgNW6A6q/7I4WQ=
Subject key identifier: 27:DA:80:7C:FF:29:9C:81:80:7F:7B:B5:6F:B8:84:B6:9C:24:B2:E4
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial: 019A725CA2977ED614BDC6F33D979F5F2E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number: 1226
Signing time: Tue 11 Nov 2025 10:01:04 +0000
Manifest this update: Tue 11 Nov 2025 10:01:04 +0000
Manifest next update: Wed 12 Nov 2025 10:01:04 +0000
Files and hashes: 1: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: t/7JSVDcDcp5zmdSpGGnO0o9z1gFEo3D7y/inkq6w+M=)
2: DaSMaWZYfnj6ceinzYPrOhJJgQA.roa (hash: tLMLMu2mXxzV//rWf7p3b0LjE6TE93dgy9UoXP39ok8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a2:97:7e:d6:14:bd:c6:f3:3d:97:9f:5f:2e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Validity
Not Before: Nov 11 10:01:04 2025 GMT
Not After : Nov 12 10:01:04 2025 GMT
Subject: CN=27da807cff299c81807f7bb56fb884b69c24b2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:e7:75:9d:59:46:79:0f:e4:c4:c9:c9:85:
18:dd:a8:4e:c9:17:a2:30:2a:03:91:79:f0:94:3c:
f8:ee:ae:fd:62:df:0d:f2:b1:3c:48:2d:ef:7d:d2:
f9:ea:6b:36:6a:ef:be:26:3c:70:30:18:d8:df:e3:
08:3c:af:e2:f5:87:ac:39:52:ad:1a:e3:39:14:a1:
8b:d4:84:85:4f:7e:e4:c1:e4:b7:38:10:3a:ef:3e:
73:99:42:7a:6e:e2:a0:6d:08:a9:3c:7c:4a:1e:87:
e1:62:07:47:45:18:63:18:f2:a3:df:d9:aa:e9:58:
52:be:cf:4c:a6:fd:9f:17:78:36:aa:12:2c:ec:1a:
28:c9:c7:0d:e2:c1:83:dc:38:18:54:12:7d:d3:27:
29:af:73:f3:70:d5:2f:67:90:fc:b3:01:c5:5b:c7:
17:65:1b:ad:2a:92:0b:f7:fc:76:58:90:04:4d:52:
61:36:1d:db:ff:06:92:77:40:ce:f2:f6:b9:67:48:
6f:8e:dc:5c:b1:c4:e8:4a:01:22:f3:4c:eb:3d:24:
86:03:65:f1:33:26:02:37:eb:6f:d3:2e:59:89:c7:
8b:cc:ce:cc:ca:09:05:5f:bb:d5:84:0f:13:dc:7b:
4a:a3:c3:a8:b0:12:39:c0:94:eb:c9:e0:41:95:92:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DA:80:7C:FF:29:9C:81:80:7F:7B:B5:6F:B8:84:B6:9C:24:B2:E4
X509v3 Authority Key Identifier:
keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6e:06:c2:69:29:4a:b4:a3:b1:18:df:2b:0b:3c:78:68:80:
d8:06:7f:a7:49:39:7f:c2:50:28:bc:24:dc:bd:c6:c5:8b:b2:
25:f6:29:1f:c9:c0:59:0f:54:95:38:18:9c:85:94:b8:68:f2:
87:53:8c:7e:ab:9f:c8:36:83:c2:3b:9d:cc:c1:87:b4:cf:fb:
fe:64:bd:f3:d6:9d:49:6f:55:c6:b9:8e:da:ec:c9:ec:01:0b:
7a:72:04:c3:5a:68:f1:65:77:b3:e8:96:1d:a4:af:34:73:48:
fe:7c:06:43:08:10:66:97:f4:56:d4:88:2d:67:f6:e6:d7:c6:
d2:16:31:34:fd:2e:59:e5:59:09:4d:a2:51:76:9d:d8:d3:b0:
8c:48:40:ff:4f:6e:fa:ed:8d:93:c7:74:bc:7c:17:49:e5:f9:
11:f8:cd:b9:de:b7:1f:2e:1f:1e:93:70:6d:50:5d:a0:6f:d6:
21:9e:77:dc:69:73:e0:86:b7:e7:31:ff:4c:55:be:61:74:f9:
82:1a:68:66:58:65:2b:61:26:2e:46:55:79:e2:de:41:0e:0f:
8a:c8:b8:48:c8:f1:7e:51:ee:3b:4b:33:3b:34:19:62:27:0c:
d1:c8:de:2b:d6:cc:a0:4d:b3:e9:d4:b4:3b:05:6a:dc:e0:75:
84:e0:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:26 2025 by rpki-client