Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
File: 9pglYdLaF5Avg-_-EySZ-C1S8WM.mft (raw, json)
Hash identifier: oXgV3+1lV6k7ABBBRk+MdysbB0c2vIK4IVx7uMzePbM=
Subject key identifier: D5:D2:83:2C:72:8C:4A:5D:CF:14:B7:6D:5F:F8:FE:97:50:D9:90:96
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Certificate issuer: /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial: 019A71B8040011F55B2F448557EA9277F70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
Manifest number: 14D8
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: 9ab4gsm8HWV3453txi9GuHhETfI.roa (hash: +RCpHHVjRUNbeQhE7D5a86WvNpwACKkVCiWoO5pNIb0=)
2: 9pglYdLaF5Avg-_-EySZ-C1S8WM.crl (hash: rrXv/MiN/yD5CuuzT1FpjKb48jrTX0Locn4oeEtqkR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:04:00:11:f5:5b:2f:44:85:57:ea:92:77:f7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=d5d2832c728c4a5dcf14b76d5ff8fe9750d99096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:d7:df:03:94:ef:e1:e4:2d:5c:14:44:1f:
35:ff:d1:e6:a6:dc:cf:ec:79:d2:80:dc:44:58:5d:
f2:39:d1:ed:22:09:6d:8d:a0:3f:bc:c3:1a:71:9b:
c4:7c:4a:e4:0f:b7:3c:47:f4:d3:b2:11:d7:18:3c:
99:a7:cd:9a:db:a3:59:22:1e:41:0f:75:d6:f0:3d:
d2:06:6e:4d:df:16:47:13:74:bb:7d:37:63:22:d5:
20:ed:f0:7e:19:40:c7:09:5f:26:0c:b6:80:a5:5b:
22:51:6f:1e:15:32:76:cc:ff:09:3c:ba:85:ee:b9:
d6:4d:90:10:71:12:46:e6:57:b4:bc:d0:4c:f0:91:
fc:91:d0:fa:4d:e9:30:94:20:39:56:1c:ad:74:b8:
95:0a:a1:83:35:c0:d3:74:e3:83:e9:56:84:d6:bd:
39:da:43:62:09:ef:3b:75:30:bc:22:67:4d:4a:fb:
f4:29:a0:f2:65:42:a0:38:6a:cc:2d:4e:a0:07:c8:
0a:57:6e:de:c4:f4:61:50:72:dc:82:d5:7e:54:59:
34:28:3b:40:ff:04:cf:a6:99:47:54:d9:ab:9e:20:
f1:be:93:67:c5:0e:d5:fb:d6:3e:6b:72:49:75:d8:
aa:6e:96:59:d2:13:d7:bd:f1:3d:d2:96:67:ff:3a:
f2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:83:2C:72:8C:4A:5D:CF:14:B7:6D:5F:F8:FE:97:50:D9:90:96
X509v3 Authority Key Identifier:
keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f9:30:84:d4:88:e3:59:b8:3d:a6:c0:6f:29:a1:be:3c:85:
7a:11:c3:0f:a2:33:11:3e:1f:af:24:8f:fc:c7:8b:23:1e:d8:
a8:75:2f:5f:fa:79:a0:31:20:81:08:14:4d:a8:d4:44:db:ff:
c3:6d:8c:4c:5d:8a:37:57:20:c8:2f:88:4b:41:09:61:7b:28:
84:c4:0c:1e:1d:14:a4:71:0b:d9:d1:bb:0f:35:30:aa:e6:8a:
b3:8d:82:7d:eb:36:5a:d6:83:85:4f:c5:18:17:74:df:79:34:
12:0e:f2:ce:51:85:86:78:93:e4:33:59:99:57:aa:5c:4c:b9:
57:af:89:c7:99:81:c3:7e:8c:03:d1:00:e7:b9:39:88:e7:13:
e9:09:3f:c2:6f:27:a7:ed:0f:9c:34:f2:68:18:f7:a1:86:cf:
2c:26:bd:42:47:ba:3e:0c:25:0f:35:21:53:e4:a7:bd:43:8e:
da:3b:ab:54:d2:bd:c2:28:d4:45:d0:54:f8:3a:0f:3d:f2:03:
1d:86:2c:57:d3:86:6b:a9:fa:4f:47:34:47:b4:7c:d4:f4:9a:
4a:22:c4:99:db:dc:a5:c0:17:14:d4:4a:bd:86:39:33:bf:b2:
1f:b5:ac:95:44:30:52:ad:97:2f:e7:30:2b:78:5f:3d:12:c5:
14:99:a7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:54 2025 by rpki-client